last executing test programs: 1m57.685801991s ago: executing program 2 (id=2284): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)=ANY=[@ANYBLOB="00000600020601000600000600000000000000000e0003006269746d02003a00e181085adc5c7e0c24e4969aa3d65b1f5c61b0a09b5fd8c4fd7c133b5e668cd16d4d01b04ce8c435dcd1e362078eb4a0fe33bfe6d0c2265d092d000000000000000400000000876252e8418f1dd663b4ff8bf9ee8c4665"], 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xb, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r2, r2, 0x41, 0x2, &(0x7f00000001c0)="0090", 0x48, 0x1, 0x7, 0x8, 0x8, 0x1, 0x0, 'syz1\x00'}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000001000)) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x11) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000040)=0xfffffffd, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f00000000c0)) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="448000000000000000bd7000000000090000004a", @ANYRES32=0x0, @ANYBLOB="c32f0000000000002400128009000100626f6e64000000001400028008000f00ff0000000800050001000080"], 0x44}}, 0x0) 1m57.330068963s ago: executing program 3 (id=2290): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0x200, 0x4) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)='\'', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000014c0)="44b896", 0x3}], 0x1}}], 0x2, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m56.084761708s ago: executing program 3 (id=2294): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x38, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x4, 0x9}, {}, {0xe, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) r11 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000001540)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xa00}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {0x5, 0x0, 0xb, 0x2}, {}, {0x4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0x1001, &(0x7f0000002e80)=""/4097, 0x0, 0x9, '\x00', 0x0, 0x0, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) write(r9, &(0x7f0000000000)="9882e70131b512e63686ac1bbdd3a351e8247a1dd5d23b46bd2d3693c93c8482b998977f64868edc9c6c9dab0db4ea64a176f96e0f15fc4365969b0bfc85c0516060c1bdd5e0a8230406c3b2a637577ffe3607fcb7ac7cdb8f642361249819d1c0c24464960b41c80b604ed619922900000000000000", 0x76) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r12}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 1m55.343621832s ago: executing program 2 (id=2296): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000) unshare(0x2c060000) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtfilter={0x46c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x43c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_EMATCHES={0x104, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0xd2c0}, {0x0, 0x5, 0x7}}}, @TCF_EM_IPT={0x34, 0x3, 0x0, 0x0, {{0x359f, 0x9, 0x3ff}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x15, 0x5, "d128be47491207a500026fa0e16dde76bb"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x94, 0x3, 0x0, 0x0, {{0x2, 0x0, 0x3}, "e445ef8ddba2d24479a52789b4cb566a0ce5a32ddb92e89c66cf45c59a8b2422e80ecab561f72357741710446bf02abca4a6f51e129d3ff769246a03ea53ccae7aa51b758eb1eea382eabc55faa8101a1dfc84cf99e9555ed54f918ebb67d441ee3dfb1741c2e32f5d6d52d5a1ec45b4a4c5f7cebce0465ae68ee70f3dad8331dd8e39e52be1f9"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0x2c}, {0x2, 0x2, 0x3}}}]}]}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0x328, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb4, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x8, 0x81}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x2}, {0x0, 0x8, 0x777, 0x81}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x3, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x3}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_LIST={0x270, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xd4, 0x1, 0x0, 0x0, {{0x1, 0x9, 0xa62f}, [@TCA_EM_IPT_MATCH_DATA={0xbd, 0x5, "f4421ebe628bcc2ab778426a737f3b217008fc8e5e4a7e8236fb87da0331f9c8a4a2a0f6b909a11591d6d883d7b7486f44f491a5b1b94639f060f0bbc46bf637562e6f93c420cc7813a3960597e199a9daefb074375cdaf24311e5dae538ea8b7c021f3605ef6b2e9bcbc5459d7df27c805e9db23454f29066bf7f225083e46b07f06f5405709cb7e6b64d9a55b6b220413b7439369cfb174cf4f209843e227a7cc8b40f8f6d0eec82ff18a5de5ff12866bf15d76aaa073176"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}]}}, @TCF_EM_CONTAINER={0x18, 0x3, 0x0, 0x0, {{0x6, 0x0, 0xff}, "39368224afc5ce836775"}}, @TCF_EM_META={0xa8, 0x1, 0x0, 0x0, {{0x1, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x1b, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="e26be5", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="d6c0e786", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="1588", @TCF_META_TYPE_VAR="f4475017", @TCF_META_TYPE_VAR="ebd3"]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_RVALUE={0x28, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="85", @TCF_META_TYPE_VAR="4777cadcf4e7", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="06a17e80d6", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x2c, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR='>', @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="0c82b7d6267c31", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="5aacd83a", @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_CONTAINER={0xbc, 0x1, 0x0, 0x0, {{0x8, 0x0, 0x4}, "04ffd0969fd154675c6e27581263532ec2d2145c2ebb0e0b19b11fd13be19a8e018b64da72bcf199f61bbb9c0864099f1b9e5ed2f9b1958908b1f2f32ff0d5ae623720ceb072ad5750c019a712ba348262e050dfce631592813b8fa1c04687f50559ab46987231eb901d6c5730646f8a38e72a0c9aa27bb9674bc7f0c5f7eb0239ced9102c6ac8d42c7951b7119e3ca76deb043366ad5dcbd933b38af39e7aa69f84bae2f223513a8023d2cb2be10f"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x800, 0x3, 0x9a}, {0x6, 0xe0, 0x1, 0x8001}}}]}]}]}}]}, 0x46c}}, 0x2000c800) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m55.309173938s ago: executing program 4 (id=2298): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x5865, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$packet(0x11, 0x2, 0x300) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) mmap(&(0x7f000027a000/0x4000)=nil, 0x4000, 0x200000b, 0x8010, 0xffffffffffffffff, 0xffffc000) (async) mmap(&(0x7f000027a000/0x4000)=nil, 0x4000, 0x200000b, 0x8010, 0xffffffffffffffff, 0xffffc000) socket(0x40000000015, 0x5, 0x0) (async) r5 = socket(0x40000000015, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@func_proto, @struct={0x2, 0x2, 0x0, 0x4, 0x0, 0x6, [{0x4, 0x2, 0x1}, {0x4, 0x3, 0x4}]}]}, {0x0, [0x5f, 0x5f, 0x0, 0x2e]}}, &(0x7f0000000f40)=""/4077, 0x4e, 0xfed, 0x2}, 0x28) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, &(0x7f0000000300), 0x4) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000100)={0x2, 0x9, 0x3, 0x7, 0x2, 0x8, 0x7, 0xd279, 0x0}, &(0x7f0000000180)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000001c0)={r9, 0xc0, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1000}, @in6={0xa, 0x4e24, 0x5, @empty, 0x4}, @in6={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, @in={0x2, 0x4e22, @rand_addr=0x6}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x5, @local, 0x800}]}, &(0x7f00000004c0)=0x10) sendto$inet6(r8, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) (async) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r10}, 0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000500)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@ipv4_newroute={0x30, 0x18, 0x800, 0x70bd26, 0x25dfdbfb, {0x2, 0x14, 0x0, 0x3, 0xff, 0x1, 0x0, 0x7}, [@RTA_MULTIPATH={0xc, 0x9, {0x0, 0x10, 0x4, r6}}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x30}, 0x1, 0xba01}, 0x810) 1m55.081961889s ago: executing program 4 (id=2299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) (async) r2 = socket(0x11, 0x3, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000200), 0x4) (async) listen(r3, 0xfff) accept4(r3, &(0x7f0000000000)=@sco={0x1f, @none}, 0x0, 0x80800) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'veth1\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0x8, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES16=r1], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x10) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042"], 0xfc}}, 0x0) 1m55.025353509s ago: executing program 3 (id=2300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m54.93164376s ago: executing program 4 (id=2301): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_emit_ethernet(0x69, &(0x7f0000005a40)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x33, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], "6be2c6"}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4048881}, 0xc000) syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/user\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000280)={r3, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newtaction={0x4c, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x5, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x6, 0x6, ' \a'}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x8800) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m54.810493418s ago: executing program 4 (id=2302): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x4000}, 0xfffffffb}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x30d}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044001}, 0x4054) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0) close(r7) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000100)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r9) getsockname$l2tp6(r7, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000580)=0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f000000040000000800000009"], 0x48) r12 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r11, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r12, 0x2}, 0x20) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r10, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8d4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x69}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'batadv0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "8a5e322d8e489c231db446dfce5034a3625a1060961a5c8e8ebee289dc9b81c6", "f22ad97c8d000000000000007a03b2400b00", "24d1030000000001b36853e70000b4b9f979a100", "16960bf75c8ad1e4d903c98b4613a024b2f65c2cdd5efe4157a125325c262ce4", "6a272fe447160298c7b816cd3dec35bdef00", "2600000043125300", 0x2, 0x2, 0xfffffffd, 0x7ff, 0x6}}) bind$tipc(r0, 0x0, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0xfffffe93, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 1m54.560034168s ago: executing program 3 (id=2303): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) socket$caif_seqpacket(0x25, 0x5, 0x3) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000a10000000000000000000010851000000600000018180000", @ANYRES32=r2, @ANYBLOB="0000000000000000660000007fffffff18000000f8ffffff00000000100002019500000000000000360a00000000000018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) listen(r1, 0x5) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x6, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b50200000000000085000000860000007573922fa62ab7f7bd3a00f3a9e9594b379ca7c85eeca8658f25dc9a025932dc1ca09233e3395225986827b8b2ccc2d725c6e2a49bc80fcb86c6444554c001a74e2c999a3aa2f5b747f89f05b57788d360613473b60681d6cbcf6dc7a35ff4c2050636cf8f93a18d3c02a39ce80ea99b2a92a2a17e7e76f7f342e33044dd537075397dcde1f27021ebfb759c3d900c6b314aa46343702348deeadde484f7968379de00"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0xf5, &(0x7f0000000640)=""/245, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x0, 0x4, 0x5}, 0x10, r3, 0x0, 0x0, &(0x7f0000000880), 0x0, 0x10, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850038f4d3c90000b700000000000000185300200d0000000000000000000000950000000c92940a"], &(0x7f0000000ac0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0xdc, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x80, 0x8, @vifc_lcl_addr=@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb02f8180000000000005e34000000000000fc"], &(0x7f0000001f80)=""/212, 0x1a, 0xd4, 0xa}, 0x28) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_hci(r4, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) socket$inet(0xa, 0x801, 0x84) (async) socket$caif_seqpacket(0x25, 0x5, 0x3) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000a10000000000000000000010851000000600000018180000", @ANYRES32=r2, @ANYBLOB="0000000000000000660000007fffffff18000000f8ffffff00000000100002019500000000000000360a00000000000018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) (async) listen(r1, 0x5) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x6}, 0x8) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b50200000000000085000000860000007573922fa62ab7f7bd3a00f3a9e9594b379ca7c85eeca8658f25dc9a025932dc1ca09233e3395225986827b8b2ccc2d725c6e2a49bc80fcb86c6444554c001a74e2c999a3aa2f5b747f89f05b57788d360613473b60681d6cbcf6dc7a35ff4c2050636cf8f93a18d3c02a39ce80ea99b2a92a2a17e7e76f7f342e33044dd537075397dcde1f27021ebfb759c3d900c6b314aa46343702348deeadde484f7968379de00"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0xf5, &(0x7f0000000640)=""/245, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x0, 0x4, 0x5}, 0x10, r3, 0x0, 0x0, &(0x7f0000000880), 0x0, 0x10, 0x80}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850038f4d3c90000b700000000000000185300200d0000000000000000000000950000000c92940a"], &(0x7f0000000ac0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0xdc, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) (async) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x80, 0x8, @vifc_lcl_addr=@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb02f8180000000000005e34000000000000fc"], &(0x7f0000001f80)=""/212, 0x1a, 0xd4, 0xa}, 0x28) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getsockopt$bt_hci(r4, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) (async) 1m54.425364003s ago: executing program 3 (id=2305): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000440)=@sack_info={0x0, 0x7, 0x7}, 0xc) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r0, 0x1) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async, rerun: 64) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 64) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async, rerun: 32) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r2, r2, 0x1, 0x2, &(0x7f00000001c0)="0090", 0x48, 0x1, 0x7, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) (async, rerun: 32) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/19, 0x13}, 0x3}], 0x1, 0x60, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000200), &(0x7f0000000140)=r3}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r5 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) readv(r6, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/120, 0x78}], 0x1) (async) shutdown(r6, 0x0) pipe(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x200000000000005a, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x820}, 0x94) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async, rerun: 32) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async, rerun: 32) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000540)={r10, 0x888, 0xd424, 0x1, 0xf52, 0xfffffff9}, 0x14) (async) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) pipe(0x0) (rerun: 64) 1m54.286091139s ago: executing program 1 (id=2307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYBLOB='\b'], 0x44}}, 0x0) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\r'], 0x10da) (async) syz_init_net_socket$ax25(0x3, 0x2, 0x3) 1m54.284757242s ago: executing program 4 (id=2308): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, r2, 0xe2c40cf0776ef37, 0xfffffffd, 0x0, {0x5}}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r7, &(0x7f0000000440)={0x0, 0x36, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r8, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000011c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000001280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x3c, r3, 0x202, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0x4000) r12 = bpf$ITER_CREATE(0x21, &(0x7f00000012c0), 0x8) r13 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r12, 0x3, r13, &(0x7f0000001300)={0x10}) 1m54.213421804s ago: executing program 3 (id=2309): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@int={0x1, 0x0, 0x0, 0x1, 0x0, 0x3b, 0x0, 0x74, 0xa6b7e94b1923397f}, @datasec={0x2, 0x0, 0x0, 0xf, 0x1, [], "d0"}, @datasec={0xe, 0x0, 0x0, 0xf, 0x3, [], "1cf525"}]}}, &(0x7f0000000b80)=""/24, 0x46, 0x18, 0x1, 0x4}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', 0x0, 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4, 0x0, 0x5}, 0x18) r5 = socket(0x1, 0x2, 0x0) connect$rose(r5, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null}, 0x1c) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000240)={r2}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="190800050003000000"], 0x24}}, 0x0) 1m54.029741021s ago: executing program 1 (id=2311): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) (async, rerun: 64) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) write$cgroup_pid(r0, &(0x7f00000000c0)=r1, 0x12) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async, rerun: 64) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0xa4, 0x1, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xe2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x11}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7ea9}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0) (async) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r10, @ANYRES32=r12, @ANYBLOB="0174dfdb0ddad488bc"], 0x20}}, 0x0) socket(0x1, 0x803, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r13, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r13, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r13, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async, rerun: 64) sendto$inet6(r13, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (rerun: 64) 1m53.887188926s ago: executing program 1 (id=2313): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001700)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xa, 0x1, 0xd0, 0x4, {0x4, 0x0, 0x6, 0x2, 0x0, 0x9c}, {0x4, 0x0, 0x97, 0x4, 0x5, 0xffffff50}, 0x80, 0x2, 0x8}}]}]}}]}, 0x74}}, 0x4050) 1m53.800880993s ago: executing program 1 (id=2314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m53.658381848s ago: executing program 2 (id=2316): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x4, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$packet(r0, &(0x7f0000000180)="10031400e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140), 0x14) 1m53.651339823s ago: executing program 1 (id=2317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x40440c1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x0, 0xc, 0x0, 0x8}) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x34, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x38, 0x0, 0x0, r8}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2}}]}, 0x34}}, 0x0) 1m53.512364408s ago: executing program 2 (id=2318): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000380)={0x8, 0xfbfe, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)="08003b117c125136", 0x8}], 0x1}, 0x20008890) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x82, 0x3}, 0x10) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) 1m53.410581115s ago: executing program 2 (id=2320): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) pselect6(0x40, &(0x7f0000000000)={0xf6, 0x5, 0x0, 0x5, 0x1, 0x0, 0x80, 0xffff}, &(0x7f0000000040)={0xfffffffffffffffd, 0x2, 0x747d, 0x5, 0xe14, 0x5, 0x8000000000000000, 0xfffffffffffffff8}, &(0x7f0000000080)={0x2, 0x1e, 0x40, 0x3, 0x3, 0x9a80, 0x8, 0x4}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x4]}, 