last executing test programs: 2m32.844377561s ago: executing program 4 (id=4686): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) poll(&(0x7f0000000040)=[{r0, 0x40}], 0x1, 0x1ff) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000001240)={@void, @val={0x1, 0x3, 0x1c, 0x5, 0x14, 0x6}, @ipv4=@igmp={{0x6, 0x4, 0x3, 0x8, 0xfc0, 0x64, 0x0, 0x3, 0x2, 0x0, @empty, @empty, {[@generic={0x94, 0x4, "c163"}]}}, {0x11, 0x8, 0x0, @multicast1, "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"}}}, 0xfca) 2m32.06068355s ago: executing program 4 (id=4692): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0xa8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffffff}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000005400)={0x0, @in6={{0xa, 0x4e23, 0x46, @mcast1, 0x40}}}, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x41, 0x109, 0xffffffff, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}, @typed={0x8, 0xa, 0x0, 0x0, @uid=0xffffffffffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x20000080) socket$inet6_sctp(0xa, 0x801, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r1, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0xa8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffffff}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000005400)={0x0, @in6={{0xa, 0x4e23, 0x46, @mcast1, 0x40}}}, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x41, 0x109, 0xffffffff, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}, @typed={0x8, 0xa, 0x0, 0x0, @uid=0xffffffffffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x20000080) (async) 2m31.77056267s ago: executing program 4 (id=4696): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000000c0), 0x4) write(r0, &(0x7f0000000380)="9d04717d87ec4c767823752086e08dce08890a126af38e697787e86b978346e67107e035e11a2b93776b00bb76d223de1126c2bfafbcd61d75ccd375b3014e0942ed56688970f08603283310969d8c63c9defd7c0b20dbe23a423ac47e063ee2cdca3e419cd7731e91e07909c4b36f9be781e71b048c93ed4da5549088e463a3d16a70ff24bc19c548813dda06bf600f0a7bce6ada876d71d33838021d070f08417661a7259ea44cb1f071a32633f6489211c96cb136b7338de6b79ceb3d3fc5511295e938c99c81115c491b524edaede6de7c06bd349673eec2e4730b1996002267f5aa9530206d0d6d6000b2dbef11452e4613", 0xf4) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000240)=[{0x2, 0x1, {0x1, 0x1, 0x4}, {0x1, 0xff, 0x2}, 0x2, 0xfe}, {0xfffffffffffffffd, 0x3, {0x1, 0x0, 0x4}, {0x2, 0x0, 0x4}, 0xfd, 0xff}], 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newtaction={0x158, 0x30, 0x400, 0x70bd25, 0x25dfdbff, {}, [{0x144, 0x1, [@m_skbmod={0x140, 0x11, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @random="3dca002a7294"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xff}]}, {0xf3, 0x6, "21070741be2d7532a51967696bdeed0095a7d59afa4c37785b2e19118c70bfb1b719ed49291faeca7fa45248495d68bf515d4e793fbaa2a2bead2620b72bb5ad5cb38b373361815c73da5c32d3fb26fde87c92417a37906dbb6db60f74c0b9b46c14475f9c54f08875c68b75141d75aa5a85cc015e738930a90c9040e7556af7cef61b1e28c11b3b6ee1680b6edfd683129d4fe94fa68998318ec730709dd2ac924c58ded74251d7e3c3f2283d04f966dc963d02cffc1b73668d1bd95314bfd9d7adbb5e67e7a69b0198cc947b1c96da675713e78177220d45e601e9fc34266a28020e22a5ff94102afbbe8eec7b17"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x158}, 0x1, 0xf0ffffffffffff, 0x0, 0xc096}, 0x20000050) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2m30.599349257s ago: executing program 4 (id=4705): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000040)={0xe, 0x30, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xc}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xff32}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xc}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xff32}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x1) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$int_out(r1, 0x5462, &(0x7f0000000300)) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000380)) (async) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000380)) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000004c0)={r4, &(0x7f00000003c0)='%*!{-\\+%.@]\x00', 0xa04c0, &(0x7f0000000400)={@align=0x2, {0xff2a, 0xfffe, 0xa, 0x9}}, 0x8, &(0x7f0000000440), &(0x7f0000000480)=0xa}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000004c0)={r4, &(0x7f00000003c0)='%*!{-\\+%.@]\x00', 0xa04c0, &(0x7f0000000400)={@align=0x2, {0xff2a, 0xfffe, 0xa, 0x9}}, 0x8, &(0x7f0000000440), &(0x7f0000000480)=0xa}) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000500)={0x7, 0x3, 0x1, 0x3, 0x3, 0x4, 0x65, 0x3}, &(0x7f0000000540)={0x100, 0x4, 0x5, 0x0, 0x7f, 0x8, 0x1, 0x2}, &(0x7f0000000580)={0x7, 0x85, 0x3, 0x9, 0x9, 0x3, 0x80000000000000, 0x17615abb}, &(0x7f0000000600)={r6, r7+10000000}, &(0x7f0000000680)={&(0x7f0000000640)={[0x8000000000000001]}, 0x8}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x18, 0x140a, 0x200, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000051}, 0x40) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) (async) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f00000007c0)=0x1) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f00000007c0)=0x1) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x68, r9, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x40d9}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000a40)={r8, r1, 0x9, 0x8b, &(0x7f0000000980)="0b5f431725e04ac330a1d1b702b118095e458cef27201fbde6dcfadc2e848b40ba1646211e29f95f62bd4557ca8ae8455250c15cf880c686d8174d5892662658d2d9ea80eee3f9eae078e4852c256c16808ff772e98fc9fe6eefe6acd4573f9216491c69f0a0d46a396ff01ebdf579c2b7953578e010ae85c7111d30a24a85767da49cdf71f336de1d883d", 0x5, 0x9, 0x1, 0xe, 0x100, 0x0, 0x3, 'syz0\x00'}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000b00)={0x3, 'veth1_macvtap\x00', {}, 0x7e1f}) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) ppoll(&(0x7f0000000b40)=[{r4, 0x448}, {r0, 0x1400}], 0x2, &(0x7f0000000b80)={0x0, 0x3938700}, &(0x7f0000000bc0)={[0xffff]}, 0x8) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c40), r2) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000dc0)={&(0x7f0000000c00), 0xc, &(0x7f0000000d80)={&(0x7f0000000c80)={0xc8, r10, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x32}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x3}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7a6}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x48000) (async) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000dc0)={&(0x7f0000000c00), 