0x8}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff00000000040000008500000036000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000adf123d308520500000800000085000000a5000000950000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) 1m53.318830132s ago: executing program 4 (id=2321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="050000000a0000004200ed0040000000c0000000", @ANYRES16=0x0, @ANYBLOB="fbffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)="43bb7a75cc87a9cb846ef4615b3b63aed39910089c8288ae508b0621459789627b8e79354c00000000000000000000000000fde9ee1f49c1246ab6c1599af5f3651d3176dd76893de97e51eb1d555eae341a881dc35d3550d876846762885094c3dca0e4f9bf718de2dd2f26007fa17a", &(0x7f0000000080), 0x1005, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @typed={0x8, 0xc, 0x0, 0x0, @fd=r1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @remote, @initdev}, &(0x7f0000000040)=0xc) r3 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @multicast1}}}], 0x20}, 0x40000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, r6, 0x0) shutdown(r5, 0x1) splice(r3, 0x0, r4, 0x0, 0xf3e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0xe852, 0xfffffffb, 0x7f, 0x40001, r0, 0x7, '\x00', r2, r4, 0x4, 0x0, 0x2}, 0x50) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{r7, 0x13108}], 0x1, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r8, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000000c0), 0xffffd6c0, r9}, 0x38) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f0000000240)=0x3, 0x4) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(r10, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r12 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r12, &(0x7f0000002cc0)=[{{&(0x7f0000000000)={0xa, 0x4e26, 0xa267, @empty, 0xfffffeff}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000000000000290000000800000003000000000000002400000000000000290000003200000000000000000000000000ffff"], 0x40}}], 0x1, 0x40884) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000008f957d469c1fe4553e700"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r13}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m53.245684379s ago: executing program 1 (id=2322): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x53, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x4e21, 0x0, @remote, 0x9}], 0x1c) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="110725bd7000ffdbdf250e"], 0x14}, 0x1, 0x0, 0x0, 0x8048045}, 0x40c0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async, rerun: 32) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) (async) r8 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240), 0x0, 0xc0) (async) getsockname$packet(r8, 0x0, 0x0) (async, rerun: 32) connect$rose(r8, 0x0, 0x0) (async, rerun: 32) recvfrom$ax25(r8, &(0x7f0000000180)=""/4, 0x4, 0x10021, &(0x7f0000000440)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) 1m53.242011945s ago: executing program 2 (id=2324): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = gettid() unshare(0x22020600) syz_open_procfs$namespace(r4, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r6) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x2c, r7, 0x913, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x200}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x14) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) (async) gettid() (async) unshare(0x22020600) (async) syz_open_procfs$namespace(r4, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r6) (async) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x2c, r7, 0x913, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x200}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x14) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) (async) 1m36.997974272s ago: executing program 32 (id=2309): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@int={0x1, 0x0, 0x0, 0x1, 0x0, 0x3b, 0x0, 0x74, 0xa6b7e94b1923397f}, @datasec={0x2, 0x0, 0x0, 0xf, 0x1, [], "d0"}, @datasec={0xe, 0x0, 0x0, 0xf, 0x3, [], "1cf525"}]}}, &(0x7f0000000b80)=""/24, 0x46, 0x18, 0x1, 0x4}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', 0x0, 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4, 0x0, 0x5}, 0x18) r5 = socket(0x1, 0x2, 0x0) connect$rose(r5, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null}, 0x1c) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000240)={r2}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="190800050003000000"], 0x24}}, 0x0) 1m35.207500845s ago: executing program 33 (id=2322): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x53, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x4e21, 0x0, @remote, 0x9}], 0x1c) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="110725bd7000ffdbdf250e"], 0x14}, 0x1, 0x0, 0x0, 0x8048045}, 0x40c0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async, rerun: 32) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) (async) r8 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240), 0x0, 0xc0) (async) getsockname$packet(r8, 0x0, 0x0) (async, rerun: 32) connect$rose(r8, 0x0, 0x0) (async, rerun: 32) recvfrom$ax25(r8, &(0x7f0000000180)=""/4, 0x4, 0x10021, &(0x7f0000000440)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) 1m33.183736994s ago: executing program 34 (id=2324): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = gettid() unshare(0x22020600) syz_open_procfs$namespace(r4, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r6) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x2c, r7, 0x913, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x200}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x14) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) (async) gettid() (async) unshare(0x22020600) (async) syz_open_procfs$namespace(r4, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r6) (async) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x2c, r7, 0x913, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x200}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x14) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) (async) 1m30.9183082s ago: executing program 35 (id=2321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="050000000a0000004200ed0040000000c0000000", @ANYRES16=0x0, @ANYBLOB="fbffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)="43bb7a75cc87a9cb846ef4615b3b63aed39910089c8288ae508b0621459789627b8e79354c00000000000000000000000000fde9ee1f49c1246ab6c1599af5f3651d3176dd76893de97e51eb1d555eae341a881dc35d3550d876846762885094c3dca0e4f9bf718de2dd2f26007fa17a", &(0x7f0000000080), 0x1005, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @typed={0x8, 0xc, 0x0, 0x0, @fd=r1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @remote, @initdev}, &(0x7f0000000040)=0xc) r3 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @multicast1}}}], 0x20}, 0x40000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, r6, 0x0) shutdown(r5, 0x1) splice(r3, 0x0, r4, 0x0, 0xf3e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0xe852, 0xfffffffb, 0x7f, 0x40001, r0, 0x7, '\x00', r2, r4, 0x4, 0x0, 0x2}, 0x50) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{r7, 0x13108}], 0x1, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r8, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000000c0), 0xffffd6c0, r9}, 0x38) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f0000000240)=0x3, 0x4) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(r10, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r12 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r12, &(0x7f0000002cc0)=[{{&(0x7f0000000000)={0xa, 0x4e26, 0xa267, @empty, 0xfffffeff}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000000000000290000000800000003000000000000002400000000000000290000003200000000000000000000000000ffff"], 0x40}}], 0x1, 0x40884) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000008f957d469c1fe4553e700"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r13}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 58.608960034s ago: executing program 0 (id=2335): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000100001040000805b0000000000000000", @ANYRES32=0x0, @ANYBLOB="014800001953010014003500626f6e643000000000000000060000001c00128009000100626f6e64000000000c0002800500110001"], 0x50}, 0x1, 0x0, 0x0, 0x600050a1}, 0x0) 49.278404257s ago: executing program 0 (id=2336): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_OBJREF_IMM_TYPE={0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x0) 41.758998982s ago: executing program 0 (id=2337): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r1}, &(0x7f00000002c0), &(0x7f00000003c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000d49d80007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)=0x4) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x2, 0x0, r2, 0xc700, '\x00', r3, r4, 0x5, 0x5, 0x5}, 0x50) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)=@newlink={0x328, 0x10, 0x401, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}, @IFLA_VF_PORTS={0x264, 0x18, 0x0, 0x1, [{0x94, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xc, 0x2, 'geneve0\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "04754c7ab0bfbef6bad31a288a8dc9f9"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "69ec43e833f4f1efa56b923ab099fb89"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "aa805d41033968555f4f1fb622545941"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7f}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "eef4db5cbd71ed23884a78ca17c1349f"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ce8e806852767bde66394be4190e3192"}]}, {0x90, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e0384f90c0c4fdd0126d048567041e7e"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2adaba95e0c2aaf1866f626b8a15c0ca"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xe8}, @IFLA_PORT_VF={0x8, 0x1, 0x827d}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ec90aede2d274b552990b13306307e11"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b0c900dab8b7bcd2651f96ddeab5b43e"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "124cacb3ef0046a01538b8074cb64d55"}]}, {0x9c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "7efdd871b7e4412f1ecda7589ab9bfa4"}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0x401}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "0b4beaa35c2687f79bd5435a39d9d7fe"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "c94b761f2a0bd377cd7f0d7bfc17d588"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6db741f6e2e17c3d3d37c9a452392e21"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f61a93c45192bbdccfd4d1c534ca7092"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "816dc2e706a12e5cc90120dd787a4c8d"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "859259ac70e1787f54dc2ccec1b17dc9"}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "07ae25252e8bd12f8c2e2e4af96e495f"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "129d906502d360af5ae030cb0ac18268"}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xfc}, @IFLA_PORT_VF={0x8, 0x1, 0x96}, @IFLA_PORT_VF={0x8, 0x1, 0x101}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d578f5a113d2c4f295fcf8f2f9e6a42d"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "7c69cd64f5da677e2c2a8e762fe80f3b"}]}]}, @IFLA_VF_PORTS={0x74, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x15, 0x2, 'cbc-camellia-asm\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x28, 0x2, 'blkio.bfq.io_service_time_recursive\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9654948c9b9cbfbbeed21aa0214eb1f5"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f35c1c3dffe232c681c1829fd28e891e"}]}]}]}, 0x328}}, 0x2000000) recvmsg$qrtr(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000640)=""/1, 0x1}, {&(0x7f0000000700)=""/192, 0xc0}], 0x2, 0x0, 0x0, 0x10000}, 0x38, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="050000000000000071112b00000000008510008002000000850000007d00000095000000000000009500a5050000009b47293ab7849b08fa6c745300"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x6}, 0x94) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000010900010073797a31000000001c00048418000180080001006c6f67000c000280070002405d5c00000900020073797a3200000000140000001100010000000000000000000100000a3bb3cae77c3e6377d6f3e9424afac9aae7b6b74c82029e9dbf4773f62944cecfc1b11a39b6bdd999a489ba8cd58b2c99506d66ad7b92ca82ad3909ad85a210ed52354a5d3b170bbb7e28002e6d9be8700820ba2766105f7f797d77e27024695fe310da6d07fba26816f6ba603dccd369d235e2cf2b97996785fd1981bab50cce010f4fb5503715291595ee5b4e7ec857ede22efebf12719c3d500e04101475224cc3e8879ff0c58b9755cdb7df1b9e5b4b9ad2b498cac4f05e2a37ee2f831fba23c711"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) close(r8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) r10 = accept$nfc_llcp(r4, &(0x7f0000000640), &(0x7f00000006c0)=0x60) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r10, &(0x7f0000000700)) socket$netlink(0x10, 0x3, 0x400000000000004) 33.60447775s ago: executing program 0 (id=2338): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, &(0x7f00000001c0)=0x1c, 0x1800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWRULE={0xb8, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_USERDATA={0x8d, 0x7, 0x1, 0x0, "4dfce903bd264262417e94965712b3ee680d79da342d56f7982d2a8b415246b770d7be06512b16206c08d56d4e363998bd913db26342dc4b03bbd80af7731968b6593ecbc581769e6d8b5625e65f0be1d42897e715bf57f5926965b3b3c091e55435f180f1675d88c766c32135954233e09285a0dbeadc1b7676fd6c5ba5dac4f821b9ca092d1907a6"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xe0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000001040102000000000000080005400000000005"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c00ff07000000000000006d274a5e2800008020009c50bf9259cee6d40e37f5c1a63c85a24263f1c9d44f05bf8c91d46dfdb8b273b06d08d872a214707554a2ffcff7dfeecb974c0113b6867eec0c44b4e227b30c3e8dc2f928c9b4a24626d4c7208ad597cb58d936e3aecdfd808ab9f160015d36dd97504daf8d646874c717a17feb65dee92975d75717701324d817062a4abfd10e9aefd8e74decfbc88400"/174], 0x1c}}, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) ioctl$SIOCAX25OPTRT(r3, 0x89e7, &(0x7f00000000c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x440, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f0000000a00)={'filter\x00', 0x4}, 0x68) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x30, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0x48, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x10}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x24040800}, 0x40044) 25.272465821s ago: executing program 0 (id=2339): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0x20, r1, 0xf81, 0xfffffffc, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x2a6, 0x2}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x40000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0053fddea18476e4a400"/28, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r2 = syz_init_net_socket$ax25(0x3, 0x7, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f00000002c0)=0x1) epoll_create1(0x80000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r5, 0x21eae}}, 0x20}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r12, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r10, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xdf}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) sendmsg$kcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r13 = socket$unix(0x1, 0x2, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r15, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 15.913232365s ago: executing program 0 (id=2340): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x25, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b05, &(0x7f0000000100)={'wlan1\x00'}) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', 0x0}) socket(0x22, 0xa, 0x0) 0s ago: executing program 36 (id=2340): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x25, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b05, &(0x7f0000000100)={'wlan1\x00'}) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', 0x0}) socket(0x22, 0xa, 0x0) kernel console output (not intermixed with test programs): [ 215.961534][ T9362] __nla_validate_parse: 1 callbacks suppressed [ 215.961556][ T9362] netlink: 32 bytes leftover after parsing attributes in process `syz.2.920'. [ 216.026312][ T9364] lo: entered allmulticast mode [ 216.060960][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.920'. [ 216.440914][ T9366] syz_tun (unregistering): left allmulticast mode [ 216.463293][ T9359] lo: left allmulticast mode [ 216.550191][ T9368] macvtap1: entered allmulticast mode [ 216.576054][ T9368] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 216.640803][ T9380] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 216.661754][ T9368] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 216.737634][ T9387] netlink: 20 bytes leftover after parsing attributes in process `syz.4.925'. [ 216.846635][ T9384] bond0: (slave bond_slave_0): Releasing backup interface [ 216.855661][ T9384] bond_slave_0: left promiscuous mode [ 216.875886][ T9384] bond0: (slave bond_slave_1): Releasing backup interface [ 216.899532][ T9384] bond_slave_1: left promiscuous mode [ 216.953679][ T9384] team0: Port device team_slave_0 removed [ 216.980304][ T9384] team0: Port device team_slave_1 removed [ 216.998717][ T9384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.091498][ T9384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.145767][ T5882] Bluetooth: hci0: command 0x0406 tx timeout [ 217.152129][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 217.152239][ T5873] Bluetooth: hci1: command 0x0406 tx timeout [ 217.158361][ T5868] Bluetooth: hci3: command 0x0406 tx timeout [ 217.158463][ T5868] Bluetooth: hci2: command 0x0406 tx timeout [ 217.181050][ T9384] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 218.088159][ T9432] netlink: 'syz.4.935': attribute type 3 has an invalid length. [ 218.541538][ T9447] netlink: 'syz.3.941': attribute type 1 has an invalid length. [ 218.652810][ T9453] netlink: 'syz.0.943': attribute type 4 has an invalid length. [ 218.674899][ T9453] netlink: 'syz.0.943': attribute type 4 has an invalid length. [ 218.862507][ T9459] netlink: 'syz.0.946': attribute type 9 has an invalid length. [ 218.879471][ T9459] netlink: 'syz.0.946': attribute type 7 has an invalid length. [ 218.887917][ T9460] netlink: 'syz.1.944': attribute type 13 has an invalid length. [ 218.896482][ T9459] netlink: 'syz.0.946': attribute type 8 has an invalid length. [ 218.904730][ T9462] netlink: 'syz.1.944': attribute type 13 has an invalid length. [ 218.916784][ T9459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.946'. [ 218.929875][ T9465] sctp: [Deprecated]: syz.2.947 (pid 9465) Use of int in max_burst socket option deprecated. [ 218.929875][ T9465] Use struct sctp_assoc_value instead [ 218.956248][ T9459] team2: entered promiscuous mode [ 218.963118][ T9459] team2: entered allmulticast mode [ 218.970096][ T9459] 8021q: adding VLAN 0 to HW filter on device team2 [ 219.140332][ T9460] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.206286][ T9476] netlink: 32 bytes leftover after parsing attributes in process `syz.4.942'. [ 219.519250][ T9460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.592466][ T9460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.907612][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.917209][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 219.927675][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.948306][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 220.012823][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.053312][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 220.082779][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.113388][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 220.162103][ T9494] lo: entered allmulticast mode [ 220.170598][ T9491] lo: left allmulticast mode [ 220.628452][ T9520] tipc: Started in network mode [ 220.641673][ T9520] tipc: Node identity 080211, cluster identity 4711 [ 220.655228][ T9521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.960'. [ 220.658644][ T9520] tipc: Enabled bearer , priority 0 [ 220.690987][ T9524] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 220.725557][ T9524] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 220.733715][ T9524] tipc: Resetting bearer [ 220.804682][ T9531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.964'. [ 220.912966][ T9520] wireguard0: entered promiscuous mode [ 220.919531][ T9520] wireguard0: entered allmulticast mode [ 220.997983][ T140] tipc: Resetting bearer [ 221.054924][ T9547] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 221.062838][ T9547] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 221.070980][ T9547] tipc: Resetting bearer [ 221.275902][ T9552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.970'. [ 221.340814][ T9552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.970'. [ 221.439632][ T9550] syz_tun: entered allmulticast mode [ 221.501826][ T9549] syz_tun: left allmulticast mode [ 221.647999][ T9560] netlink: 20 bytes leftover after parsing attributes in process `syz.4.972'. [ 221.729785][ T9560] nbd: socks must be embedded in a SOCK_ITEM attr [ 221.775565][ T5964] tipc: Node number set to 134353152 [ 221.812310][ T9567] syz_tun: entered allmulticast mode [ 222.023301][ T9572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.975'. [ 222.268792][ T9578] batadv_slave_1: entered promiscuous mode [ 222.306392][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.978'. [ 222.315381][ T9578] bridge_slave_1: left allmulticast mode [ 222.331986][ T9578] bridge_slave_1: left promiscuous mode [ 222.347009][ T9578] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.370077][ T9578] bridge_slave_0: left promiscuous mode [ 222.380264][ T9578] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.723320][ T9577] batadv_slave_1: left promiscuous mode [ 222.844844][ T9608] netlink: 'syz.1.985': attribute type 1 has an invalid length. [ 222.859518][ T9608] netlink: 224 bytes leftover after parsing attributes in process `syz.1.985'. [ 222.871348][ T9608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.985'. [ 223.035586][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.987'. [ 223.490786][ T9629] lo: entered allmulticast mode [ 223.578475][ T9636] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 223.716612][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.991'. [ 223.949497][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.994'. [ 224.081025][ T9653] bond2: entered promiscuous mode [ 224.089810][ T9653] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.125054][ T9659] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.133063][ T9659] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 224.148113][ T9659] bond2: (slave vcan1): Error -95 calling set_mac_address [ 224.310405][ T9679] netlink: 'syz.0.1004': attribute type 9 has an invalid length. [ 224.417164][ T9679] netlink: 'syz.0.1004': attribute type 7 has an invalid length. [ 224.472708][ T9679] netlink: 'syz.0.1004': attribute type 8 has an invalid length. [ 224.544558][ T9681] team3: entered promiscuous mode [ 224.549911][ T9681] team3: entered allmulticast mode [ 224.555943][ T9681] 8021q: adding VLAN 0 to HW filter on device team3 [ 225.008993][ T9696] 8021q: adding VLAN 0 to HW filter on device bond3 [ 225.100036][ T9696] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 225.111819][ T9696] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 225.123158][ T9700] team0: Port device 0! removed [ 225.128427][ T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 225.142807][ T9700] bond0: (slave bond_slave_0): Releasing backup interface [ 225.159078][ T9700] bond0: (slave bond_slave_1): Releasing backup interface [ 225.179808][ T9700] team0: Port device team_slave_0 removed [ 225.206919][ T9700] team0: Port device team_slave_1 removed [ 225.219341][ T9700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.241289][ T9700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.256002][ T36] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 225.267504][ T9700] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 225.445511][ T36] bond3: (slave macvlan2): link status up again after 0 ms [ 225.457404][ T36] bond3: (slave macvlan2): failed to get link speed/duplex [ 225.586147][ T140] bond3: (slave macvlan2): failed to get link speed/duplex [ 225.644011][ T9727] tipc: Enabling of bearer rejected, already enabled [ 225.690188][ T9727] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 225.731236][ T9727] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 225.757512][ T9727] tipc: Resetting bearer [ 226.132280][ T9724] tipc: Resetting bearer [ 226.167164][ T36] bond3: (slave macvlan2): failed to get link speed/duplex [ 226.288566][ T13] bond3: (slave macvlan2): failed to get link speed/duplex [ 226.436756][ T36] bond3: (slave macvlan2): failed to get link speed/duplex [ 226.546292][ T36] bond3: (slave macvlan2): failed to get link speed/duplex [ 226.617333][ T9762] __nla_validate_parse: 6 callbacks suppressed [ 226.617353][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1027'. [ 226.714541][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1029'. [ 227.195118][ T9782] netlink: 'syz.0.1031': attribute type 39 has an invalid length. [ 227.204215][ T9782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 227.417958][ T9800] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1036'. [ 227.565973][ T9804] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1038'. [ 227.792555][ T9812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1034'. [ 227.987274][ T9818] tipc: Resetting bearer [ 228.099111][ T9822] netlink: 'syz.4.1043': attribute type 9 has an invalid length. [ 228.124952][ T9822] netlink: 'syz.4.1043': attribute type 7 has an invalid length. [ 228.157794][ T9831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1043'. [ 228.163911][ T9822] netlink: 'syz.4.1043': attribute type 8 has an invalid length. [ 228.228233][ T9831] team1: entered promiscuous mode [ 228.233512][ T9831] team1: entered allmulticast mode [ 228.259133][ T9831] 8021q: adding VLAN 0 to HW filter on device team1 [ 228.294872][ T9834] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1047'. [ 228.569178][ T9855] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1052'. [ 228.572735][ T9852] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1051'. [ 228.874804][ T9873] veth0_to_bond: entered promiscuous mode [ 229.086866][ T9888] netlink: 'syz.0.1060': attribute type 9 has an invalid length. [ 229.094692][ T9888] netlink: 'syz.0.1060': attribute type 7 has an invalid length. [ 229.103386][ T9888] netlink: 'syz.0.1060': attribute type 8 has an invalid length. [ 229.103580][ T9890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.169487][ T9888] team4: entered promiscuous mode [ 229.174599][ T9888] team4: entered allmulticast mode [ 229.196748][ T9888] 8021q: adding VLAN 0 to HW filter on device team4 [ 229.318476][ T9895] IPVS: set_ctl: invalid protocol: 136 10.1.1.1:20004 [ 230.175814][ T36] net_ratelimit: 26 callbacks suppressed [ 230.175835][ T36] bond3: (slave macvlan2): failed to get link speed/duplex [ 230.295941][ T36] bond3: (slave macvlan2): failed to get link speed/duplex [ 230.443405][ T9937] netlink: 'syz.2.1074': attribute type 9 has an invalid length. [ 230.465284][ T9937] netlink: 'syz.2.1074': attribute type 7 has an invalid length. [ 230.473839][ T36] bond3: (slave macvlan2): failed to get link speed/duplex [ 230.492902][ T9937] netlink: 'syz.2.1074': attribute type 8 has an invalid length. [ 230.567911][ T9941] team1: entered promiscuous mode [ 230.578724][ T9941] team1: entered allmulticast mode [ 230.587830][ T9941] 8021q: adding VLAN 0 to HW filter on device team1 [ 230.665727][ T36] bond3: (slave macvlan2): failed to get link speed/duplex [ 230.706573][ T9945] batadv0: entered promiscuous mode [ 230.713697][ T9945] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 230.726630][ T9945] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 230.743009][ T9945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.946244][ T1166] bond3: (slave macvlan2): failed to get link speed/duplex [ 231.587031][ T7826] bond3: (slave macvlan2): failed to get link speed/duplex [ 231.716209][ T36] bond3: (slave macvlan2): failed to get link speed/duplex [ 231.816985][ T9980] netlink: 'syz.1.1084': attribute type 1 has an invalid length. [ 231.856193][ T1166] bond3: (slave macvlan2): failed to get link speed/duplex [ 232.107573][ T1166] bond3: (slave macvlan2): failed to get link speed/duplex [ 232.264378][ T9999] __nla_validate_parse: 7 callbacks suppressed [ 232.264398][ T9999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1091'. [ 232.475564][ T7826] bond3: (slave macvlan2): failed to get link speed/duplex [ 232.841244][T10035] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1104'. [ 232.852402][T10035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1104'. [ 233.093557][T10048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1107'. [ 233.224726][T10054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1109'. [ 233.246348][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1109'. [ 233.262108][T10054] validate_nla: 34 callbacks suppressed [ 233.262130][T10054] netlink: 'syz.2.1109': attribute type 1 has an invalid length. [ 233.329796][T10055] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1109'. [ 233.342749][T10060] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1109'. [ 233.369204][T10054] 8021q: adding VLAN 0 to HW filter on device bond6 [ 233.378946][T10058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.520181][ T1166] bond3: (slave macvlan2): link status definitely down, disabling slave [ 233.744157][T10076] netlink: 'syz.0.1116': attribute type 9 has an invalid length. [ 233.754881][T10076] netlink: 'syz.0.1116': attribute type 7 has an invalid length. [ 233.775856][T10076] netlink: 'syz.0.1116': attribute type 8 has an invalid length. [ 233.785066][T10076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1116'. [ 233.801263][T10081] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1118'. [ 233.872850][T10076] team5: entered promiscuous mode [ 233.895570][T10076] team5: entered allmulticast mode [ 233.904599][T10076] 8021q: adding VLAN 0 to HW filter on device team5 [ 234.186571][T10098] netlink: 'syz.0.1122': attribute type 1 has an invalid length. [ 234.194597][T10098] nbd: error processing sock list [ 234.201289][T10098] block nbd1: shutting down sockets [ 234.899435][T10142] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 234.899722][T10131] IPVS: stopping backup sync thread 10142 ... [ 235.121227][ T5964] IPVS: starting estimator thread 0... [ 235.182565][T10160] netlink: 'syz.2.1140': attribute type 25 has an invalid length. [ 235.226244][T10155] IPVS: using max 30 ests per chain, 72000 per kthread [ 236.298220][T10208] pim6reg: entered allmulticast mode [ 236.469371][T10197] pim6reg: left allmulticast mode [ 237.891277][T10275] __nla_validate_parse: 10 callbacks suppressed [ 237.891298][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1172'. [ 238.142280][T10287] netlink: 'syz.3.1175': attribute type 3 has an invalid length. [ 238.171940][T10287] netlink: 'syz.3.1175': attribute type 1 has an invalid length. [ 238.196213][T10289] netlink: 'syz.3.1175': attribute type 1 has an invalid length. [ 238.406285][T10298] syz_tun: entered allmulticast mode [ 238.520301][T10293] syz_tun: left allmulticast mode [ 238.712739][T10305] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1182'. [ 238.722487][T10305] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1182'. [ 238.753946][ T5940] IPVS: starting estimator thread 0... [ 238.769456][T10309] netlink: 'syz.4.1183': attribute type 1 has an invalid length. [ 238.799626][T10309] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1183'. [ 238.822248][T10309] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1183'. [ 238.865717][T10308] IPVS: using max 23 ests per chain, 55200 per kthread [ 238.866404][T10311] net_ratelimit: 6 callbacks suppressed [ 238.866423][T10311] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 238.903370][T10309] netlink: 210344 bytes leftover after parsing attributes in process `syz.4.1183'. [ 239.037037][T10319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1187'. [ 239.428560][T10338] syz_tun: entered allmulticast mode [ 239.541371][T10332] syz_tun: left allmulticast mode [ 239.606974][T10341] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1192'. [ 239.908234][T10350] netlink: 'syz.4.1195': attribute type 21 has an invalid length. [ 239.936451][T10350] netlink: 'syz.4.1195': attribute type 1 has an invalid length. [ 239.944656][T10350] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1195'. [ 240.037541][T10350] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1195'. [ 240.429073][T10373] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 240.454458][T10379] netlink: 'syz.3.1203': attribute type 6 has an invalid length. [ 240.454847][T10373] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 240.473775][T10378] netlink: 'syz.3.1203': attribute type 6 has an invalid length. [ 240.489710][T10372] netlink: 'syz.2.1201': attribute type 1 has an invalid length. [ 240.507599][T10383] netlink: 'syz.3.1203': attribute type 6 has an invalid length. [ 240.977922][T10406] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 241.261263][T10426] netlink: 'syz.3.1217': attribute type 9 has an invalid length. [ 241.306889][T10426] netlink: 'syz.3.1217': attribute type 7 has an invalid length. [ 241.330410][T10426] netlink: 'syz.3.1217': attribute type 8 has an invalid length. [ 241.398061][T10435] team1: entered promiscuous mode [ 241.403391][T10435] team1: entered allmulticast mode [ 241.409673][T10435] 8021q: adding VLAN 0 to HW filter on device team1 [ 241.498822][T10440] dvmrp8: entered allmulticast mode [ 241.516379][ T30] audit: type=1800 audit(1758147268.625:5): pid=10438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1219" name="memory.events" dev="tmpfs" ino=1318 res=0 errno=0 [ 241.675170][T10446] syzkaller0: entered promiscuous mode [ 241.681635][T10446] syzkaller0: entered allmulticast mode [ 241.868633][ T5964] IPVS: starting estimator thread 0... [ 241.964273][T10463] IPVS: using max 29 ests per chain, 69600 per kthread [ 241.974701][T10462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.027579][T10440] dvmrp8: left allmulticast mode [ 285.693483][T10493] tipc: Resetting bearer [ 285.747323][T10501] syz_tun: entered allmulticast mode [ 285.825929][T10492] tipc: Enabled bearer , priority 0 [ 285.877354][T10507] syzkaller0: entered promiscuous mode [ 285.889755][T10507] syzkaller0: entered allmulticast mode [ 285.898629][T10486] syz_tun: left allmulticast mode [ 285.957847][T10492] syzkaller0: mtu greater than device maximum [ 286.298335][T10515] __nla_validate_parse: 7 callbacks suppressed [ 286.298354][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1242'. [ 286.789729][T10491] tipc: Resetting bearer [ 286.866680][T10491] tipc: Disabling bearer [ 286.874189][T10528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'. [ 287.050949][T10533] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.067294][T10532] IPVS: sh: FWM 3 0x00000003 - no destination available [ 287.071136][T10533] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 287.090012][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1245'. [ 287.103124][T10533] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 287.133024][T10532] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1245'. [ 287.147070][T10532] validate_nla: 1 callbacks suppressed [ 287.147090][T10532] netlink: 'syz.3.1245': attribute type 2 has an invalid length. [ 287.187757][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1246'. [ 287.288933][T10533] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.343186][T10533] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 287.374516][T10533] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 287.429927][T10542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1250'. [ 287.453391][T10533] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.464241][T10533] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 287.474879][T10533] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 287.563052][T10533] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.574002][T10533] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 287.620733][T10533] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 287.831510][ T1166] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.842052][ T1166] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 287.850427][ T1166] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 287.911603][ T1166] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.947039][ T1166] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 287.955208][ T1166] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 287.999698][ T1166] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.016436][ T1166] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 288.024598][ T1166] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 288.108854][T10565] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.1254'. [ 288.199419][T10235] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.207863][T10560] netlink: 'syz.2.1254': attribute type 10 has an invalid length. [ 288.253047][T10235] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 288.299736][T10235] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 288.371885][T10560] dummy0: entered promiscuous mode [ 288.391927][T10576] syz.4.1257: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 288.409367][T10560] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 288.431562][T10576] CPU: 1 UID: 0 PID: 10576 Comm: syz.4.1257 Not tainted syzkaller #0 PREEMPT(full) [ 288.431594][T10576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 288.431618][T10576] Call Trace: [ 288.431627][T10576] [ 288.431637][T10576] dump_stack_lvl+0x189/0x250 [ 288.431683][T10576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.431717][T10576] ? __pfx__printk+0x10/0x10 [ 288.431748][T10576] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 288.431776][T10576] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 288.431805][T10576] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 288.431834][T10576] warn_alloc+0x214/0x310 [ 288.431869][T10576] ? stack_depot_save_flags+0x40/0x860 [ 288.431905][T10576] ? __pfx_warn_alloc+0x10/0x10 [ 288.431943][T10576] ? kasan_save_track+0x4f/0x80 [ 288.431971][T10576] ? xskq_create+0x56/0x170 [ 288.431989][T10576] ? xsk_init_queue+0xb0/0x110 [ 288.432018][T10576] ? xsk_setsockopt+0x4dc/0x8d0 [ 288.432047][T10576] ? do_sock_setsockopt+0x179/0x1b0 [ 288.432074][T10576] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 288.432099][T10576] ? do_syscall_64+0xfa/0x3b0 [ 288.432121][T10576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.432151][T10576] __vmalloc_node_range_noprof+0x125/0x12f0 [ 288.432216][T10576] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 288.432256][T10576] ? __kasan_kmalloc+0x93/0xb0 [ 288.432290][T10576] vmalloc_user_noprof+0xad/0xf0 [ 288.432322][T10576] ? xskq_create+0xbf/0x170 [ 288.432344][T10576] xskq_create+0xbf/0x170 [ 288.432367][T10576] xsk_init_queue+0xb0/0x110 [ 288.432404][T10576] xsk_setsockopt+0x4dc/0x8d0 [ 288.432441][T10576] ? __pfx_xsk_setsockopt+0x10/0x10 [ 288.432474][T10576] ? __pfx_aa_sk_perm+0x10/0x10 [ 288.432512][T10576] ? aa_sock_opt_perm+0xff/0x1b0 [ 288.432539][T10576] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 288.432563][T10576] ? __pfx_xsk_setsockopt+0x10/0x10 [ 288.432597][T10576] do_sock_setsockopt+0x179/0x1b0 [ 288.432632][T10576] __x64_sys_setsockopt+0x13f/0x1b0 [ 288.432682][T10576] do_syscall_64+0xfa/0x3b0 [ 288.432704][T10576] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.432726][T10576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.432748][T10576] ? clear_bhb_loop+0x60/0xb0 [ 288.432776][T10576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.432796][T10576] RIP: 0033:0x7fa29058eba9 [ 288.432817][T10576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.432836][T10576] RSP: 002b:00007fa2914f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 288.432859][T10576] RAX: ffffffffffffffda RBX: 00007fa2907d5fa0 RCX: 00007fa29058eba9 [ 288.432875][T10576] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 288.432888][T10576] RBP: 00007fa290611e19 R08: 0000000000000004 R09: 0000000000000000 [ 288.432901][T10576] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.432914][T10576] R13: 00007fa2907d6038 R14: 00007fa2907d5fa0 R15: 00007fff1d39bc98 [ 288.432948][T10576] [ 288.433039][T10576] Mem-Info: [ 288.620273][T10579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1258'. [ 288.628634][T10585] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1259'. [ 288.634313][T10576] active_anon:3814 inactive_anon:0 isolated_anon:0 [ 288.634313][T10576] active_file:3335 inactive_file:39945 isolated_file:0 [ 288.634313][T10576] unevictable:768 dirty:261 writeback:0 [ 288.634313][T10576] slab_reclaimable:11983 slab_unreclaimable:136830 [ 288.634313][T10576] mapped:30259 shmem:1378 pagetables:984 [ 288.634313][T10576] sec_pagetables:0 bounce:0 [ 288.634313][T10576] kernel_misc_reclaimable:0 [ 288.634313][T10576] free:1286046 free_pcp:12874 free_cma:0 [ 288.817740][T10576] Node 0 active_anon:17256kB inactive_anon:0kB active_file:13340kB inactive_file:159576kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125136kB dirty:1044kB writeback:0kB shmem:3976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12732kB pagetables:3772kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 288.866973][T10576] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 288.909811][T10576] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 288.960879][T10576] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 288.972468][T10576] Node 0 DMA32 free:1227808kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20012kB inactive_anon:0kB active_file:13340kB inactive_file:157996kB unevictable:1536kB writepending:1044kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:35052kB local_pcp:18804kB free_cma:0kB [ 289.006592][T10576] lowmem_reserve[]: 0 0 1 1 1 [ 289.011471][T10576] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 289.041670][T10576] lowmem_reserve[]: 0 0 0 0 0 [ 289.047445][T10576] Node 1 Normal free:3899312kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13008kB local_pcp:9760kB free_cma:0kB [ 289.104594][T10576] lowmem_reserve[]: 0 0 0 0 0 [ 289.110445][T10576] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 289.126650][T10591] : renamed from bond_slave_0 [ 289.133924][T10576] Node 0 DMA32: 4*4kB (UME) 576*8kB (UM) 609*16kB (UME) 654*32kB (UM) 393*64kB (UME) 104*128kB (UM) 84*256kB (UME) 44*512kB (UM) 24*1024kB (UM) 12*2048kB (UM) 259*4096kB (M) = 1227808kB [ 289.172592][T10576] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 289.196951][T10576] Node 1 Normal: 174*4kB (UM) 35*8kB (UME) 44*16kB (UME) 121*32kB (UME) 34*64kB (UM) 7*128kB (UME) 8*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (UM) = 3899312kB [ 289.289206][T10576] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 289.299409][T10576] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 289.308930][T10576] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 289.319053][T10576] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 289.328528][T10576] 44686 total pagecache pages [ 289.333443][T10576] 0 pages in swap cache [ 289.338088][T10576] Free swap = 124996kB [ 289.343172][T10576] Total swap = 124996kB [ 289.344167][T10598] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1262'. [ 289.347619][T10576] 2097051 pages RAM [ 289.347632][T10576] 0 pages HighMem/MovableOnly [ 289.347642][T10576] 425671 pages reserved [ 289.347652][T10576] 0 pages cma reserved [ 289.610692][T10605] netlink: 'syz.1.1264': attribute type 9 has an invalid length. [ 289.619710][T10605] netlink: 'syz.1.1264': attribute type 7 has an invalid length. [ 289.627767][T10605] netlink: 'syz.1.1264': attribute type 8 has an invalid length. [ 289.684452][T10607] RDS: rds_bind could not find a transport for fe80::2a, load rds_tcp or rds_rdma? [ 289.989142][T10615] geneve0: entered promiscuous mode [ 290.658096][T10656] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 290.966913][T10679] xt_HMARK: proto mask must be zero with L3 mode [ 291.235209][T10699] openvswitch: netlink: Message has 4 unknown bytes. [ 291.344490][T10703] __nla_validate_parse: 6 callbacks suppressed [ 291.344509][T10703] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1296'. [ 291.360444][T10703] netlink: 'syz.2.1296': attribute type 1 has an invalid length. [ 291.383201][T10701] netlink: 'syz.1.1295': attribute type 16 has an invalid length. [ 291.415607][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1295'. [ 291.494057][T10708] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1298'. [ 291.514264][T10711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1299'. [ 291.534521][T10713] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1299'. [ 291.721858][T10729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1303'. [ 292.124960][T10753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1309'. [ 292.148194][T10753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1309'. [ 292.321057][T10767] netlink: 'syz.1.1311': attribute type 9 has an invalid length. [ 292.329692][T10767] netlink: 'syz.1.1311': attribute type 7 has an invalid length. [ 292.342972][T10767] netlink: 'syz.1.1311': attribute type 8 has an invalid length. [ 292.361453][T10761] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 292.377015][T10761] tipc: Enabled bearer , priority 10 [ 292.472328][T10781] tipc: Enabling of bearer rejected, already enabled [ 292.494449][T10781] tipc: Resetting bearer [ 293.273355][T10806] tipc: Enabled bearer , priority 0 [ 293.420745][T10804] tipc: Disabling bearer [ 293.451956][T10808] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 293.459979][T10808] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 293.467961][T10808] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 293.475916][T10808] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 293.483892][T10808] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 293.491958][T10808] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 293.499921][T10808] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 293.507872][T10808] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 293.515943][T10808] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 293.520945][T10816] netlink: 'syz.3.1325': attribute type 1 has an invalid length. [ 294.082107][T10831] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1326'. [ 294.357573][ T979] tipc: Node number set to 2573844418 [ 295.227934][T10886] 8021q: adding VLAN 0 to HW filter on device bond8 [ 295.581099][T10886] netlink: 'syz.2.1340': attribute type 1 has an invalid length. [ 296.637448][T10939] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1350'. [ 296.770351][T10943] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv_slave_1, syncid = 1, id = 0 [ 297.327682][T10966] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1356'. [ 297.469954][T10969] netlink: 'syz.4.1357': attribute type 27 has an invalid length. [ 297.480739][T10969] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1357'. [ 297.492364][T10971] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1359'. [ 297.524936][T10969] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 297.563437][T10976] bridge0: entered promiscuous mode [ 297.572836][T10976] bridge0: entered allmulticast mode [ 298.644864][T11026] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 299.073000][T11033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1375'. [ 299.111675][T11033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1375'. [ 299.219316][T11033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1375'. [ 299.360610][T11045] netlink: 'syz.1.1378': attribute type 1 has an invalid length. [ 299.433269][T11048] netlink: 'syz.1.1378': attribute type 21 has an invalid length. [ 299.457664][T11048] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 299.465036][T11048] IPv6: NLM_F_CREATE should be set when creating new route [ 299.472331][T11048] IPv6: NLM_F_CREATE should be set when creating new route [ 299.503868][T11048] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 299.542888][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1379'. [ 299.857573][T11060] 8021q: adding VLAN 0 to HW filter on device bond3 [ 299.944938][T11066] xt_time: unknown flags 0xf4 [ 301.370417][T11099] Bluetooth: MGMT ver 1.23 [ 301.807511][T11122] netlink: 'syz.1.1398': attribute type 1 has an invalid length. [ 301.828070][T11123] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1398'. [ 302.236293][T11134] syzkaller1: entered promiscuous mode [ 302.243794][T11134] syzkaller1: entered allmulticast mode [ 302.827526][T11146] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1406'. [ 303.556630][T11138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.656998][T11138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.041243][T11138] geneve2: left promiscuous mode [ 304.046487][T11138] geneve2: left allmulticast mode [ 304.074499][T11138] team1: left promiscuous mode [ 304.080263][T11138] team1: left allmulticast mode [ 304.090885][T11138] bridge0: left promiscuous mode [ 304.096364][T11138] bridge0: left allmulticast mode [ 304.182184][T10237] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.206116][T10237] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 304.223388][T10237] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 304.258725][T10237] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.277243][T10237] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 304.292236][T10237] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 304.319441][T10237] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.330881][T10237] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 304.339448][T10237] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 304.377260][T10237] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.398460][T10237] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 304.412799][T10237] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 304.528737][T11176] bridge_slave_0: default FDB implementation only supports local addresses [ 304.627394][T11186] netlink: 'syz.3.1417': attribute type 13 has an invalid length. [ 304.636420][T11186] netlink: 'syz.3.1417': attribute type 17 has an invalid length. [ 304.688735][T11186] net_ratelimit: 45 callbacks suppressed [ 304.688749][T11186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.976427][T11199] lo: entered allmulticast mode [ 304.983868][T11199] tunl0: entered allmulticast mode [ 304.991276][T11199] gre0: entered allmulticast mode [ 304.998170][T11199] gretap0: entered allmulticast mode [ 305.004731][T11199] erspan0: entered allmulticast mode [ 305.011975][T11199] ip_vti0: entered allmulticast mode [ 305.018935][T11199] ip6_vti0: entered allmulticast mode [ 305.025288][T11199] sit0: entered allmulticast mode [ 305.032477][T11199] ip6tnl0: entered allmulticast mode [ 305.039703][T11199] ip6gre0: entered allmulticast mode [ 305.047464][T11199] ip6gretap0: entered allmulticast mode [ 305.053954][T11199] vcan0: entered allmulticast mode [ 305.063798][T11199] bond0: entered allmulticast mode [ 305.071922][T11199] bond_slave_0: entered allmulticast mode [ 305.078282][T11199] bond_slave_1: entered allmulticast mode [ 305.086172][T11199] team0: entered allmulticast mode [ 305.091646][T11199] team_slave_0: entered allmulticast mode [ 305.098051][T11199] team_slave_1: entered allmulticast mode [ 305.105171][T11199] dummy0: entered allmulticast mode [ 305.112736][T11199] nlmon0: entered allmulticast mode [ 305.119391][T11204] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1422'. [ 305.130689][T11199] caif0: entered allmulticast mode [ 305.137025][T11199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.163063][T11200] netlink: 'syz.1.1421': attribute type 1 has an invalid length. [ 305.473533][T11213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.867722][T11230] syz_tun: entered allmulticast mode [ 305.889804][T11228] syz_tun: left allmulticast mode [ 306.073387][T11243] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1434'. [ 306.701524][T11279] netlink: 'syz.2.1442': attribute type 30 has an invalid length. [ 306.805798][T11282] lo: left allmulticast mode [ 306.820949][T11282] tunl0: left allmulticast mode [ 306.872274][T11282] gre0: left allmulticast mode [ 306.908827][T11282] gretap0: left allmulticast mode [ 307.026686][T11282] erspan0: left allmulticast mode [ 307.106336][T11282] ip_vti0: left allmulticast mode [ 307.138709][T11282] ip6_vti0: left allmulticast mode [ 307.177979][T11282] sit0: left allmulticast mode [ 307.214065][T11282] ip6tnl0: left allmulticast mode [ 307.289048][T11282] ip6gre0: left allmulticast mode [ 307.409899][T11282] ip6gretap0: left allmulticast mode [ 307.431739][T11282] vcan0: left allmulticast mode [ 307.465006][T11282] bond0: left allmulticast mode [ 307.470868][T11282] bond_slave_0: left allmulticast mode [ 307.486089][T11282] bond_slave_1: left allmulticast mode [ 307.498736][T11282] team_slave_0: left promiscuous mode [ 307.504595][T11282] team_slave_1: left promiscuous mode [ 307.536177][T11282] team0: left allmulticast mode [ 307.541108][T11282] team_slave_0: left allmulticast mode [ 307.548080][T11282] team_slave_1: left allmulticast mode [ 307.577079][T11282] dummy0: left allmulticast mode [ 307.608150][T11282] nlmon0: left allmulticast mode [ 307.644053][T11282] caif0: left allmulticast mode [ 307.810637][T11304] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1446'. [ 307.986026][T11282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.002952][T11282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.337100][T11282] ip6gre1: left allmulticast mode [ 308.369054][T11282] team1: left promiscuous mode [ 308.373904][T11282] team1: left allmulticast mode [ 308.636277][T10234] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.683471][T10234] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.734221][T10237] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.753317][T10237] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.881785][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1448'. [ 309.213935][T11340] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1454'. [ 309.305171][T11340] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1454'. [ 309.606307][T11367] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1457'. [ 309.930690][T11377] syzkaller1: entered promiscuous mode [ 309.940982][T11377] syzkaller1: entered allmulticast mode [ 309.967768][T11377] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.1461'. [ 309.977585][T11377] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 309.988970][T11377] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1461'. [ 309.998717][T11377] unsupported nlmsg_type 40 [ 310.446220][T11404] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1468'. [ 310.526445][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1468'. [ 310.573600][T11408] geneve0: left promiscuous mode [ 310.603648][T11408] bond1: left promiscuous mode [ 310.622135][T11408] bond1: left allmulticast mode [ 310.643586][T11408] geneve2: left promiscuous mode [ 310.650880][T11408] geneve2: left allmulticast mode [ 310.661059][T11408] tipc: Resetting bearer [ 310.682688][T11408] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 310.690842][T11408] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 310.711693][T11408] wireguard0: left promiscuous mode [ 310.718754][T11408] wireguard0: left allmulticast mode [ 311.484767][T11450] netlink: 'syz.0.1483': attribute type 11 has an invalid length. [ 311.783841][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1486'. [ 311.823508][T11458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.550319][T11536] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 313.558748][T11534] __nla_validate_parse: 2 callbacks suppressed [ 313.558791][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1511'. [ 313.674281][T11540] syz_tun: entered allmulticast mode [ 313.682911][T11539] syz_tun: left allmulticast mode [ 313.703483][T11546] netlink: 'syz.2.1515': attribute type 1 has an invalid length. [ 313.751297][T11546] bond9: entered promiscuous mode [ 313.757149][T11546] bond9: entered allmulticast mode [ 313.762846][T11546] 8021q: adding VLAN 0 to HW filter on device bond9 [ 313.786886][T11546] bridge0: entered promiscuous mode [ 313.792803][T11546] bridge0: entered allmulticast mode [ 313.799552][T11546] bond9: (slave bridge0): Enslaving as a backup interface with an up link [ 313.856894][T10237] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 313.963098][T11557] netlink: 'syz.0.1517': attribute type 3 has an invalid length. [ 313.981163][T11557] netlink: 'syz.0.1517': attribute type 3 has an invalid length. [ 314.003777][T11557] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1517'. [ 314.046239][T10237] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 314.334330][T11571] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1524'. [ 314.478379][T11576] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1525'. [ 315.240019][T11608] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 315.672707][T11635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.694137][T11635] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1536'. [ 315.824324][T11642] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1539'. [ 315.843426][T11644] tipc: Enabled bearer , priority 10 [ 316.088552][T11656] bond1: option mode: unable to set because the bond device has slaves [ 316.151091][T11659] netlink: 'syz.4.1544': attribute type 8 has an invalid length. [ 316.179332][T11659] bond0: (slave bond_slave_0): Releasing backup interface [ 316.200243][T11659] team0: Port device team_slave_0 removed [ 316.209369][T11659] team0: Port device team_slave_1 removed [ 316.216305][T11659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.224091][T11659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.232966][T11659] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 316.271300][T11662] gretap1: entered allmulticast mode [ 316.330130][T11668] tipc: Enabled bearer , priority 0 [ 316.346634][T11668] syzkaller0: entered promiscuous mode [ 316.362540][T11668] syzkaller0: entered allmulticast mode [ 316.404744][T11668] tipc: Resetting bearer [ 316.418984][T11668] tipc: Resetting bearer [ 316.463015][T11668] tipc: Disabling bearer [ 317.099068][T11701] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 317.111970][T11703] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 317.161929][T11701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.183228][T11702] syz_tun: entered allmulticast mode [ 317.184098][T11703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.191517][T11699] syz_tun: left allmulticast mode [ 317.290005][T11710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1558'. [ 317.459768][T11714] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1558'. [ 317.498732][T11712] netlink: 'syz.0.1548': attribute type 4 has an invalid length. [ 317.568337][T11725] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 317.685568][T11733] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1563'. [ 317.686174][T11732] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1563'. [ 318.691123][T11767] netlink: 'syz.3.1575': attribute type 2 has an invalid length. [ 318.709938][T11767] __nla_validate_parse: 2 callbacks suppressed [ 318.709955][T11767] netlink: 1184 bytes leftover after parsing