0xc, &(0x7f0000000d80)={&(0x7f0000000c80)={0xc8, r10, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x32}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x3}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7a6}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x48000) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x2b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x841) (async) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x2b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x841) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r5) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14, r11, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0xc014) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000001040)=0x885, 0x4) ioctl$XFS_IOC_GETBMAP(r5, 0xc0205826, &(0x7f0000001080)={0x722, 0x8, 0x42c, 0xb, 0x6}) 2m30.14182903s ago: executing program 4 (id=4710): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000907000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2m29.376335462s ago: executing program 4 (id=4721): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@mcast2}, &(0x7f0000000180)=0x14) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@mcast2, 0x0}, &(0x7f0000000180)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x9}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x9, 0x0}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpuacct.usage_user\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{}, &(0x7f00000003c0), &(0x7f0000000400)='%pi6 \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%pi6 \x00'}, 0x20) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x4000}, 0x18) (async) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x4000}, 0x18) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00'}, 0x18) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1c, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x2dd8a0c1, 0xba, &(0x7f0000000080)=""/186, 0x40f00, 0x21, '\x00', r0, @fallback=0x4a45ae9174df7d07, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x2, 0x8, 0x6}, 0x10, r1, 0xffffffffffffffff, 0x2, &(0x7f0000000700)=[r2, r3, r4, r5, r6, r7, r8, r9, r10], &(0x7f0000000740)=[{0x1, 0x3, 0x10, 0x6}, {0x2, 0x4, 0xa, 0x8}], 0x10, 0x6}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000980)={r8, &(0x7f0000000840)="0b3895e7c25be38146645d2cb61c69ffb7048047d2a12192db96cc1ef4a80aeee103f2a505256d4bf81849fbcce71920e05c85cd2fd9823026c10b21e90aed10caa62731c9077765584b3ae8dc7095a022c9948a5ac4c87426d1e86d24a8c442b5c390ef8ebbe7b764fefe472ca488e8d463fd6b528f91be031a1c18ea531bf907c0827ee6b7f3435228407b122bef277a71ba23e782908dfdc2a94f54887d96f60b27a2a555a44d2b3ead178abb", &(0x7f0000000900)=""/122}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r7, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)=r4}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0xffffffffffffffff, 0x1, 0x18}, 0xc) (async) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0xffffffffffffffff, 0x1, 0x18}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c40)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0x15, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @ldst={0x2, 0x2, 0x1, 0xa, 0x1, 0x4, 0xffffffffffffffe4}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x8}]}, &(0x7f0000000b40)='GPL\x00', 0xff, 0x0, 0x0, 0x41000, 0x3ff089eb22441289, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000b80)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0xa, 0x4, 0x10001}, 0x10, 0x3f8f, r11, 0x0, &(0x7f0000000c80)=[r8, r3, r7, r7, r13, r14], &(0x7f0000000cc0), 0x10, 0x5cf}, 0x94) pipe(&(0x7f0000000dc0)) (async) pipe(&(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x202882, 0x0) r18 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_SET_OP_VERSION(r18, 0x1, 0x53, &(0x7f0000000e80), &(0x7f0000000ec0)=0x8) ioctl$OCFS2_IOC_GROUP_ADD(r2, 0x40186f02, &(0x7f0000000f00)={0x7f, 0x7, 0x2, 0x6}) (async) ioctl$OCFS2_IOC_GROUP_ADD(r2, 0x40186f02, &(0x7f0000000f00)={0x7f, 0x7, 0x2, 0x6}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001200)={r8, 0xe0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x81, &(0x7f0000001000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001040), &(0x7f0000001080), 0x8, 0x47, 0x8, 0x8, &(0x7f00000010c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001200)={r8, 0xe0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x81, &(0x7f0000001000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001040), &(0x7f0000001080), 0x8, 0x47, 0x8, 0x8, &(0x7f00000010c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r15, 0x89f3, &(0x7f00000012c0)={'syztnl1\x00', &(0x7f0000001240)={'ip_vti0\x00', r19, 0x40, 0x7, 0x7, 0x7fffffff, {{0x14, 0x4, 0x2, 0x3, 0x50, 0x68, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@rr={0x7, 0x7, 0x66, [@dev={0xac, 0x14, 0x14, 0x28}]}, @timestamp_prespec={0x44, 0xc, 0x83, 0x3, 0x7, [{@local, 0xcf27}]}, @rr={0x7, 0x7, 0xa4, [@loopback]}, @rr={0x7, 0xf, 0xba, [@rand_addr=0x64010100, @multicast2, @multicast2]}, @generic={0x83, 0xe, "4cdfa40cd37899ae475d4b2a"}, @generic={0x88, 0x4, "70f4"}]}}}}}) bind$can_raw(r17, &(0x7f0000001300)={0x1d, r20}, 0x10) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r16, 0xc400941d, &(0x7f0000001340)={0x0, 0x7, 0xf2c1, 0x1}) ioctl$BTRFS_IOC_DEV_REPLACE(r18, 0xca289435, &(0x7f0000001740)={0x2, 0x1, @start={r21, 0x1, "a7e3f37124dbb83d675308263edc904f0830528daf350461134bf40bc03a523c6edd6937aad5aebdee44681b5f4b92660fd2c2e46bd1bbe3175c4604d09f185374092735831f031b0ce288ab0f791ecb2d3362350a4d15dd8453390c31fb8f96695884a4ee1c9715c9f563bf807a49d3f96f38c880ff8fe3ff2e48315ee34ed5b28020691d9cd19548ccb072c47571bbdbb3839194f9952d9706586f4aa45f6083d2a3caaeac640fca4a9680250170abd2798245afdce4ef9d9111b5fb3eda971ef9a71339f1e894f908231791f4ad80dfc0a81a4a3b8f0cb66c97570ebc0e408409baec163e09df52223c1dbbf6430a0b12e29304374b25b9da6cb78d48a15f88f7f51b3365054cbf04639ad399ee2d73eb87188bf966c3bfda8a986647371229b23bb86c5228b6fecf36ef3b92ff4bfc5c02e1c52ee657986f07ad3fecbb291fced12527a2e3a38ea7c680348d9506f784c55d955ea3a65bff358748ade81d7c6eca9636dadd0bbc229b93e8f5e0a6b5c99ab2a9888f98819469604d0961ea518f4c02899b897396d86661a70760e5c25511d6ead813e6ed86173dc305231a0cf8f82fc15c85c73e917be64d1bf9b09f0097e2017a7479005607f29da137eb87fd87bd3394c56a0fe9026023474bc949340055b94a5f68236e1c7c9efecd38712be131776d99a3562e9cdaa883eb5b2028168d64afed513c9d4d98a0895f58a2b7645287ca96938aa5df41ef9e8f407081db10a4b4e726b83ded580e3b86adba5da2df8069617eb0766be60d0a32aa1dd47442b55370cc3907248d5471b155d054778b2908033d45f9c693467fe8fa5e784d12ad9d33b9bbae31cce66e4c3deaebf5e9384d9b0afa64267463d9fcf14ecefb79cb3b3bf057b02e5bce3b314f831f01458857457edceaafc9acdf6f70bd1373b7d3447fa0cfdddc3600bf5ad4efea8b94f6edf420c8763127b6e2d0504d6f2e027cd639091b789eade1dcb1620923a486ff99903e6e6416886de675315abfc508bdc278c598581a6044711cfd4a699e1df28adfa734d3e1e1f210b9a9ecf4bc762b0d9b30a9af9ee67e07e46e2dc3f2c43ac9bfb89bd31d7299113531d225fd132e6bba33259b5bda7fc935ad39179514028d48e12fdc547e4dbbbc666e6377ec1b0f7617ea47cd7aa31b4bb6b4d7c18b81bf33c2ef7524e083977cbc68b2e77bc3752ebc18b2b054dbe7de71f154938177b3e9f2be1e480466d59bbf29710481e39f115be485fd8dbb9aeb26a38a8767cbf4f13ac08da069eecd872dac8500c6736faeddeee497efb667088f3e8e389a5ab7e80d48965d11c496c65258b44720f29994501ffefd7ad59e004cbe170565dc59e2f62cb70b86a2c282662ca4d64e0e8f3111d2d8c46391ced1c6c0a6c14ea347360e9dffb9c167a456df535c4089f60571cc2d4c11a5e6152ac6a1", "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"}, [0xffffffffffffffc0, 