attributes in process `syz.3.1575'. [ 318.813229][T11774] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 318.964014][T11786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.995081][T11784] netlink: 'syz.0.1579': attribute type 4 has an invalid length. [ 319.019189][T11784] netlink: 'syz.0.1579': attribute type 4 has an invalid length. [ 319.191600][T11798] netlink: 'syz.1.1582': attribute type 9 has an invalid length. [ 319.204291][T11798] netlink: 'syz.1.1582': attribute type 7 has an invalid length. [ 319.220326][T11798] netlink: 'syz.1.1582': attribute type 8 has an invalid length. [ 319.231598][T11798] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1582'. [ 319.554635][T11813] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1588'. [ 319.589271][T11813] 8021q: VLANs not supported on ip6_vti0 [ 319.685042][T11817] gtp0: entered promiscuous mode [ 319.695237][T11817] gtp0: entered allmulticast mode [ 319.890783][T11823] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1591'. [ 319.996585][T11828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1592'. [ 320.409760][T11839] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1596'. [ 320.420175][T11839] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1596'. [ 320.429710][T11839] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1596'. [ 321.065980][ T5870] Bluetooth: hci4: command 0x0406 tx timeout [ 321.208057][T11875] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 321.678098][T11889] netlink: 'syz.4.1608': attribute type 6 has an invalid length. [ 321.691985][T11889] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1608'. [ 322.009652][T11910] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1615'. [ 322.021875][T11910] openvswitch: netlink: Flow actions attr not present in new flow. [ 322.096336][T11911] ip6erspan0: entered allmulticast mode [ 322.132298][T11913] netlink: 'syz.3.1616': attribute type 1 has an invalid length. [ 322.509419][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 322.797598][T11930] netlink: 'syz.2.1621': attribute type 7 has an invalid length. [ 323.160294][T11950] netlink: 'syz.0.1626': attribute type 7 has an invalid length. [ 323.252998][T11950] netlink: 'syz.0.1626': attribute type 8 has an invalid length. [ 323.330554][T11962] unknown channel width for channel at 909000KHz? [ 323.426964][T11966] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 323.474065][T11970] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 323.996335][T11993] __nla_validate_parse: 10 callbacks suppressed [ 323.996357][T11993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1639'. [ 324.037095][T11993] netlink: 'syz.3.1639': attribute type 1 has an invalid length. [ 324.288921][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1643'. [ 324.361752][T12016] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1646'. [ 324.425097][T12018] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1647'. [ 324.493430][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1647'. [ 324.813668][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1649'. [ 324.852725][T12027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1649'. [ 324.863980][T12027] hsr_slave_0: left promiscuous mode [ 324.876904][T12027] hsr_slave_1: left promiscuous mode [ 324.919642][T12030] FAULT_INJECTION: forcing a failure. [ 324.919642][T12030] name failslab, interval 1, probability 0, space 0, times 0 [ 324.932887][T12030] CPU: 0 UID: 0 PID: 12030 Comm: syz.2.1650 Not tainted syzkaller #0 PREEMPT(full) [ 324.932917][T12030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 324.932931][T12030] Call Trace: [ 324.932940][T12030] [ 324.932949][T12030] dump_stack_lvl+0x189/0x250 [ 324.932981][T12030] ? __pfx____ratelimit+0x10/0x10 [ 324.933004][T12030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.933029][T12030] ? __pfx__printk+0x10/0x10 [ 324.933064][T12030] ? __pfx___might_resched+0x10/0x10 [ 324.933090][T12030] should_fail_ex+0x414/0x560 [ 324.933145][T12030] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 324.933170][T12030] should_failslab+0xa8/0x100 [ 324.933205][T12030] __kvmalloc_node_noprof+0x161/0x5f0 [ 324.933237][T12030] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 324.933270][T12030] bpf_test_run_xdp_live+0x1b5/0x1b10 [ 324.933306][T12030] ? stack_trace_save+0x9c/0xe0 [ 324.933335][T12030] ? stack_depot_save_flags+0x40/0x860 [ 324.933381][T12030] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 324.933406][T12030] ? bpf_prog_test_run_xdp+0x37c/0x1000 [ 324.933430][T12030] ? bpf_prog_test_run+0x2c7/0x340 [ 324.933460][T12030] ? __sys_bpf+0x581/0x870 [ 324.933485][T12030] ? __x64_sys_bpf+0x7c/0x90 [ 324.933535][T12030] ? __lock_acquire+0xab9/0xd20 [ 324.933580][T12030] ? __might_fault+0xb0/0x130 [ 324.933622][T12030] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 324.933658][T12030] ? _copy_from_user+0x94/0xb0 [ 324.933689][T12030] ? bpf_test_init+0x133/0x170 [ 324.933712][T12030] ? xdp_convert_md_to_buff+0x5b/0x330 [ 324.933753][T12030] bpf_prog_test_run_xdp+0x713/0x1000 [ 324.933799][T12030] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 324.933832][T12030] ? __fget_files+0x2a/0x420 [ 324.933858][T12030] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 324.933886][T12030] bpf_prog_test_run+0x2c7/0x340 [ 324.933921][T12030] __sys_bpf+0x581/0x870 [ 324.933953][T12030] ? __pfx___sys_bpf+0x10/0x10 [ 324.933997][T12030] ? ksys_write+0x22a/0x250 [ 324.934029][T12030] ? __pfx_ksys_write+0x10/0x10 [ 324.934054][T12030] ? rcu_is_watching+0x15/0xb0 [ 324.934078][T12030] __x64_sys_bpf+0x7c/0x90 [ 324.934100][T12030] do_syscall_64+0xfa/0x3b0 [ 324.934118][T12030] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.934134][T12030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.934151][T12030] ? clear_bhb_loop+0x60/0xb0 [ 324.934172][T12030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.934188][T12030] RIP: 0033:0x7f9ccb38eba9 [ 324.934205][T12030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.934220][T12030] RSP: 002b:00007f9ccc2bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 324.934239][T12030] RAX: ffffffffffffffda RBX: 00007f9ccb5d5fa0 RCX: 00007f9ccb38eba9 [ 324.934252][T12030] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 324.934263][T12030] RBP: 00007f9ccc2bf090 R08: 0000000000000000 R09: 0000000000000000 [ 324.934274][T12030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.934284][T12030] R13: 00007f9ccb5d6038 R14: 00007f9ccb5d5fa0 R15: 00007fff77271b28 [ 324.934311][T12030] [ 325.364888][T12037] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1652'. [ 325.785796][T12065] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1663'. [ 325.893762][T12067] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1663'. [ 326.334363][T12083] tipc: Enabled bearer , priority 0 [ 326.343415][T12083] syzkaller0: entered promiscuous mode [ 326.352458][T12083] syzkaller0: entered allmulticast mode [ 326.418093][T12083] tipc: Resetting bearer [ 326.979267][T12108] vxcan2: entered allmulticast mode [ 327.042269][T12109] vxcan4: entered allmulticast mode [ 327.391788][T12123] tipc: Resetting bearer [ 327.422146][T12123] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 327.497382][T12123] tipc: Resetting bearer [ 327.559769][T12123] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 329.098752][T12204] __nla_validate_parse: 12 callbacks suppressed [ 329.098774][T12204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1700'. [ 329.133930][T12204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1700'. [ 329.514437][T12204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1700'. [ 329.608369][T12223] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1704'. [ 329.700477][T12228] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1706'. [ 329.890664][T12245] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 330.570170][T12275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1720'. [ 330.767315][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1721'. [ 330.815460][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1721'. [ 330.914265][T12292] syzkaller0: entered promiscuous mode [ 330.932931][T12292] syzkaller0: entered allmulticast mode [ 330.940681][T12288] tipc: Enabled bearer , priority 0 [ 330.958680][T12288] tipc: Enabling of bearer rejected, already enabled [ 330.971316][T12288] tipc: Enabling of bearer rejected, already enabled [ 330.994905][T12288] tipc: Enabling of bearer rejected, already enabled [ 331.064057][T12283] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1721'. [ 331.068234][T12306] tap0: tun_chr_ioctl cmd 1074025677 [ 331.078915][T12306] tap0: linktype set to 800 [ 331.087907][T12304] netlink: 'syz.3.1727': attribute type 3 has an invalid length. [ 331.097185][T12304] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1727'. [ 331.133003][T12288] tipc: Resetting bearer [ 331.200554][T12288] tipc: Disabling bearer [ 331.272718][T12310] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 333.432236][T12386] ip6tnl3: entered promiscuous mode [ 333.456271][T12386] ip6tnl3: entered allmulticast mode [ 333.471966][T12386] team0: Device ip6tnl3 is of different type [ 333.593924][T12389] 8021q: VLANs not supported on caif0 [ 333.602710][T12396] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6) [ 333.738525][T12404] netlink: 'syz.0.1758': attribute type 13 has an invalid length. [ 333.747061][T12404] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 333.847463][T12413] Bluetooth: MGMT ver 1.23 [ 333.971555][T12421] 8021q: adding VLAN 0 to HW filter on device bond3 [ 334.000048][T12421] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 334.011049][T12421] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 334.034449][T12421] tipc: Resetting bearer [ 334.045987][T12421] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 334.075945][T10235] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 334.096648][T10235] bond3: (slave macvlan2): link status up again after 0 ms [ 334.109524][T10235] bond3: (slave macvlan2): failed to get link speed/duplex [ 334.205865][T10235] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 334.226295][T10235] bond3: (slave macvlan2): failed to get link speed/duplex [ 334.272346][T12433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.355559][T10237] bond3: (slave macvlan2): failed to get link speed/duplex [ 334.385844][T12436] netlink: 'syz.2.1769': attribute type 1 has an invalid length. [ 334.459413][T12442] __nla_validate_parse: 8 callbacks suppressed [ 334.459432][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1769'. [ 334.492090][T12436] 8021q: adding VLAN 0 to HW filter on device bond10 [ 334.506020][T12442] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 334.514741][T12442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.525635][T10237] bond3: (slave macvlan2): failed to get link speed/duplex [ 334.686389][T12454] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1775'. [ 334.767216][T12454] netlink: 'syz.1.1775': attribute type 4 has an invalid length. [ 334.775216][T12454] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1775'. [ 334.896859][T12461] FAULT_INJECTION: forcing a failure. [ 334.896859][T12461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.943900][T12461] CPU: 0 UID: 0 PID: 12461 Comm: syz.4.1777 Not tainted syzkaller #0 PREEMPT(full) [ 334.943931][T12461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 334.943944][T12461] Call Trace: [ 334.943953][T12461] [ 334.943963][T12461] dump_stack_lvl+0x189/0x250 [ 334.943996][T12461] ? __pfx____ratelimit+0x10/0x10 [ 334.944018][T12461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.944044][T12461] ? __pfx__printk+0x10/0x10 [ 334.944088][T12461] should_fail_ex+0x414/0x560 [ 334.944127][T12461] _copy_to_user+0x31/0xb0 [ 334.944158][T12461] bpf_test_finish+0x24e/0x700 [ 334.944191][T12461] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 334.944226][T12461] ? __pfx_bpf_test_finish+0x10/0x10 [ 334.944259][T12461] ? bpf_test_init+0x133/0x170 [ 334.944286][T12461] bpf_prog_test_run_xdp+0x79a/0x1000 [ 334.944334][T12461] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 334.944384][T12461] ? __fget_files+0x2a/0x420 [ 334.944411][T12461] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 334.944439][T12461] bpf_prog_test_run+0x2c7/0x340 [ 334.944475][T12461] __sys_bpf+0x581/0x870 [ 334.944507][T12461] ? __pfx___sys_bpf+0x10/0x10 [ 334.944551][T12461] ? ksys_write+0x22a/0x250 [ 334.944584][T12461] ? __pfx_ksys_write+0x10/0x10 [ 334.944610][T12461] ? rcu_is_watching+0x15/0xb0 [ 334.944641][T12461] __x64_sys_bpf+0x7c/0x90 [ 334.944668][T12461] do_syscall_64+0xfa/0x3b0 [ 334.944691][T12461] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.944712][T12461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.944734][T12461] ? clear_bhb_loop+0x60/0xb0 [ 334.944761][T12461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.944782][T12461] RIP: 0033:0x7fa29058eba9 [ 334.944801][T12461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.944820][T12461] RSP: 002b:00007fa2914f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 334.944843][T12461] RAX: ffffffffffffffda RBX: 00007fa2907d5fa0 RCX: 00007fa29058eba9 [ 334.944859][T12461] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 334.944873][T12461] RBP: 00007fa2914f6090 R08: 0000000000000000 R09: 0000000000000000 [ 334.944887][T12461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 334.944900][T12461] R13: 00007fa2907d6038 R14: 00007fa2907d5fa0 R15: 00007fff1d39bc98 [ 334.944938][T12461] [ 335.230482][T12468] netlink: 'syz.4.1780': attribute type 9 has an invalid length. [ 335.241319][T12468] netlink: 'syz.4.1780': attribute type 7 has an invalid length. [ 335.257848][T12468] netlink: 'syz.4.1780': attribute type 8 has an invalid length. [ 335.315826][T12468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1780'. [ 335.339022][T12468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1780'. [ 335.391716][T12475] netlink: 'syz.1.1779': attribute type 303 has an invalid length. [ 335.938833][T12499] netlink: 'syz.4.1789': attribute type 1 has an invalid length. [ 336.142016][T12511] netlink: 'syz.3.1793': attribute type 9 has an invalid length. [ 336.151210][T12511] netlink: 'syz.3.1793': attribute type 7 has an invalid length. [ 336.165257][T12511] netlink: 'syz.3.1793': attribute type 8 has an invalid length. [ 336.187444][T12511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1793'. [ 336.198861][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'. [ 336.290495][T12514] dvmrp8: entered allmulticast mode [ 336.490269][T12486] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 336.499587][T12486] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 336.526179][T12486] tipc: Resetting bearer [ 336.856153][T12529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.897325][T12529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.912860][T12529] bond0 (unregistering): Released all slaves [ 336.938866][T12533] vxcan1 speed is unknown, defaulting to 1000 [ 336.939418][T12506] dvmrp8: left allmulticast mode [ 337.081248][T12533] vxcan1 speed is unknown, defaulting to 1000 [ 337.207052][T12539] block nbd1: server does not support multiple connections per device. [ 337.230061][T12539] block nbd1: shutting down sockets [ 337.270363][T12533] vxcan1 speed is unknown, defaulting to 1000 [ 337.573868][T12551] xt_l2tp: invalid flags combination: 8 [ 337.684907][T12556] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1805'. [ 337.704817][T12556] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1805'. [ 337.824060][T12556] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 337.856105][T12556] syzkaller1: linktype set to 778 [ 338.309123][T12576] syzkaller0: entered promiscuous mode [ 338.314659][T12576] syzkaller0: entered allmulticast mode [ 338.487284][T12582] netlink: 20824 bytes leftover after parsing attributes in process `syz.3.1812'. [ 338.531680][T12533] infiniband syz2: set down [ 338.546565][T12533] infiniband syz2: added vxcan1 [ 338.561788][ T5878] vxcan1 speed is unknown, defaulting to 1000 [ 338.579656][T12588] netlink: 'syz.0.1814': attribute type 2 has an invalid length. [ 338.600561][T12533] syz2: rxe_create_cq: returned err = -12 [ 338.633690][T12533] infiniband syz2: Couldn't create ib_mad CQ [ 338.664202][T12533] infiniband syz2: Couldn't open port 1 [ 338.696837][T12588] : entered promiscuous mode [ 338.761818][T12533] RDS/IB: syz2: added [ 338.772347][T12533] smc: adding ib device syz2 with port count 1 [ 338.788898][T12533] smc: ib device syz2 port 1 has no pnetid [ 338.850998][ T5940] vxcan1 speed is unknown, defaulting to 1000 [ 338.871162][T12533] vxcan1 speed is unknown, defaulting to 1000 [ 339.069223][T12607] netlink: 'syz.4.1816': attribute type 13 has an invalid length. [ 339.268124][T10237] net_ratelimit: 21 callbacks suppressed [ 339.268142][T10237] bond3: (slave macvlan2): failed to get link speed/duplex [ 339.405502][ T140] bond3: (slave macvlan2): failed to get link speed/duplex [ 339.515482][ T140] bond3: (slave macvlan2): failed to get link speed/duplex [ 339.612115][T12533] vxcan1 speed is unknown, defaulting to 1000 [ 339.625501][T10237] bond3: (slave macvlan2): failed to get link speed/duplex [ 339.637172][T12624] __nla_validate_parse: 3 callbacks suppressed [ 339.637191][T12624] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1822'. [ 339.674328][T12624] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1822'. [ 339.745547][ T140] bond3: (slave macvlan2): failed to get link speed/duplex [ 339.853652][T12614] netlink: 'syz.2.1820': attribute type 1 has an invalid length. [ 339.868452][T12614] netlink: 'syz.2.1820': attribute type 11 has an invalid length. [ 339.886010][T12614] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1820'. [ 339.898165][T12628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1824'. [ 339.965662][ T140] bond3: (slave macvlan2): failed to get link speed/duplex [ 339.997391][T12628] tap0: tun_chr_ioctl cmd 1074025677 [ 340.002958][T12628] tap0: linktype set to 776 [ 340.028514][T12628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1824'. [ 340.150285][T12609] vxcan1 speed is unknown, defaulting to 1000 [ 340.157713][ T140] bond3: (slave macvlan2): failed to get link speed/duplex [ 340.285525][T10237] bond3: (slave macvlan2): failed to get link speed/duplex [ 340.395534][ T140] bond3: (slave macvlan2): failed to get link speed/duplex [ 340.502707][T12533] vxcan1 speed is unknown, defaulting to 1000 [ 340.506150][T10237] bond3: (slave macvlan2): failed to get link speed/duplex [ 340.632583][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1831'. [ 340.652798][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1831'. [ 340.914548][T12533] vxcan1 speed is unknown, defaulting to 1000 [ 341.187335][T12665] netlink: 'syz.2.1833': attribute type 9 has an invalid length. [ 341.195237][T12665] netlink: 'syz.2.1833': attribute type 7 has an invalid length. [ 341.203149][T12665] netlink: 'syz.2.1833': attribute type 8 has an invalid length. [ 341.212836][T12665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1833'. [ 341.467229][T12673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.476106][T12533] vxcan1 speed is unknown, defaulting to 1000 [ 341.646243][T12679] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1838'. [ 341.655719][T12679] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1838'. [ 341.672053][T12679] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 341.682489][T12679] gretap1: entered promiscuous mode [ 341.692574][T12679] gretap1: entered allmulticast mode [ 341.813675][T12533] vxcan1 speed is unknown, defaulting to 1000 [ 342.130247][T12533] vxcan1 speed is unknown, defaulting to 1000 [ 342.282447][T12696] tipc: Enabled bearer , priority 0 [ 342.290434][T12696] syzkaller0: entered promiscuous mode [ 342.296033][T12696] syzkaller0: entered allmulticast mode [ 342.321407][T12696] tipc: Resetting bearer [ 342.331852][T12696] tipc: Resetting bearer [ 342.348650][T12696] tipc: Disabling bearer [ 343.351559][T12744] netlink: 'syz.2.1856': attribute type 13 has an invalid length. [ 343.410758][T12744] netlink: 'syz.2.1856': attribute type 17 has an invalid length. [ 343.564496][T12744] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.839568][T12759] tipc: Enabling of bearer rejected, already enabled [ 343.863757][T12764] veth1_macvtap: left promiscuous mode [ 343.871563][T12764] macsec0: entered allmulticast mode [ 343.927264][T12756] vxcan1 speed is unknown, defaulting to 1000 [ 343.983191][T12768] netlink: 'syz.2.1862': attribute type 2 has an invalid length. [ 344.327537][T12762] vxcan1 speed is unknown, defaulting to 1000 [ 344.447533][ T1140] net_ratelimit: 27 callbacks suppressed [ 344.447556][ T1140] bond3: (slave macvlan2): failed to get link speed/duplex [ 344.565637][ T1140] bond3: (slave macvlan2): failed to get link speed/duplex [ 344.805765][T10237] bond3: (slave macvlan2): failed to get link speed/duplex [ 344.915544][T10234] bond3: (slave macvlan2): failed to get link speed/duplex [ 345.009444][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ab4f800: rx timeout, send abort [ 345.019317][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ab4f800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 345.034149][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ab4e800: rx timeout, send abort [ 345.043206][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ab4e800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 345.063270][ T140] bond3: (slave macvlan2): failed to get link speed/duplex [ 345.195758][ T140] bond3: (slave macvlan2): failed to get link speed/duplex [ 345.252512][T12795] team0: Port device team_slave_0 removed [ 345.289577][T12795] team0: Port device team_slave_1 removed [ 345.300588][T12795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.310533][T12795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.319256][T12795] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 345.354657][T12791] vxcan1 speed is unknown, defaulting to 1000 [ 345.362972][ T140] bond3: (slave macvlan2): failed to get link speed/duplex [ 345.485671][ T140] bond3: (slave macvlan2): failed to get link speed/duplex [ 345.516301][T12811] netlink: 'syz.3.1874': attribute type 21 has an invalid length. [ 345.525699][T12812] netlink: 'syz.3.1874': attribute type 21 has an invalid length. [ 345.547522][T12811] __nla_validate_parse: 2 callbacks suppressed [ 345.547544][T12811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1874'. [ 345.583240][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1874'. [ 345.690906][T10237] bond3: (slave macvlan2): failed to get link speed/duplex [ 345.730018][T12819] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1876'. [ 345.788519][T12821] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1877'. [ 345.942523][T12827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1878'. [ 345.961910][T12827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1878'. [ 346.009827][T12790] vxcan1 speed is unknown, defaulting to 1000 [ 346.184392][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1880'. [ 346.279553][T12839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1882'. [ 346.430322][T12835] vxcan1 speed is unknown, defaulting to 1000 [ 346.892601][T12839] vxcan1 speed is unknown, defaulting to 1000 [ 346.966927][T12852] netlink: 'syz.1.1886': attribute type 1 has an invalid length. [ 347.014567][T12849] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1885'. [ 347.025776][T12848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1885'. [ 347.170287][T12854] netlink: 'syz.1.1887': attribute type 3 has an invalid length. [ 347.205717][T12856] netlink: 'syz.3.1888': attribute type 1 has an invalid length. [ 347.319898][T12860] sctp: [Deprecated]: syz.3.1888 (pid 12860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.319898][T12860] Use struct sctp_sack_info instead [ 348.439086][ T30] audit: type=1804 audit(1758147375.545:6): pid=12882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1896" name="/newroot/351/cgroup.controllers" dev="tmpfs" ino=1816 res=1 errno=0 [ 348.462233][ T30] audit: type=1800 audit(1758147375.545:7): pid=12882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1896" name="cgroup.controllers" dev="tmpfs" ino=1816 res=0 errno=0 [ 348.484720][ T30] audit: type=1800 audit(1758147375.545:8): pid=12882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1896" name="cgroup.controllers" dev="tmpfs" ino=1816 res=0 errno=0 [ 348.791075][T12901] macvtap1: entered promiscuous mode [ 348.805675][T12901] dummy0: entered promiscuous mode [ 348.811465][T12901] macvtap1: entered allmulticast mode [ 348.827603][T12901] dummy0: entered allmulticast mode [ 348.847754][T12911] dummy0: left allmulticast mode [ 348.852768][T12911] dummy0: left promiscuous mode [ 349.536135][T10234] net_ratelimit: 21 callbacks suppressed [ 349.536155][T10234] bond3: (slave macvlan2): failed to get link speed/duplex [ 349.655859][ T1140] bond3: (slave macvlan2): failed to get link speed/duplex [ 349.766843][T10235] bond3: (slave macvlan2): failed to get link speed/duplex [ 349.809136][T12940] pimreg: tun_chr_ioctl cmd 2147767506 [ 349.818789][T12940] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 349.828322][T12940] tipc: Enabled bearer , priority 10 [ 349.875785][T10234] bond3: (slave macvlan2): failed to get link speed/duplex [ 349.892389][T12945] netlink: 'syz.4.1916': attribute type 1 has an invalid length. [ 349.955584][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 349.982700][T12945] 8021q: adding VLAN 0 to HW filter on device bond5 [ 350.071439][T12949] 8021q: adding VLAN 0 to HW filter on device bond5 [ 350.079038][T12949] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 350.093674][T12949] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 350.165697][T12954] netlink: 'syz.2.1914': attribute type 16 has an invalid length. [ 350.173802][T12954] netlink: 'syz.2.1914': attribute type 17 has an invalid length. [ 350.194672][T12945] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 350.225932][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 350.384514][T12954] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 350.428411][T10237] bond3: (slave macvlan2): failed to get link speed/duplex [ 350.505657][T12962] can: request_module (can-proto-0) failed. [ 350.546086][ T1140] bond3: (slave macvlan2): failed to get link speed/duplex [ 350.610162][T12969] __nla_validate_parse: 11 callbacks suppressed [ 350.610184][T12969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1921'. [ 351.051516][T12979] netlink: 'syz.0.1925': attribute type 1 has an invalid length. [ 351.221507][T12979] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 351.437461][T13000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1928'. [ 351.463062][T13002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1931'. [ 351.474848][T13002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1931'. [ 351.493448][T13002] netlink: 'syz.0.1931': attribute type 10 has an invalid length. [ 351.503028][T13005] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1932'. [ 351.512898][T13002] syz_tun: entered promiscuous mode [ 351.556176][T13002] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 351.568686][T13005] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1932'. [ 351.641622][T10237] bond3: (slave macvlan2): link status definitely up, 10000 Mbps full duplex [ 351.666850][T10237] bond3: active interface up! [ 351.681851][T13011] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1933'. [ 351.739274][T13014] vxcan1 speed is unknown, defaulting to 1000 [ 351.868450][T13022] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1937'. [ 351.967179][T10237] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 352.042765][T13031] ip6gretap0: entered promiscuous mode [ 352.048761][T13031] macsec1: entered allmulticast mode [ 352.054187][T13031] ip6gretap0: entered allmulticast mode [ 352.081154][T13031] ip6gretap0: left allmulticast mode [ 352.099665][T13031] ip6gretap0: left promiscuous mode [ 352.934258][T13050] vxcan1 speed is unknown, defaulting to 1000 [ 353.298361][T13078] syzkaller0: entered promiscuous mode [ 353.304154][T13078] syzkaller0: entered allmulticast mode [ 353.419323][T13053] vxcan1 speed is unknown, defaulting to 1000 [ 353.618146][T13087] bpq0: entered promiscuous mode [ 353.623189][T13087] bpq0: entered allmulticast mode [ 353.673774][T13087] bpq0: left promiscuous mode [ 353.684683][T13087] bpq0: left allmulticast mode [ 353.725565][T13091] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1951'. [ 353.759539][T13059] vxcan1 speed is unknown, defaulting to 1000 [ 354.103588][T13057] vxcan1 speed is unknown, defaulting to 1000 [ 354.250916][T13112] netlink: 'syz.0.1957': attribute type 10 has an invalid length. [ 354.255891][T13111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1956'. [ 354.327077][T13115] netlink: 'syz.0.1957': attribute type 10 has an invalid length. [ 354.577717][T13126] netlink: 'syz.0.1961': attribute type 3 has an invalid length. [ 354.905570][ C1] net_ratelimit: 13 callbacks suppressed [ 354.905593][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 355.027753][T13131] vxcan1 speed is unknown, defaulting to 1000 [ 355.771652][T13160] netlink: 'syz.3.1967': attribute type 10 has an invalid length. [ 355.807003][T13161] __nla_validate_parse: 3 callbacks suppressed [ 355.807026][T13161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1966'. [ 355.945580][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 356.995506][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 358.013815][T13184] netlink: 'syz.3.1974': attribute type 12 has an invalid length. [ 358.024990][T13184] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.1974'. [ 358.034435][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 358.655690][T13197] nbd0: detected capacity change from 0 to 63 [ 358.662202][T13201] block nbd0: NBD_DISCONNECT [ 358.662509][T13205] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1978'. [ 358.688238][T13201] block nbd0: Disconnected due to user request. [ 358.736995][T13201] block nbd0: shutting down sockets [ 359.075458][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 360.105463][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 360.245962][T13226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'. [ 360.254977][T13226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'. [ 360.363707][T13235] netlink: 'syz.1.1985': attribute type 1 has an invalid length. [ 360.488104][T13239] macvtap1: entered promiscuous mode [ 360.493471][T13239] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 360.511555][T13239] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 360.743692][T13252] tipc: Enabling of bearer rejected, already enabled [ 360.764745][T13252] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 360.945290][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1990'. [ 361.145675][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 361.161543][T13263] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1993'. [ 361.280595][T13268] vxcan1 speed is unknown, defaulting to 1000 [ 361.343245][T13270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1996'. [ 361.376831][T13275] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1998'. [ 361.405808][T13275] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1998'. [ 361.514770][T13282] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1999'. [ 361.594764][T13288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2002'. [ 361.642888][T13288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2002'. [ 362.195716][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 362.684103][T13323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2009'. [ 362.695864][T13325] netlink: 'syz.4.2013': attribute type 1 has an invalid length. [ 362.706241][T13323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2009'. [ 362.754319][T13325] 8021q: adding VLAN 0 to HW filter on device bond6 [ 362.810391][T13325] bond6: (slave batadv2): Opening slave failed [ 363.225432][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 363.894169][T13373] geneve3: entered promiscuous mode [ 363.899753][T13373] geneve3: entered allmulticast mode [ 363.918351][T10237] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 363.940737][T10237] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 363.990182][T13384] tipc: Enabled bearer , priority 0 [ 364.023389][T10237] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 364.035632][T10237] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 364.045225][T13381] syzkaller0: entered promiscuous mode [ 364.050831][T13381] syzkaller0: entered allmulticast mode [ 364.094871][T13381] tipc: Resetting bearer [ 364.150570][T13381] tipc: Disabling bearer [ 364.265538][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 364.532033][T13417] vxcan1 speed is unknown, defaulting to 1000 [ 364.981784][T13431] tipc: Enabled bearer , priority 0 [ 365.007597][T13431] syzkaller0: entered promiscuous mode [ 365.018809][T13431] syzkaller0: entered allmulticast mode [ 365.109587][T13431] tipc: Resetting bearer [ 365.128782][T13430] tipc: Resetting bearer [ 365.158225][T13430] tipc: Disabling bearer [ 365.305728][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 365.407998][T13441] bridge: RTM_NEWNEIGH with unconfigured vlan 2302 on bridge0 [ 366.088755][T13471] vxcan1 speed is unknown, defaulting to 1000 [ 366.345689][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 366.410911][T13481] __nla_validate_parse: 7 callbacks suppressed [ 366.410931][T13481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2058'. [ 366.469273][T13453] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 366.515762][T13485] netlink: 'syz.0.2059': attribute type 9 has an invalid length. [ 366.546679][T13485] netlink: 'syz.0.2059': attribute type 7 has an invalid length. [ 366.554546][T13485] netlink: 'syz.0.2059': attribute type 8 has an invalid length. [ 366.582686][T13487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2059'. [ 366.977995][T13478] vxcan1 speed is unknown, defaulting to 1000 [ 367.125966][T13499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2063'. [ 367.255282][T13505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2064'. [ 367.353695][T13491] vxcan1 speed is unknown, defaulting to 1000 [ 367.385556][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 368.005693][T13521] netlink: 'syz.3.2069': attribute type 1 has an invalid length. [ 368.054834][T13521] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 368.132252][T13522] netlink: 'syz.0.2068': attribute type 39 has an invalid length. [ 368.425463][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 368.821886][T13548] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2077'. [ 368.867594][T13548] bond5: entered promiscuous mode [ 368.873075][T13548] 8021q: adding VLAN 0 to HW filter on device bond5 [ 368.968936][T13548] bond5 (unregistering): Released all slaves [ 369.169220][T13557] vxcan1 speed is unknown, defaulting to 1000 [ 369.234698][T13564] netlink: zone id is out of range [ 369.306929][T13566] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2082'. [ 369.316550][T13566] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 369.335573][T13568] netlink: 'syz.0.2084': attribute type 1 has an invalid length. [ 369.345586][T13568] netlink: 'syz.0.2084': attribute type 3 has an invalid length. [ 369.353364][T13568] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2084'. [ 369.402546][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2085'. [ 369.465571][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 369.740591][T13591] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2090'. [ 369.773402][T13592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2089'. [ 369.932355][T13574] vxcan1 speed is unknown, defaulting to 1000 [ 370.137141][T13605] netlink: 'syz.3.2094': attribute type 1 has an invalid length. [ 370.282643][T13605] 8021q: adding VLAN 0 to HW filter on device bond5 [ 370.337883][T13607] 8021q: adding VLAN 0 to HW filter on device bond5 [ 370.360096][T13607] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 370.408385][T13607] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 370.473729][T13600] vxcan1 speed is unknown, defaulting to 1000 [ 370.506007][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 371.429932][T13636] __nla_validate_parse: 1 callbacks suppressed [ 371.429951][T13636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2104'. [ 371.481815][T13640] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2105'. [ 371.545562][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 371.705667][T13650] netlink: 'syz.1.2106': attribute type 1 has an invalid length. [ 371.764994][T13650] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2106'. [ 371.817999][T13654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2110'. [ 371.843916][T13654] pim6reg1: entered allmulticast mode [ 372.485307][T13679] netlink: 'syz.4.2116': attribute type 1 has an invalid length. [ 372.512691][T13679] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2116'. [ 372.535921][T13679] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2116'. [ 372.585763][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 372.651917][T13688] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2120'. [ 372.791735][T13692] vxcan1 speed is unknown, defaulting to 1000 [ 372.900343][T13696] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2122'. [ 373.206123][T13717] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2128'. [ 373.462811][T13724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2130'. [ 373.625582][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 373.739556][T13724] team0: Port device geneve0 removed [ 373.802272][T13741] tipc: Enabling of bearer rejected, failed to enable media [ 373.874984][T13736] netlink: 'syz.3.2134': attribute type 1 has an invalid length. [ 374.167655][T13753] netlink: 'syz.3.2138': attribute type 11 has an invalid length. [ 374.192921][T13753] tipc: Enabling of bearer rejected, already enabled [ 374.205887][T13753] tipc: New replicast peer: 172.20.20.17 [ 374.243038][T13755] bond7: entered promiscuous mode [ 374.248860][T13755] 8021q: adding VLAN 0 to HW filter on device bond7 [ 374.296697][T13755] 8021q: adding VLAN 0 to HW filter on device bond7 [ 374.306967][T13755] bond7: (slave vcan2): The slave device specified does not support setting the MAC address [ 374.335020][T13755] bond7: (slave vcan2): Error -95 calling set_mac_address [ 374.406906][T13766] netlink: 'syz.1.2142': attribute type 18 has an invalid length. [ 374.476471][T13768] netlink: get zone limit has 8 unknown bytes [ 374.488893][T13770] netlink: get zone limit has 8 unknown bytes [ 374.496386][T13769] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 374.517143][T13768] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 374.665554][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 374.778292][T13787] bridge_slave_0: default FDB implementation only supports local addresses [ 374.852132][T13793] netlink: 'syz.2.2152': attribute type 13 has an invalid length. [ 374.861159][T13793] netlink: 'syz.2.2152': attribute type 17 has an invalid length. [ 374.926464][T13793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 375.060940][T13802] netlink: 'syz.4.2155': attribute type 12 has an invalid length. [ 375.105059][T13784] vxcan1 speed is unknown, defaulting to 1000 [ 375.217780][T13812] netlink: 'syz.4.2158': attribute type 1 has an invalid length. [ 375.249356][T13812] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 375.366079][T13821] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 375.705528][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 376.337861][T13866] tipc: Resetting bearer [ 376.422135][T13870] netlink: 'syz.0.2178': attribute type 1 has an invalid length. [ 376.745645][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 376.818577][T13893] openvswitch: netlink: Message has 215 unknown bytes. [ 376.953687][T13903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.006699][T13906] __nla_validate_parse: 14 callbacks suppressed [ 377.006723][T13906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2189'. [ 377.095683][T13911] vxcan1 speed is unknown, defaulting to 1000 [ 377.196938][T13915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2191'. [ 377.387177][ T5183] Bluetooth: hci0: command tx timeout [ 377.410114][T13921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2193'. [ 377.578122][T13919] vxcan1 speed is unknown, defaulting to 1000 [ 377.785576][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 377.886790][T13940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2197'. [ 377.957460][T13940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2197'. [ 378.249960][T13945] vxcan1 speed is unknown, defaulting to 1000 [ 378.457149][T13952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2200'. [ 378.827353][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 379.043360][T13958] syzkaller0: entered promiscuous mode [ 379.055469][T13958] syzkaller0: entered allmulticast mode [ 379.675649][T13967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2205'. [ 379.697063][T13967] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2205'. [ 379.733618][T13968] netlink: 'syz.2.2205': attribute type 10 has an invalid length. [ 379.742335][T13968] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2205'. [ 379.875526][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 380.915430][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 381.270332][T13986] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2209'. [ 381.361973][T13990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.497314][T13993] vxcan1 speed is unknown, defaulting to 1000 [ 381.945540][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 382.203609][T14030] tipc: Enabled bearer , priority 0 [ 382.213892][T14030] syzkaller0: entered promiscuous mode [ 382.219657][T14030] syzkaller0: entered allmulticast mode [ 382.281749][T14030] tipc: Resetting bearer [ 382.315742][T14035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2227'. [ 382.325389][T14029] tipc: Resetting bearer [ 382.384768][T14029] tipc: Disabling bearer [ 382.985552][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 383.897642][T14098] tipc: Enabled bearer , priority 0 [ 383.908120][T14098] syzkaller0: entered promiscuous mode [ 383.913648][T14098] syzkaller0: entered allmulticast mode [ 383.949190][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 383.980664][T14098] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 384.004853][T14098] tipc: Resetting bearer [ 384.014269][T14096] tipc: Resetting bearer [ 384.031267][T14096] tipc: Disabling bearer [ 384.035536][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 384.272902][T14123] netlink: 'syz.2.2267': attribute type 9 has an invalid length. [ 384.283439][T14123] netlink: 'syz.2.2267': attribute type 7 has an invalid length. [ 384.291675][T14123] netlink: 'syz.2.2267': attribute type 8 has an invalid length. [ 384.413124][T14130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2269'. [ 384.430116][T14130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2269'. [ 384.547985][T14134] bond11: entered promiscuous mode [ 384.553193][T14134] bond11: entered allmulticast mode [ 384.554943][T14136] delete_channel: no stack [ 384.559970][T14134] 8021q: adding VLAN 0 to HW filter on device bond11 [ 384.690504][T14134] bond11 (unregistering): Released all slaves [ 384.836403][T14143] delete_channel: no stack [ 385.065543][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 385.113271][T14168] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 385.174143][T14176] tipc: Enabling of bearer rejected, failed to enable media [ 386.119486][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 387.002126][T14201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2293'. [ 387.146695][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 387.158706][ T5870] Bluetooth: hci4: command 0x0406 tx timeout [ 387.302556][T14204] netlink: 'syz.3.2294': attribute type 4 has an invalid length. [ 387.355573][T14204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2294'. [ 387.554692][T14222] vxcan1 speed is unknown, defaulting to 1000 [ 387.591256][T14224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2292'. [ 387.819207][T14224] syz_tun (unregistering): left allmulticast mode [ 387.855160][T14236] netlink: 'syz.4.2301': attribute type 9 has an invalid length. [ 387.863499][T14236] netlink: 'syz.4.2301': attribute type 7 has an invalid length. [ 387.864083][T14224] bond0: (slave syz_tun): Releasing backup interface [ 387.871393][T14236] netlink: 'syz.4.2301': attribute type 8 has an invalid length. [ 388.007148][T14239] netlink: 'syz.4.2302': attribute type 13 has an invalid length. [ 388.025060][T14239] netlink: 'syz.4.2302': attribute type 17 has an invalid length. [ 388.095221][T10235] bond3: (slave macvlan2): speed changed to 0 on port 1 [ 388.174053][T14239] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.185499][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 388.200437][T14239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 388.255994][T14238] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2302'. [ 388.290181][T14248] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2304'. [ 388.299504][T10235] bond3: (slave macvlan2): link status definitely down, disabling slave [ 388.315933][T10235] bond3: now running without any active interface! [ 388.456987][T14262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2307'. [ 388.785720][T14276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2309'. [ 388.790302][T14282] vxcan1 speed is unknown, defaulting to 1000 [ 389.046093][T14294] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2315'. [ 389.192795][T14299] netlink: 'syz.1.2317': attribute type 8 has an invalid length. [ 389.219740][T14299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2317'. [ 389.228907][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 389.252475][T14299] bond0: entered promiscuous mode [ 389.264969][T14299] bond0: left promiscuous mode [ 390.271455][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 391.322064][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 392.361308][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 393.400512][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 394.433155][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 395.471386][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 396.511086][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 397.560125][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 398.589695][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 399.644479][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 400.212658][T14327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2325'. [ 400.671145][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 401.711628][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 402.108268][T14315] vxcan1 speed is unknown, defaulting to 1000 [ 402.751488][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 403.792031][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 404.829447][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 405.870529][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 406.910925][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 407.962802][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 409.009865][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 410.042673][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 411.023302][T14330] tipc: Enabling of bearer rejected, already enabled [ 411.071547][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 412.109816][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 413.151250][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 414.199638][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 415.227906][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 416.271139][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 417.309063][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 418.350734][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 419.390629][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 420.429492][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 421.470700][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 422.509955][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 423.549428][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 424.599745][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 425.638603][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 426.534408][ T5870] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 426.654207][ T5870] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 426.680965][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 426.764250][ T5870] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 427.114023][ T5870] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 427.721623][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 427.740155][ T5870] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 428.759505][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 429.798692][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 429.885064][ T5183] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 430.033443][ T5183] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 430.143860][ T5183] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 430.483621][ T5183] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 430.830240][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 430.893434][ T5183] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 431.254251][ T5873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 431.494049][ T5873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 431.652600][ T5873] Bluetooth: hci5: command tx timeout [ 431.714472][ T5873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 431.871710][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 432.662561][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 432.864064][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 432.911727][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 433.003757][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 433.024001][ T5873] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 433.174145][ T5873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 433.734459][ T5183] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 433.752813][ T5873] Bluetooth: hci5: command tx timeout [ 433.951827][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 434.243666][ T5183] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 434.692986][ T5183] Bluetooth: hci6: command tx timeout [ 434.995574][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 435.872453][ T5870] Bluetooth: hci5: command tx timeout [ 436.030469][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 436.444424][ T5870] Bluetooth: hci0: command tx timeout [ 436.853620][ T5870] Bluetooth: hci6: command tx timeout [ 437.070618][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 437.794326][ T5870] Bluetooth: hci4: command tx timeout [ 437.952644][ T5870] Bluetooth: hci5: command tx timeout [ 438.109038][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 438.534591][ T5870] Bluetooth: hci0: command tx timeout [ 438.923472][ T5870] Bluetooth: hci6: command tx timeout [ 439.161368][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 439.892647][ T5870] Bluetooth: hci4: command tx timeout [ 440.189978][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 440.605271][ T5870] Bluetooth: hci0: command tx timeout [ 441.041186][ T5870] Bluetooth: hci6: command tx timeout [ 441.241725][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 441.963486][ T5870] Bluetooth: hci4: command tx timeout [ 442.281046][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 442.681973][ T5870] Bluetooth: hci0: command tx timeout [ 443.312622][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 444.034772][ T5870] Bluetooth: hci4: command tx timeout [ 444.353020][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 445.400516][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 445.482590][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 446.439986][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 447.470375][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 447.655093][T14342] vxcan1 speed is unknown, defaulting to 1000 [ 448.510954][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 449.559251][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 450.599207][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 451.639045][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 452.671927][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 453.710254][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 454.751942][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 455.800503][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 456.832323][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 457.880949][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 458.911193][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 459.960491][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 460.991051][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 462.031924][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 463.070070][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 464.111926][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 465.152897][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 466.190527][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 467.240997][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 468.272306][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 469.318986][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 470.349202][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 471.390886][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 472.438475][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 473.469713][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 474.508554][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 475.549999][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 476.591803][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 477.631357][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 478.672270][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 479.710618][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 480.750753][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 481.791987][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 482.832121][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 483.873099][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 484.912384][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 485.949140][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 486.952759][ T5183] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 486.991646][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 487.053314][ T5183] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 487.368832][ T5183] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 487.693991][ T5183] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 487.874288][ T5183] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 488.038758][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 489.068816][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 490.119235][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 490.683195][ T5183] Bluetooth: hci3: command tx timeout [ 491.151369][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 491.534400][ T5870] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 491.632495][ T5870] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 491.764243][ T5870] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 492.190055][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 492.404157][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 492.483025][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 492.701571][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 492.793973][ T51] Bluetooth: hci3: command tx timeout [ 492.942884][ T5183] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 493.089072][ T5183] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 493.229702][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 493.405098][ T5183] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 493.523269][ T5183] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 493.683860][ T5183] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 493.793470][ T5877] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 493.845082][ T5877] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 494.164643][ T5183] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 494.280303][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 494.504076][ T5870] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 494.851225][ T5873] Bluetooth: hci3: command tx timeout [ 495.310238][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 495.645220][ T5873] Bluetooth: hci7: command tx timeout [ 496.351446][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 496.602921][ T5873] Bluetooth: hci8: command tx timeout [ 496.922850][ T5873] Bluetooth: hci3: command tx timeout [ 497.084099][ T5873] Bluetooth: hci9: command tx timeout [ 497.391079][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 497.739636][ T5873] Bluetooth: hci7: command tx timeout [ 498.440896][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 498.672842][ T5873] Bluetooth: hci8: command tx timeout [ 499.194681][ T5873] Bluetooth: hci9: command tx timeout [ 499.472378][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 499.804078][ T5870] Bluetooth: hci7: command tx timeout [ 500.512341][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 500.763841][ T5870] Bluetooth: hci8: command tx timeout [ 501.241621][ T5870] Bluetooth: hci9: command tx timeout [ 501.560546][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 501.883301][ T5870] Bluetooth: hci7: command tx timeout [ 502.592769][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 502.833630][ T5870] Bluetooth: hci8: command tx timeout [ 503.084524][T10235] bond9 (unregistering): (slave bridge0): Removing an active aggregator [ 503.274749][T10235] bond9 (unregistering): (slave bridge0): Releasing backup interface [ 503.332476][ T5870] Bluetooth: hci9: command tx timeout [ 503.631293][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 503.722565][T10235] bridge0 (unregistering): left promiscuous mode [ 503.944722][T10235] bridge0 (unregistering): left allmulticast mode [ 504.681466][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 505.719417][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 506.758801][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 506.854710][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 507.801588][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 508.839734][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 509.879929][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 510.919674][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 511.949661][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 512.990388][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 514.041599][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 514.293812][T10235] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 514.734370][T10235] macvlan0: left promiscuous mode [ 515.079197][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 515.194974][T10235] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 