0x0, 0xd8, 0x5, 0x401, 0x8, 0xffffffff, 0x2, 0x2, 0x100, 0xc4b, 0x9, 0x7, 0x1, 0x4, 0x10, 0x3, 0xe30b, 0x4b, 0x8103, 0x4, 0x7, 0x8000000000000001, 0x50d, 0x5, 0x8, 0xf90, 0xdf, 0x1, 0x33598000, 0x8000000000000001, 0x6, 0x7ff, 0x1, 0x10000, 0x2, 0x4, 0x10000, 0x7, 0xd4ae, 0x2, 0x3, 0x3ac, 0x7fffffff, 0xffffffffffff8001, 0x97f1, 0x5, 0xa9e, 0x9, 0x2, 0x0, 0x6, 0x526, 0x21c4, 0x80000001, 0x7fff, 0x0, 0x1, 0x2, 0xa4bd, 0x1, 0x7ff, 0x8ab, 0x8000000000000001]}) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r18, 0xca289435, &(0x7f0000001740)={0x2, 0x1, @start={r21, 0x1, "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", "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"}, [0xffffffffffffffc0, 0x0, 0xd8, 0x5, 0x401, 0x8, 0xffffffff, 0x2, 0x2, 0x100, 0xc4b, 0x9, 0x7, 0x1, 0x4, 0x10, 0x3, 0xe30b, 0x4b, 0x8103, 0x4, 0x7, 0x8000000000000001, 0x50d, 0x5, 0x8, 0xf90, 0xdf, 0x1, 0x33598000, 0x8000000000000001, 0x6, 0x7ff, 0x1, 0x10000, 0x2, 0x4, 0x10000, 0x7, 0xd4ae, 0x2, 0x3, 0x3ac, 0x7fffffff, 0xffffffffffff8001, 0x97f1, 0x5, 0xa9e, 0x9, 0x2, 0x0, 0x6, 0x526, 0x21c4, 0x80000001, 0x7fff, 0x0, 0x1, 0x2, 0xa4bd, 0x1, 0x7ff, 0x8ab, 0x8000000000000001]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002540)=@bpf_lsm={0x1d, 0x21, &(0x7f0000002180)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0x101}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x64e}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5183}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x6}], &(0x7f00000022c0)='syzkaller\x00', 0x1, 0xf, &(0x7f0000002300)=""/15, 0x41100, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000002480)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000024c0)={0x4, 0xc, 0x9, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000002500)=[{0x5, 0x2, 0x7, 0x7}, {0x4, 0x2, 0x0, 0x5}, {0x3, 0x2, 0xb, 0x6}], 0x10, 0x80000001}, 0x94) 2m14.166437549s ago: executing program 32 (id=4721): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@mcast2}, &(0x7f0000000180)=0x14) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@mcast2, 0x0}, &(0x7f0000000180)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x9}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x9, 0x0}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpuacct.usage_user\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{}, &(0x7f00000003c0), &(0x7f0000000400)='%pi6 \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%pi6 \x00'}, 0x20) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x4000}, 0x18) (async) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x4000}, 0x18) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00'}, 0x18) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1c, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x2dd8a0c1, 0xba, &(0x7f0000000080)=""/186, 0x40f00, 0x21, '\x00', r0, @fallback=0x4a45ae9174df7d07, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x2, 0x8, 0x6}, 0x10, r1, 0xffffffffffffffff, 0x2, &(0x7f0000000700)=[r2, r3, r4, r5, r6, r7, r8, r9, r10], &(0x7f0000000740)=[{0x1, 0x3, 0x10, 0x6}, {0x2, 0x4, 0xa, 0x8}], 0x10, 0x6}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000980)={r8, &(0x7f0000000840)="0b3895e7c25be38146645d2cb61c69ffb7048047d2a12192db96cc1ef4a80aeee103f2a505256d4bf81849fbcce71920e05c85cd2fd9823026c10b21e90aed10caa62731c9077765584b3ae8dc7095a022c9948a5ac4c87426d1e86d24a8c442b5c390ef8ebbe7b764fefe472ca488e8d463fd6b528f91be031a1c18ea531bf907c0827ee6b7f3435228407b122bef277a71ba23e782908dfdc2a94f54887d96f60b27a2a555a44d2b3ead178abb", &(0x7f0000000900)=""/122}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r7, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)=r4}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0xffffffffffffffff, 0x1, 0x18}, 0xc) (async) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0xffffffffffffffff, 0x1, 0x18}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c40)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0x15, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @ldst={0x2, 0x2, 0x1, 0xa, 0x1, 0x4, 0xffffffffffffffe4}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x8}]}, &(0x7f0000000b40)='GPL\x00', 0xff, 0x0, 0x0, 0x41000, 0x3ff089eb22441289, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000b80)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0xa, 0x4, 0x10001}, 0x10, 0x3f8f, r11, 0x0, &(0x7f0000000c80)=[r8, r3, r7, r7, r13, r14], &(0x7f0000000cc0), 0x10, 0x5cf}, 0x94) pipe(&(0x7f0000000dc0)) (async) pipe(&(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x202882, 0x0) r18 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_SET_OP_VERSION(r18, 0x1, 0x53, &(0x7f0000000e80), &(0x7f0000000ec0)=0x8) ioctl$OCFS2_IOC_GROUP_ADD(r2, 0x40186f02, &(0x7f0000000f00)={0x7f, 0x7, 0x2, 0x6}) (async) ioctl$OCFS2_IOC_GROUP_ADD(r2, 0x40186f02, &(0x7f0000000f00)={0x7f, 0x7, 0x2, 0x6}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001200)={r8, 0xe0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x81, &(0x7f0000001000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001040), &(0x7f0000001080), 0x8, 0x47, 0x8, 0x8, &(0x7f00000010c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001200)={r8, 0xe0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x81, &(0x7f0000001000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001040), &(0x7f0000001080), 0x8, 0x47, 0x8, 0x8, &(0x7f00000010c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r15, 0x89f3, &(0x7f00000012c0)={'syztnl1\x00', &(0x7f0000001240)={'ip_vti0\x00', r19, 0x40, 0x7, 0x7, 0x7fffffff, {{0x14, 0x4, 0x2, 0x3, 0x50, 0x68, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@rr={0x7, 0x7, 0x66, [@dev={0xac, 0x14, 0x14, 0x28}]}, @timestamp_prespec={0x44, 0xc, 0x83, 0x3, 0x7, [{@local, 0xcf27}]}, @rr={0x7, 0x7, 0xa4, [@loopback]}, @rr={0x7, 0xf, 0xba, [@rand_addr=0x64010100, @multicast2, @multicast2]}, @generic={0x83, 0xe, "4cdfa40cd37899ae475d4b2a"}, @generic={0x88, 0x4, "70f4"}]}}}}}) bind$can_raw(r17, &(0x7f0000001300)={0x1d, r20}, 0x10) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r16, 0xc400941d, &(0x7f0000001340)={0x0, 0x7, 0xf2c1, 0x1}) ioctl$BTRFS_IOC_DEV_REPLACE(r18, 0xca289435, &(0x7f0000001740)={0x2, 0x1, @start={r21, 0x1, "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", "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"}, [0xffffffffffffffc0, 0x0, 0xd8, 0x5, 0x401, 0x8, 0xffffffff, 0x2, 0x2, 0x100, 0xc4b, 0x9, 0x7, 0x1, 0x4, 0x10, 0x3, 0xe30b, 0x4b, 0x8103, 0x4, 0x7, 0x8000000000000001, 0x50d, 0x5, 0x8, 0xf90, 0xdf, 0x1, 0x33598000, 0x8000000000000001, 0x6, 0x7ff, 0x1, 0x10000, 0x2, 0x4, 0x10000, 0x7, 0xd4ae, 0x2, 0x3, 0x3ac, 0x7fffffff, 0xffffffffffff8001, 0x97f1, 0x5, 0xa9e, 0x9, 0x2, 0x0, 0x6, 0x526, 0x21c4, 0x80000001, 0x7fff, 0x0, 0x1, 0x2, 0xa4bd, 0x1, 0x7ff, 0x8ab, 0x8000000000000001]}) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r18, 0xca289435, &(0x7f0000001740)={0x2, 0x1, @start={r21, 0x1, "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", "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"}, [0xffffffffffffffc0, 0x0, 0xd8, 0x5, 0x401, 0x8, 0xffffffff, 0x2, 0x2, 0x100, 0xc4b, 0x9, 0x7, 0x1, 0x4, 0x10, 0x3, 0xe30b, 0x4b, 0x8103, 0x4, 0x7, 0x8000000000000001, 0x50d, 0x5, 0x8, 0xf90, 0xdf, 0x1, 0x33598000, 0x8000000000000001, 0x6, 0x7ff, 0x1, 0x10000, 0x2, 0x4, 0x10000, 0x7, 0xd4ae, 0x2, 0x3, 0x3ac, 0x7fffffff, 0xffffffffffff8001, 0x97f1, 0x5, 0xa9e, 0x9, 0x2, 0x0, 0x6, 0x526, 0x21c4, 0x80000001, 0x7fff, 0x0, 0x1, 0x2, 0xa4bd, 0x1, 0x7ff, 0x8ab, 0x8000000000000001]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002540)=@bpf_lsm={0x1d, 0x21, &(0x7f0000002180)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0x101}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x64e}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5183}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x6}], &(0x7f00000022c0)='syzkaller\x00', 0x1, 0xf, &(0x7f0000002300)=""/15, 0x41100, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000002480)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000024c0)={0x4, 0xc, 0x9, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000002500)=[{0x5, 0x2, 0x7, 0x7}, {0x4, 0x2, 0x0, 0x5}, {0x3, 0x2, 0xb, 0x6}], 0x10, 0x80000001}, 0x94) 1m4.414976369s ago: executing program 1 (id=5140): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x885}, 0x48080) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x9}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048044}, 0x20000000) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000002100010000000000000000000a0010000000000000000000140002"], 0x30}}, 0x0) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r5, 0x703, 0x70bd24, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) 1m3.17088282s ago: executing program 1 (id=5147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x68, r3, 0x1, 0x70bd28, 0x2ddfdbff, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, "322d73352e3a955d482ee5364c432384"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9ea2d328893918792a5ca222a6ad614b6f3aa3a6"}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}}, 0x8004) 1m2.865220845s ago: executing program 2 (id=5148): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a000100000000000000cf0080202000000000000000000008000200ffffffff080001"], 0x2c}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f00000002c0)=@framed={{}, [@generic={0x44}]}, &(0x7f0000000300)='syzkaller\x00', 0x9}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x42}, 0x20) ioctl$XFS_IOC_FSGROWFSDATA(r1, 0x4010586e, &(0x7f0000000080)={0x8, 0x9}) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x7ff, 0x0, 0x1, 0xfffffff8, '\x00', 0x0, r2, 0x4, 0x4, 0x5}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001600)={'syztnl2\x00', &(0x7f0000001580)={'syztnl2\x00', 0x0, 0x29, 0xd, 0x5, 0x5, 0x1a, @empty, @remote, 0x8, 0x20, 0x7, 0x5}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001940)={r1, 0xe0, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f00000016c0)=[0x0, 0x0, 0x0], &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x62, &(0x7f0000001740)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001780), &(0x7f00000017c0), 0x8, 0x4f, 0x8, 0x8, &(0x7f0000001800)}}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="010400"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="050a0000000000000000000000000000000000000020eafa017523cdc4000000000000000000"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=@base={0x19, 0x9, 0xb9, 0x7f, 0x70000, 0xffffffffffffffff, 0x1, '\x00', 0x0, r2, 0x3, 0x5, 0x2}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a80)={0x1b, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r2, 0x5, 0x3}, 0x50) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) write$tun(r10, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0x3, 0x2d, 0x40}, @llc={@snap={0xab, 0x0, "c23c", "aaa54b", 0x88f8, "49a952b2b2eca9ff0102a93985a94341323b142956073d3a97e5c6253d56e3e2d107262536a2ed5787645f19a314b42b9b305afe73487d2db3dd4ba2e726fb82ab14b74643ca73ae2fb1744737c8cff91f8a0bd59c415217d3f66212e261bbccc68a6cdeef43f298a6466855f172847286f1aa3283f8eade81db9810c9216ff0ecb4ae6987abb52051309392e0a778d4fe975abd1321110828c5df8e4d1b"}}}, 0x2e) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001b40)=@generic={&(0x7f0000001b00)='./file0\x00', 0x0, 0x8}, 0x18) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r15, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x1b, 0x17, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xec}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x80000001, 0x1000, &(0x7f0000000580)=""/4096, 0x41000, 0x40, '\x00', r5, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, r6, r1, 0x3, &(0x7f0000001b80)=[r7, r8, r9, r14, r15], &(0x7f0000001bc0)=[{0x1, 0x3, 0xa, 0xc}, {0x4, 0x2, 0xb, 0x7}, {0x2, 0x1, 0x10, 0x2}], 0x10, 0xd}, 0x94) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r17 = openat$cgroup_netprio_ifpriomap(r16, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r17, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000000040)=0x100) 1m2.78682785s ago: executing program 5 (id=5149): syz_emit_ethernet(0x68, &(0x7f0000000140)={@link_local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x8, 0x5a, 0x67, 0x0, 0x5, 0x2f, 