515.753402][T10235] dummy0: left promiscuous mode [ 516.118212][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 516.134111][ T5873] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 516.223350][ T5873] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 516.371115][ T5873] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 516.734052][ T5873] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 516.881242][T10235] bond0 (unregistering): Released all slaves [ 516.973392][ T5873] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 517.152652][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 518.191406][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 519.232361][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 519.883557][ T5873] Bluetooth: hci10: command tx timeout [ 520.282795][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 521.311839][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 521.984057][ T5873] Bluetooth: hci10: command tx timeout [ 522.349582][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 523.392335][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 523.994381][T10235] bond1 (unregistering): Released all slaves [ 524.059838][ T5873] Bluetooth: hci10: command tx timeout [ 524.431247][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 525.471441][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 526.124917][ T5873] Bluetooth: hci10: command tx timeout [ 526.511117][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 527.559024][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 528.590808][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 529.631776][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 530.671673][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 531.711460][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 532.444463][T10235] bond2 (unregistering): Released all slaves [ 532.761454][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 533.799444][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 534.840567][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 535.871596][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 536.911954][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 537.949618][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 538.999827][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 540.028451][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 541.069615][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 542.110584][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 542.885238][T10235] bond3 (unregistering): Released all slaves [ 543.160495][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 544.200955][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 545.238109][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 546.280790][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 547.322195][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 548.351849][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 549.393911][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 550.439790][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 550.744944][ T5870] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 551.154799][ T5870] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 551.254415][ T5870] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 551.471158][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 551.562823][ T5870] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 551.713810][ T5870] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 552.508876][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 552.753751][ T5870] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 552.902798][ T5870] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 553.294132][ T5870] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 553.550023][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 554.154039][T14403] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 554.194928][T14403] Bluetooth: hci11: command tx timeout [ 554.492474][T14403] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 554.591669][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 555.132844][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 555.154823][ T51] Bluetooth: hci6: command 0x0406 tx timeout [ 555.565186][ T51] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 555.630010][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 556.043590][T14408] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 556.182188][T14408] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 556.274411][T14408] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 556.310777][ T5870] Bluetooth: hci11: command tx timeout [ 556.452892][ T5870] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 556.670770][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 556.765101][ T5183] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 556.844112][ T5183] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 557.103499][ T5870] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 557.334958][T10235] bond4 (unregistering): Released all slaves [ 557.685054][T10235] bond5 (unregistering): Released all slaves [ 557.685061][ T5877] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 557.718316][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 557.974039][T14409] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 558.382738][ T5873] Bluetooth: hci11: command tx timeout [ 558.759480][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 559.000634][ T5873] Bluetooth: hci12: command tx timeout [ 559.802366][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 560.133419][ T5873] Bluetooth: hci4: command 0x0406 tx timeout [ 560.162741][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 560.193774][ T51] Bluetooth: hci13: command tx timeout [ 560.464394][ T51] Bluetooth: hci11: command tx timeout [ 560.838562][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 561.003907][T14409] Bluetooth: hci14: command tx timeout [ 561.084419][T14409] Bluetooth: hci12: command tx timeout [ 561.871382][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 562.353043][T14409] Bluetooth: hci13: command tx timeout [ 562.910691][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 563.103081][T14409] Bluetooth: hci14: command tx timeout [ 563.152768][T14409] Bluetooth: hci12: command tx timeout [ 563.952847][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 564.443694][T14409] Bluetooth: hci13: command tx timeout [ 565.000398][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 565.152335][T14409] Bluetooth: hci14: command tx timeout [ 565.243487][T14409] Bluetooth: hci12: command tx timeout [ 566.038078][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 566.133521][T10235] bond6 (unregistering): Released all slaves [ 566.523532][T14409] Bluetooth: hci13: command tx timeout [ 567.080516][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 567.254283][T14409] Bluetooth: hci14: command tx timeout [ 567.413867][T10235] bond7 (unregistering): Released all slaves [ 568.121834][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 568.304883][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 569.152404][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 570.202829][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 571.243161][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 572.272015][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 573.310871][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 574.351486][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 575.342673][T10235] bond8 (unregistering): Released all slaves [ 575.390364][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 576.440487][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 577.469867][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 578.510643][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 579.551808][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 580.601933][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 581.633296][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 582.572376][ T5877] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 582.670607][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 582.704356][ T5877] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 582.854290][ T5877] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 583.604563][ T5877] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 583.711049][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 584.254003][ T5877] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 584.751411][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 585.353387][T10235] bond9 (unregistering): Released all slaves [ 585.790077][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 586.832172][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 587.092601][T14409] Bluetooth: hci15: command tx timeout [ 587.871585][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 588.912610][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 589.184856][T14409] Bluetooth: hci15: command tx timeout [ 589.961949][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 590.999751][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 591.263939][T14409] Bluetooth: hci15: command tx timeout [ 592.033576][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 593.080225][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 593.334110][T14409] Bluetooth: hci15: command tx timeout [ 593.574904][T10235] bond10 (unregistering): Released all slaves [ 594.112148][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 594.813955][T14349] vxcan1 speed is unknown, defaulting to 1000 [ 595.159235][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 596.189733][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 597.239683][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 597.753815][ T31] INFO: task syz.1.2322:14315 blocked for more than 143 seconds. [ 597.974061][ T31] Not tainted syzkaller #0 [ 598.182761][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 598.280265][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 598.483849][ T31] task:syz.1.2322 state:D stack:23840 pid:14315 tgid:14311 ppid:5864 task_flags:0x400140 flags:0x00004006 [ 598.733368][ T31] Call Trace: [ 599.073327][ T31] [ 599.142930][ T31] __schedule+0x1798/0x4cc0 [ 599.320741][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 599.342773][ T31] ? __lock_acquire+0xab9/0xd20 [ 599.505107][ T31] ? __lock_acquire+0xab9/0xd20 [ 599.604533][ T31] ? __lock_acquire+0xab9/0xd20 [ 599.694463][ T31] ? __pfx___schedule+0x10/0x10 [ 599.934106][ T31] ? schedule+0x91/0x360 [ 600.032828][ T31] schedule+0x165/0x360 [ 600.122555][ T31] schedule_preempt_disabled+0x13/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 600.323540][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 600.360750][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 600.503452][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 600.622123][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 600.743793][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 600.864429][ T31] ? __lock_acquire+0xab9/0xd20 [ 601.033590][ T31] ? rdma_dev_exit_net+0x8c/0x340 [ 601.195137][ T31] down_write+0x1ab/0x1f0 [ 601.322146][ T31] ? __pfx_down_write+0x10/0x10 [ 601.391182][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 601.444019][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 601.594075][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 601.723663][ T31] ? rdma_net_to_dev_net+0x1ed/0x240 [ 601.832203][ T31] rdma_dev_exit_net+0x8c/0x340 [ 601.974009][T14415] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 602.064356][ T31] ? __pfx___might_resched+0x10/0x10 [ 602.163710][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 602.374428][ T31] ? net_generic+0x1e/0x240 [ 602.428705][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 602.453697][T14415] CPU: 1 UID: 0 PID: 14415 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 602.453731][T14415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 602.453745][T14415] Call Trace: [ 602.453756][T14415] [ 602.453767][T14415] dump_stack_lvl+0x189/0x250 [ 602.453803][T14415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 602.453828][T14415] ? __pfx__printk+0x10/0x10 [ 602.453859][T14415] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 602.453887][T14415] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 602.453916][T14415] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 602.453946][T14415] warn_alloc+0x214/0x310 [ 602.453987][T14415] ? __pfx_warn_alloc+0x10/0x10 [ 602.454033][T14415] ? __get_vm_area_node+0x28f/0x300 [ 602.454065][T14415] ? kcov_ioctl+0x55/0x640 [ 602.454099][T14415] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 602.454167][T14415] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 602.454209][T14415] ? __pfx_kcov_ioctl+0x10/0x10 [ 602.454240][T14415] vmalloc_user_noprof+0xad/0xf0 [ 602.454272][T14415] ? kcov_ioctl+0x55/0x640 [ 602.454304][T14415] kcov_ioctl+0x55/0x640 [ 602.454335][T14415] ? bpf_lsm_file_ioctl+0x9/0x20 [ 602.454364][T14415] ? __pfx_kcov_ioctl+0x10/0x10 [ 602.454395][T14415] __se_sys_ioctl+0xfc/0x170 [ 602.454433][T14415] do_syscall_64+0xfa/0x3b0 [ 602.454458][T14415] ? lockdep_hardirqs_on+0x9c/0x150 [ 602.454480][T14415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.454501][T14415] ? clear_bhb_loop+0x60/0xb0 [ 602.454529][T14415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.454555][T14415] RIP: 0033:0x7f0698d8e7ab [ 602.454576][T14415] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 602.454596][T14415] RSP: 002b:00007ffc1b806410 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 602.454620][T14415] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f0698d8e7ab [ 602.454636][T14415] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000d9 [ 602.454651][T14415] RBP: 00007f0698fd6128 R08: 00000000000000d8 R09: 0000000000000000 [ 602.454665][T14415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.454678][T14415] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 602.454711][T14415] [ 602.454724][T14415] Mem-Info: [ 602.853196][ T31] ? mutex_is_locked+0x17/0x50 [ 602.914028][ T31] ? rtnl_is_locked+0x15/0x20 [ 602.973220][ T31] ops_undo_list+0x497/0x990 [ 603.034644][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 603.112679][ T31] ? ops_init+0x469/0x5c0 [ 603.173336][ T31] setup_net+0x2d3/0x320 [ 603.214105][ T31] ? __pfx_setup_net+0x10/0x10 [ 603.262702][ T31] ? copy_net_ns+0x304/0x4d0 [ 603.312623][ T31] ? down_read_killable+0x1d1/0x350 [ 603.362617][ T31] copy_net_ns+0x31b/0x4d0 [ 603.413779][ T31] create_new_namespaces+0x3f3/0x720 [ 603.470454][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 603.514080][ T31] ? security_capable+0x7e/0x2e0 [ 603.762502][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 603.874118][ T31] ksys_unshare+0x4c8/0x8c0 [ 604.014733][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 604.323549][ T31] __x64_sys_unshare+0x38/0x50 [ 604.414367][ T31] do_syscall_64+0xfa/0x3b0 [ 604.435134][T14415] active_anon:6238 inactive_anon:0 isolated_anon:0 [ 604.435134][T14415] active_file:3401 inactive_file:40065 isolated_file:0 [ 604.435134][T14415] unevictable:768 dirty:21 writeback:0 [ 604.435134][T14415] slab_reclaimable:12656 slab_unreclaimable:149664 [ 604.435134][T14415] mapped:85091 shmem:1358 pagetables:1286 [ 604.435134][T14415] sec_pagetables:0 bounce:0 [ 604.435134][T14415] kernel_misc_reclaimable:0 [ 604.435134][T14415] free:1140353 free_pcp:13020 free_cma:0 [ 604.510851][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 604.541980][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 604.622786][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.733230][ T31] ? clear_bhb_loop+0x60/0xb0 [ 604.995116][T14415] Node 0 active_anon:24552kB inactive_anon:0kB active_file:13604kB inactive_file:160056kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:340364kB dirty:80kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12220kB pagetables:4980kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 605.054689][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.164238][ T31] RIP: 0033:0x7f2dc478eba9 [ 605.343018][T14415] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 605.374238][ T31] RSP: 002b:00007f2dc29d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 605.374283][ T31] RAX: ffffffffffffffda RBX: 00007f2dc49d6090 RCX: 00007f2dc478eba9 [ 605.374303][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 605.374319][ T31] RBP: 00007f2dc4811e19 R08: 0000000000000000 R09: 0000000000000000 [ 605.374335][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.374351][ T31] R13: 00007f2dc49d6128 R14: 00007f2dc49d6090 R15: 00007ffe59611bc8 [ 605.374393][ T31] [ 605.374459][ T31] INFO: task syz-executor:14345 blocked for more than 150 seconds. [ 605.374479][ T31] Not tainted syzkaller #0 [ 605.374491][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 605.374504][ T31] task:syz-executor state:D stack:23008 pid:14345 tgid:14345 ppid:1 task_flags:0x400140 flags:0x00004006 [ 605.374572][ T31] Call Trace: [ 605.374582][ T31] [ 605.374598][ T31] __schedule+0x1798/0x4cc0 [ 605.374656][ T31] ? __lock_acquire+0xab9/0xd20 [ 605.374702][ T31] ? __lock_acquire+0xab9/0xd20 [ 605.374738][ T31] ? __pfx___schedule+0x10/0x10 [ 605.374795][ T31] ? schedule+0x91/0x360 [ 605.374836][ T31] schedule+0x165/0x360 [ 605.374883][ T31] schedule_preempt_disabled+0x13/0x30 [ 605.374906][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 605.374935][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 605.374973][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 605.375009][ T31] ? rdma_dev_init_net+0x1d2/0x270 [ 605.375043][ T31] ? xa_find+0x25b/0x2b0 [ 605.375078][ T31] down_read+0x98/0x2e0 [ 605.375110][ T31] rdma_dev_init_net+0x1d2/0x270 [ 605.375134][ T31] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 605.375172][ T31] ops_init+0x359/0x5c0 [ 605.375215][ T31] setup_net+0x10c/0x320 [ 605.559769][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 605.840726][ T31] ? __pfx_setup_net+0x10/0x10 [ 605.848566][ T31] ? copy_net_ns+0x304/0x4d0 [ 605.853199][ T31] ? down_read_killable+0x1d1/0x350 [ 605.862072][ T31] copy_net_ns+0x31b/0x4d0 [ 605.871199][ T31] create_new_namespaces+0x3f3/0x720 [ 606.044332][ T31] ? security_capable+0x7e/0x2e0 [ 606.103154][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 606.123077][ T31] ksys_unshare+0x4c8/0x8c0 [ 606.183386][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 606.204245][T14415] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 606.274720][ T31] __x64_sys_unshare+0x38/0x50 [ 606.392109][ T31] do_syscall_64+0xfa/0x3b0 [ 606.514186][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 606.589318][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 606.603450][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.713790][ T31] ? clear_bhb_loop+0x60/0xb0 [ 606.795188][T14415] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 607.014345][T14415] Node 0 DMA32 free:652512kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24412kB inactive_anon:0kB active_file:13600kB inactive_file:158476kB unevictable:1536kB writepending:84kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:41700kB local_pcp:20992kB free_cma:0kB [ 607.055071][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.213358][ T31] RIP: 0033:0x7fd7cdd903a7 [ 607.382582][T14415] lowmem_reserve[]: 0 0 1 1 1 [ 607.413518][ T31] RSP: 002b:00007ffe67f55118 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 607.452363][T14415] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 607.524091][ T31] RAX: ffffffffffffffda RBX: 00007fd7cdfd5f40 RCX: 00007fd7cdd903a7 [ 607.633330][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 607.664697][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 607.751971][T14415] lowmem_reserve[]: 0 0 0 0 0