0x0, @local, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1, [0x7]}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x7, 0x3, 0x0, 0x0, 0x6, 0xb}, 0x1, {0x38}}}, {0x8, 0x22eb, 0x800004, {{0x3, 0x2, 0x6, 0x1, 0x0, 0x1, 0x3, 0x6}, 0x2, {0x7, 0x4, 0x0, 0x5, 0x1, 0x1, 0x2}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1m2.462177546s ago: executing program 1 (id=5151): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000000), 0x4) (async) close(r3) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x3) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000200)=0xe59c, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x181}, "d497225cf6e5920b", "738472a104576d224ce3e6b21620f8eb", "0e377b16", "42b7322e3587b985"}, 0x28) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) recvfrom(r2, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) (async) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0x1}], 0x1) (async) setsockopt$sock_int(r2, 0x1, 0x53, &(0x7f00000000c0)=0xffff1884, 0x4) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r5 = socket$kcm(0x21, 0x2, 0x2) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x5) (async) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab0785e34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff}) (async) write$cgroup_subtree(r6, &(0x7f00000001c0)=ANY=[], 0x2a7209fb) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="7ebb86a4d48a2ded3c65001205072730fa9ef2c91a69c8d5b1c647b345e3298f9cfe61e727463392175961422b3173f67857da0d95e483dbcf2bbf3a3e4d892367651d1a3aa65d2bcf6bbfacae6ba845dae445fdaa764ed0eef620679846e49dd2c614d8d58fea5c8749e987d37a0de5151cd9ac344ec9436b58ef0d3d31389654c1f55c881740089a334cba77199eb2627f960733ad4e4b1a113747f553cef8b7ac573c96c74ecbec3e0309e8ca13739185aeac26c66b73ab12af71b2c42a593a2636a4e9c747df83c17fe479ae60df567deae9b6d591754786d7162f94e2de563814f80514e2e89b89c69bde36b1", @ANYRES64=r0, @ANYRES64=r1, @ANYRESHEX=r4, @ANYRESOCT=r7], 0x74}, 0x1, 0x0, 0x0, 0x4004811}, 0x0) 1m2.272092684s ago: executing program 0 (id=5152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xdd4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0x500000000, 0x6, 0xfc1, 0x54770ca4, 0x9, 0xfffffffffffffffa], 0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x46, 0x9, 0x4, 0x25dfdbfd, {0x3}}, 0x14}}, 0x0) 1m2.228712839s ago: executing program 5 (id=5153): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000940)={0x1, 0x0, 0x21a4, 0x10001, 0x2, 0x9}) (async) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000080)=""/196, 0xc4}], 0x1) (async) getpeername$packet(r0, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000900)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002740)={0x18, 0x2b, &(0x7f0000000600)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1b1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6b61}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x10000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000000780)='GPL\x00', 0x80000000, 0xd5, &(0x7f00000007c0)=""/213, 0x41000, 0x66, '\x00', r3, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002680)={0x1, 0xc, 0x8, 0xf}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000026c0)=[r0, r0, r0, r0], &(0x7f0000002700)=[{0x5, 0x4, 0x3, 0xb}], 0x10, 0x4}, 0x94) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) (async) r5 = getuid() (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002500)=0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r9}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) (async) r10 = socket$kcm(0xa, 0x3, 0x73) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x29, 0x37}], 0x10}, 0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002540)={0x0, 0x0, 0x0}, &(0x7f0000002580)=0xc) sendmsg$netlink(r1, &(0x7f0000002640)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002480)=[{&(0x7f00000000c0)={0x270, 0x20, 0x10, 0x70bd25, 0x25dfdbfc, "", [@nested={0x47, 0x29, 0x0, 0x1, [@nested={0x4, 0x141}, @generic="cf95b57a7fb08ff9dcf09495c889f9fd7d7151e14ae99e69ebce7ad7b518aa528d5cea51e433a6df4bc0b6357472dbae21eb67", @typed={0x8, 0xb0, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0xa2}]}, @generic="0164e29a9da881db3ecf279149707b40e545392cf8ff3093b0df5e8d321f04d4735fcae05d8d4d6a0e8d824dcfb561199fa0036f81e096de48a98eaf982756b6157c5faf8b81e0fcd42b0b430faf55e5f3dea9cba495d560b55ed2a05e18033dc26d7689b9ea10bdfa8cdb6e7da5140a6be8862b19da63c759d46a8f60a83e7c11e88d879e4d", @generic="4288df3852315b36528ae31fdafb00602f6eca9fd01bca5262b7ad09981f5be29e6b4becb255a387e5f0d84629cc04f256885bbaac3c11c943b75971f63e63c4c792ccb8975fbefffd0477c9da4a8c1a08b788c5bad78d4405063877502dc03c84c77d3d28104e", @generic="74d0e3d57888ff6dd79c5ef9a9364694bfdf57a92f276c0f0cb4953547f6ef3be2dd3088ed2fadc77312be910078b90323606bfa1155ea88fa22a0981960270ac7a81b9c849eb3293d9cff3409d670eb48f5c3b41c46982422cceddc3316e6aa336098e28cb8f4bfe48e1d21867ca5aea4a5", @typed={0xb3, 0x122, 0x0, 0x0, @binary="9d67d29a92ecd6ea8a182fd50f20f3d95363319c1c941fdbd25e51e7a1bff56ebd19f711c48e391b93f96f90977aaf200e43cc4fc65828bb7c7d652fe74c0c18cef87da91077973a540671787d1ad4de9c06728826931285d99f5d8a002b9b07d5e7b8b99469d464e1108f7f5892e05c0b699f4b6da399e69e2752d0902f811e1bb83220aab5cdfdaf764d808e39a147ee5cf916715ea975e51e48c6d02e8f5eb1c6454ed9339ac4bc359905b212a6"}, @nested={0x4, 0x84}]}, 0x270}, {&(0x7f0000000340)={0x17c, 0x10, 0x800, 0x70bd27, 0x25dfdbfc, "", [@generic="75ae8282a70d141927d5e0cc3635217574dd98f88047dce173215be08508550a5d06ccb5d1a6a4d5278b2c36f3ea30f4b69cc8797dc460e7fcfb646cd7e7e43628c093dcc3e41132fbddc96a82f6793e57d572ce6ca579f2c0626427d7091fe57c6e8ec9dae76225260d878e1cdc7d33250f798e58b267bacd722316c283178d8886bd64c8204debedece6f0690005c87c3d84955d8505c06bd0", @typed={0x5, 0x12b, 0x0, 0x0, @str='\x00'}, @generic="22ec5b81e4d6c9c2ca3f06976c69fa6300d531c18738c7a323e37550fffd40d8f503e1f7d2160a383b8d3df8615689ed30657112a49d4f03ffcbd2365f1f8f2899f4f390f3f1031586f700f3408f089c23e51ea233f38e106cf41986b697acc11f9d43abf517428764be484f41f0d9ebca56bc6bcdd4da5e7865cea3cf235398c6e70ad5c0cfd931129fe77d75b531158ac80e16c4d24126dffc6b9bae8eaa73e61840fe317e25b8a7c54e4175ed8c4ee455716dbb1d01cd3d5b7e7957230c6526406cf9133c6e"]}, 0x17c}, {&(0x7f00000004c0)={0xec, 0x3f, 0x20, 0x70bd25, 0x25dfdbfb, "", [@generic="be454150a1c4bdeafa9e8c6e4994f98764105c51e05d60d4d875b33e4ed26f288046ba99ae6ef97350dc5373d242d741eb72db73e11aaa0f5e8daa4fc9b6f5fb2a9f5acad9209ee9ccb9cec3cca562a1d972e50946c245ce1d0d3d9b70a264b9d5867160b9c97512acac2323c03bc4fea2b6dd892b5d87669190eca582ca9e8f6bd4e072914d2ca25dbc5c916097580d0b7689df9ddcfc564307f85ba494bc35a9320371fe12d5f5a05e06a371c95aaf09d4b006e64c4c8f30055b60c8deb3966fd34e4e0e5bc7c3", @typed={0xc, 0x138, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x12a, 0x0, 0x0, @ipv4=@loopback}]}, 0xec}, {&(0x7f0000000980)={0x1378, 0x36, 0x20, 0x70bd29, 0x25dfdbfd, "", [@generic="9c04a69738c0d433403bbb8ff9992fb8674305610af75daf3b197b365ccbef9db25d156375e0f6b79c2338ccd37d7201a88ebb2ea0b4fb57aef6f30169a1", @nested={0x1010, 0x13d, 0x0, 0x1, [@nested={0x4, 0xe0}, @generic="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", @typed={0x8, 0xcd, 0x0, 0x0, @u32=0x1}]}, @nested={0xa5, 0x135, 0x0, 0x1, [@generic="e166592d52e2f799f0226fb227bce22e002eaf689eae0abbe7980603625ef4d44761a0b88682f912621343a68e38194cd641d69b0ed7f6d87134667e5019588ebbe9ae72eec0606bddb15ed4b4595b58fe6e4f37a4fc978e002756b4c376db768657bf35061bb005916ff31fa53cd49227ee6dc33c81ad2857b421db4fb5738ec486ac7f642e0416485e035032", @typed={0x8, 0x91, 0x0, 0x0, @u32=0x5}, @nested={0x4, 0x4c}, @nested={0x4, 0xf3}, @nested={0x4, 0x113}]}, @generic="94b2ba9fcc5696fb48fa0cfe633dafcbbb3277d1d7a69ea0a596634cf23ac4e7421a199d043f7f8f593a0ce77fb1d588efe2194576fd9905f45f0b7db57aca75c7c02a5d20e8e7950e2ecc34dc49a2b64ac78c2173d71f3c1b4b437aa56c85f929c0a50981709599660f9f61f6efecfedb48661562e3231b", @nested={0x1b4, 0x13c, 0x0, 0x1, [@generic="e34352cbce56aa594480851f9f99fc1d5b59d99198ecefc98222719ef926999972166d1827e6829d1242d9732fa17974794afe71c23058d3d3c414ce522c32a27ba9d0144aebb6b00f3d385fa4eb1270c96e943ff7d204a0d03d9bffeed4edaeba71f836e18cfb054310127704355bea26ec777203d6ca27abe3dfd52b168e3cc2283f5fd790d90a7ce385c8eb724303f29cbb16daeb7aa8", @nested={0x4, 0x27}, @typed={0x14, 0x35, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0xf9}, @typed={0xef, 0x51, 0x0, 0x0, @binary="1737843b3133a305d21f24cb2462e5a97dd9e07c874cf5d00b01461128bbec8938c27eb98d91932e7234c666f6321150310d3a6abe130a30e8421480f3505ee2cf1bc21476df02bbf707e542721f7125b925fba98d51de70a78f51c0b8ff8a5a0740008a9ed33e090aa5fd88f88e475eceb9df6d049625a4ecb7d530b18ec52040485d3f30c9ab364934d07c4bfb0a64bac3bdd976117b1be9be78a06ccb216d028e2e7601385e3ec356a398648930f84ff6169316b549a2816a23db97beb91466e0c6134bd4d33a93f7076643af51ecc60c56f5080f922ce3cb3ba44b7fb5c7e4ffcbb822d273e59581df"}, @typed={0x8, 0x13c, 0x0, 0x0, @pid=r4}, @nested={0x4, 0x7d}]}, @typed={0x8, 0xa4, 0x0, 0x0, @uid=0xee01}, @generic="b00382d31db7c75b921f9c0f70f35279d6488cd1caa576c1", @nested={0xd, 0x13f, 0x0, 0x1, [@generic="88", @nested={0x4, 0x129}, @nested={0x4, 0x66}]}, @typed={0x8, 0x164, 0x0, 0x0, @ipv4=@broadcast}, @typed={0xc, 0xe1, 0x0, 0x0, @u64=0x1}]}, 0x1378}, {&(0x7f0000001d00)={0x154, 0x26, 0x800, 0x70bd27, 0x25dfdbfc, "", [@typed={0x8, 0xb5, 0x0, 0x0, @uid=r5}, @generic="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", @generic="290b447295851facf406791dcb362cb4a33571e8ca52d9c502ffa37c4acbfe7a74a75495261a03fd7334d56963914632d75d3c74a5eb523a2af58a39187f60"]}, 0x154}, {&(0x7f0000001e80)={0x28, 0x26, 0x2, 0x70bd28, 0x25dfdbfd, "", [@typed={0x5, 0x8, 0x0, 0x0, @str='\x00'}, @generic="f058132c566706488d7d0ed35c56"]}, 0x28}, {&(0x7f0000001ec0)={0x580, 0x41, 0x800, 0x70bd26, 0x25dfdbfe, "", [@typed={0xc, 0xc2, 0x0, 0x0, @u64=0x7f}, @generic="728683b03a74ae60bef89b5e50e169bae3005669ffb4a9921045c63ea7be3078ba183c990395fe9cfd9fdc1780117794f89bb1619acb6d5bbb1b72756996b061f46d8561347fcb8d4f4edec5f954e02f371b1a869c3a0233faee3e51078b5506ad2a6f269f73d9d0dc4ad12bc4f8afac7140989ef66352b46a76f20047331dd5ff6ddfcbeccd41de6869d046f991d71b90ce83288ebff9c69d03f2c1854b980ca92fb01a1ab56ade6a101c43", @nested={0x10, 0x131, 0x0, 0x1, [@typed={0x8, 0xc7, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x4, 0x37}]}, @nested={0x9d, 0x28, 0x0, 0x1, [@nested={0x4, 0x9c}, @generic="cf87bf601c9f1cb7f1022d0b245eca4aa4c98f4f5aa7716d22dad249eb9281e8e7284a9fd62a9805575eaf9edab82f522b92bbca8d2a846c76cfbc3b4736c2b0", @typed={0x4, 0xbc}, @typed={0x8, 0xd, 0x0, 0x0, @fd}, @nested={0x4, 0xe3}, @nested={0x4, 0x65}, @generic="703d288c9c0af271aa3b8d362b962a82511eb8b25161ab4694e8fcf7e4fc92d83a8779f76474554bbcef0bf6bf678f5d0eee9f0267db21498eb13ab1e14dee9ac6"]}, @nested={0x145, 0x11d, 0x0, 0x1, [@generic="26f9dd73ef2fc937347e20b05c5504880d8aa27e6029d3f278e98bb18b3c8d26437b5d04eae0955c1fa62ee8eab25087da55b17c24a7c1d9bab90af3e1fc72a5f5dc68", @generic="6c14303e7ee6b727ef2994a1f0cf985b3da1d679aece99939335a1236c48dfed0cd5d704dc1df519a3b20281000ca0ec2cadae15854c2d6f590aecf9a1af0f5517af1b7dea02df65ec160e41ea1108545205460b39213a4a3cc6d1fc700e5926fb115032a7d7235c08d7a4c083432268162eb97b4daa31d362f619cf38d16349992fdab4484f682f2e1850bab6522d792c570c7cf593965e2da4a7e23413d6eabee26c51ff6344c8c4dcda7bef5045a01b9d6fe171cdfcd48bd5c9ee897d8ec0be8512bab3bee5cd36631df7d627441bf4c1e7e1ef6148fa4c67dbc1f518716070070f4ee9f99057285a6722e3c7d531d927333a37fc6b12401081a1f3b4"]}, @nested={0x195, 0x160, 0x0, 0x1, [@nested={0x4, 0x10e}, @generic="fe08e348b03fdd87d483b03d3aece04b30bafd80f44ae0c8d7dd9b5c5c483aa697bcefd9b955924fb05b7e8876218d221bc728f73677059f9929275c4d71c13f828b33c633ed3f1478b0cf90b002b18aa5e3373e1e4ae0a2118d933919d022c232336fa918e2f3c143ce5d0ca6e066fb608d7b8545078d9e90cff28aa66506d113f361f45881ce35433ff020e207c94ede0a39b7a094db76b14417be", @nested={0x4, 0x17}, @typed={0x8, 0x106, 0x0, 0x0, @ipv4=@multicast2}, @generic="946fff6bfa1248e649e9681f551bd04837d38bafdcbedfc5ecf42134d4e1d326696dbd1c5f12060d5089ed6616fa6a89bfe91ec08b61e41c85eb06d8fb9f10f1626b68a2e112063c0ad1933f3d21ed4637a8684761ef38c5bffd3a250c9385c61069b17a4d6c3beec6286d7173355b84df2a7524f684ca4446fa8b2e7111a056ddfd54296a15897c581dff", @nested={0x4, 0xfe}, @generic="0498b069162d2495cb497db54f2a7e5e499644bf4607a487fe37ed78e9916f560feac57535b470b6b9ce206ef1e4e358d450c0064d861c34555ca54dac4ddc8c86cb", @typed={0x8, 0x56, 0x0, 0x0, @u32=0x5}, @typed={0xc, 0xd0, 0x0, 0x0, @u64=0x3ff}]}, @typed={0xc, 0x14e, 0x0, 0x0, @u64=0x9}, @nested={0x11a, 0xf6, 0x0, 0x1, [@generic="2376b1ffe2bb59b3725c4b21c5dcb616e6fd542c9f89b1126951184dca4192eabacf6004bc306cd2b1195976dba1ea298d7f2329eeb49bc5c422d708f65d34f7148b529d2a2e42df990eb949a200ce889d3871d9b88a9b56357f1d51c8d99619235a11049d5731bcc7af583b9baf130455c5c32a609b3178c320533327d7e4eb0a1a13a3e2cbdfca4c78a197b94c5edd6473531e00658c646a3e94c6febdc6fcee68c70fcb1445eeb891b68181650f6ec549087f7bed7a5a04e5f76b872f44bd943af4f5ce75089a4e4ec64d7d1ce8683a45", @typed={0x8, 0x53, 0x0, 0x0, @fd=r6}, @generic="9090b7d6396def0bfe085de6a4fc1db6fe372be80f1fafe4dd3db58e6ed821d055c09e1f8c0ae2646853f2acf43fd3dc3bbb3baa292cfe9356aac173"]}]}, 0x580}, {&(0x7f0000002440)={0x20, 0x28, 0x800, 0x70bd27, 0x25dfdbfb, "", [@typed={0xc, 0x11a, 0x0, 0x0, @u64=0x5}, @typed={0x4, 0x10d}]}, 0x20}], 0x8, &(0x7f00000025c0)=[@cred={{0x1c, 0x1, 0x2, {r7, r9, r11}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, 0xffffffffffffffff, r0, r0]}}], 0x68, 0x24044885}, 0x1) (async) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r12, 0x1, 0x3c, 0x0, &(0x7f0000000500)) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x1100, 0x1, 0x8, 0x10003}) 1m1.86530488s ago: executing program 3 (id=5154): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x38018, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x44}}, 0x800) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) 1m1.835908716s ago: executing program 0 (id=5155): getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, 0xfffffffffffffffc, &(0x7f0000001040)) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f0000001080)) r2 = accept4(0xffffffffffffffff, &(0x7f0000001180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, &(0x7f0000001200)=0x80, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000001340)={r2, &(0x7f0000001240)=':-@\x00', 0x400040, &(0x7f0000001280)={@_ha_fsid={[0x5, 0xc2a5]}, {0x5, 0x10, 0x1ff, 0x2}}, 0x3, &(0x7f00000012c0), &(0x7f0000001300)=0x10}) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000001380), &(0x7f00000013c0)=0x4) (async) bind$inet(r3, &(0x7f0000001400)={0x2, 0x4e24, @remote}, 0x10) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f00000017c0)={0x3, &(0x7f0000001740)=[{0x5, 0xfa, &(0x7f0000001440)="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"}, {0x1, 0xc3, &(0x7f0000001540)="b60f4f93586da895d896769fbc20bdf04025446abbadc7ee2a786ed9f0235ae87fd981c8edce911cde6670a8a53065091e30776a94f150fdc081180db76dc36a56b7b76ee718f02e1b010aab59568b9e856168df67ec556ccb4ce6c3a75334fe9257634ab2d4daaf255d4795f24e4051428dcf3648d062e36930110723416fbf77c55acfafb34fb6820b2cf0ab596e2694487b13ad656a0dd62165c8cf23372b7c6747284be5d9eff8c89788caa7452c2c0d275a0ee2d213b99438c44017ca24032719", 0x1, 0x1}, {0x4, 0xd3, &(0x7f0000001640)="6d563ed4a1e3bb305b1140d7c5d8f63af5cfc1b0629cb7292085b59fd7751b3575a4ad93385772bec4ab2051c6f15ac9c9c72b3f567f46e55b24e55683df5467508f9db3a698f01f7cd53ec8da284a822982237be747352c361fdd012f4bcb450af577542a2d303a77643db415e191df4bcf6db4a38d60b7e2c57f25c1f9c02cc450521c5e2a5768c53779fb9592c792b516f48469e46ca20ad6c15766aff0630c44293e94d6568dcc00e1f47d8067d7c65dc349f8467b0b03a0754b12a91b231af8a1884d10f767389bd86f54b6533ebb99a5", 0x0, 0x1}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001840), r3) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x2c, r5, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) recvmsg(r1, &(0x7f0000001ac0)={&(0x7f0000001940)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)=""/37, 0x25}], 0x1, &(0x7f0000001a40)=""/70, 0x46}, 0x22) (async) write$tun(r3, &(0x7f0000001b00)={@val={0x0, 0x17}, @val={0x2, 0x3, 0xffff, 0x5, 0x6, 0x7}, @ipv6=@generic={0x2, 0x6, "fba82a", 0x96, 0x87, 0x0, @mcast1, @remote, {[@fragment={0x3a, 0x0, 0xb, 0x1, 0x0, 0x6, 0x68}, @dstopts={0x2c, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0xca0}, @ra={0x5, 0x2, 0x41}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7}]}], "2e94fb32bc7756be0271aeb97d02f12d77e3bda5672555175da672ba2cfcd17cc68fe69796a21fb2fbe3129f3313485f9964b0cce19a51724ed3537203e529dd6d895daa4d03a1e5de1e6a1a6c587c360488b1899549a39c5a60d68f96c1813915d04fdc2f1e"}}}, 0xcc) (async) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000001c00)={0x8000000000000000, 0x4, 0x401}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x2c, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1000}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc011}, 0x20000000) (async) sendto$llc(r0, &(0x7f0000001d40)="ac6e10197d163b5f085a1128e47293555e163f6a8d86e539e2ac1b7ed6439e6a83a409e55709611d10597a577e7116eac7c100d5dc2d48953d1b36a1fcb81daa12bd673f96e13e1ed065a8effd510f1508283bdec8ea9fec666491c15e1ab849143117bcfb2ba5e9712ad3f55facbc08f9160ca3b968749e3c248af9e9fff6da16fa7cfdc8d43c45fd4194b34c287a9a3f696e06d7fe1c6f61cd4fc395c891200a071e599a0ac5f88212be99256e4d6777e0c57edc1913df3a783e3f178d89e65e1d2d2fd520d6c0a9c8112864e33026975eea85d593a4abe9adf43343696db0c872afc03d280d9f1879b7a542084340", 0xf0, 0x2004c090, &(0x7f0000001e40)={0x1a, 0x30d, 0x0, 0x12, 0xbd, 0x4, @multicast}, 0x10) (async) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000001f80)={r3, &(0x7f0000001e80)=':-@\x00', 0x240, &(0x7f0000001ec0)={@_ha_fsid={[0x0, 0x7fff]}, {0xff, 0xa, 0x2c05, 0x7}}, 0xffffff81, &(0x7f0000001f00), &(0x7f0000001f40)=0xfffffffc}) (async) connect$llc(r2, &(0x7f0000001fc0)={0x1a, 0x207, 0x4, 0x2, 0x0, 0x3, @local}, 0x10) (async) recvmsg$kcm(r2, &(0x7f00000021c0)={&(0x7f0000002000)=@sco, 0x80, &(0x7f0000002180)=[{&(0x7f0000002080)=""/151, 0x97}, {&(0x7f0000002140)=""/45, 0x2d}], 0x2}, 0x40010161) (async) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000002200)={0x401, 0x8, 0x8}, 0xc) (async) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000002240)=0x1, 0x4) (async) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000002280), &(0x7f00000022c0)=0x4) (async) pipe(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002380), r4) sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f0000002440)={&(0x7f0000002340), 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x1c, r9, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x3c}, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20003008}, 0x0) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000024c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x30, r10, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x4000) 1m1.277576731s ago: executing program 5 (id=5156): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x1010, r0, 0xbdb7c000) 1m1.276989892s ago: executing program 0 (id=5157): unshare(0x6020400) (async) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000540)={0x276a7ece4bfa0994}) (async) connect$netlink(r0, &(0x7f00000014c0)=@proc, 0xa) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x3c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x1c, 0x26, 0x101, 0x70bd25, 0x25dfdbbb, {0x1}, [@typed={0x5, 0x167, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24008080) (async, rerun: 64) r5 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00', 0x9}, 0x1c) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f00000005c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x4825}, 0x4000) 1m1.257140982s ago: executing program 2 (id=5158): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b3cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9411a36324ea1790e834c", 0xd8}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in=@local}, {@in6=@empty, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'pcrypt(rfc4309(ccm_base(cbc(aes-aesni),wp384)))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) 1m1.256338834s ago: executing program 1 (id=5159): r0 = socket(0x2a, 0x5, 0xfffffffe) recvmsg(r0, &(0x7f0000000280)={&(0x7f0000000000)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000140)=""/30, 0x1e}], 0x3, &(0x7f00000001c0)=""/188, 0xbc}, 0x2042) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac00400020234000200060001a109000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000010011a801000f480040005800800090000000000080003803000018005"], 0x270}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0x1, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@bridge_getvlan={0x28, 0x72, 0x1, 0x70bd2a, 0x25dfdbff, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x56}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x24040890) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) 1m1.189876324s ago: executing program 5 (id=5160): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) 1m1.156117161s ago: executing program 2 (id=5161): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000050009"], 0x184}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x32}, 0x94) 1m0.945810508s ago: executing program 3 (id=5162): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0x405, @loopback, 0x1087}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r0], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54222002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) socket$packet(0x11, 0x3, 0x300) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) socket$inet6(0xa, 0x80002, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0x405, @loopback, 0x1087}, 0x1c) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r0], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54222002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) (async) 1m0.760639062s ago: executing program 2 (id=5163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xc0, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x98, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x24, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'connlimit\x00'}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xe8}, 0x1, 0x0, 0x0, 0x20004006}, 0x24000840) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) (async) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x37}, 0xa) 1m0.708586502s ago: executing program 1 (id=5164): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x23, &(0x7f0000000140)=ANY=[@ANYBLOB="bf16000000000000620af0ff7f000001620af4ff7f000001620af8ff12344e20620ad8ff12344e20620adcff00000000620ae0ff00000000620ae4ff50021000620ae8ff00000000620ac0ff45000028620ac4c000000000620ac8ff40060000620accff7f000001620ad0ff7f000001bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb705000000000000850000005400000015000b0000000000bf07000000000000bf71000000000000bfa200000000000007020000c0ffffffb703000014000000bfa400000000000007040000d8ffffffb705000014000000850000006e000000bf710000000000008500000056000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m0.542020015s ago: executing program 0 (id=5165): r0 = socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000380)={0x0, "3c8e205b642f031bf5d40908a57942bc"}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000019c0)={0x0, "488dcddea4eef641cf7087f080afd46c"}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x50) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000029c0)={0x0, 0xcb9e, 0x7fffffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002dc0)={0xa, 0x0, {0x6, @usage=0x2d5, r1, 0x1, 0x2, 0xfff, 0x4, 0xffffffff, 0x122, @struct={0x5, 0x7}, 0xb, 0x5, [0x3, 0x4, 0x8, 0x0, 0xffffffffffff8001, 0x8]}, {0x50b8, @struct={0x401, 0x2}, r2, 0x3, 0x6, 0x1f, 0x7fff, 0x7ff, 0x40, @usage=0xf, 0x28, 0x4, [0x3, 0x6c6, 0x3b1d, 0x9c, 0x1, 0x3c8170bb]}, {0x4, @usage=0x2, r3, 0x4, 0x7, 0x6e74, 0x6, 0x399, 0x40, @usage=0x7ab, 0x0, 0x10bb, [0x9, 0xa08f, 0x7, 0x2, 0x2, 0x10000]}, {0x2, 0x9, 0xfb}}) socket$kcm(0x29, 0x7, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e4"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0x80}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006e0000009500000000000000397fed961cc4ed80bd4c482ebfec68e5445a2cb3018a78859610d62ec243e61fb65e5b88ff24471ede7031be24da09b706a1d01448c529c59d227536b278ab83112b57f86a5cc6a5fed35e66088efcfacbc172866ab87bdfaf09f23af65246db49e45403082cfa3ce9e706f13ec798d89317c09565586e89ca4f0ec74dd4a9cef6b937b19a80b979422243260f5da488a705c4bd670da40cad"], &(0x7f0000001600)='syzkaller\x00'}, 0x90) 1m0.498216876s ago: executing program 3 (id=5166): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)="3c44e4a53a", 0x5}], 0x1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @multicast1}}) 1m0.457484984s ago: executing program 5 (id=5167): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) (async) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000340)={0x0, @loopback, @dev}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@setlink={0x80, 0x13, 0x20, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x400, 0x20080}, [@IFLA_BROADCAST={0xa}, @IFLA_VFINFO_LIST={0x54, 0x16, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x6, 0xffffffff, 0xfffffffd}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7, 0x5}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x80, 0x707, 0x0, 0x19050}}]}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x7f, 0x4, 0x1ff}}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x3ff, 0x89, 0x10, 0x89}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) getpeername$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={@empty, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x100, 0x9, 0x4, 0x100, 0x53, 0xa440001, r7}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x4c, r4, 0x1, 0x2, 0x25dfdbfb, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x277a3a3e9b59827c}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x200, r4, 0x4, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x200}, 0x1, 0x0, 0x0, 0x4c091}, 0x24004000) 1m0.294168424s ago: executing program 1 (id=5168): getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0xb2, "84cd74625f855532ffe2b91a83fbab2e6aa761905d0c52c26a61ecfb1c2bbc0dcc1e0fe80f133c34cbd8dec219413553a98ec84bd8c88167c3539226bfe7678d298de312ae65f5fef127c6d25cd8aa59f491407d5061d27c108acc0c9dccb6eb6d115da7efc757e2ea1806b4155a381e6077ab4d65cf68c75990032dc20f8cd0d65ed00020c674f1366641f2360bd1d6491160c0ea9ce9f5699775a00cadc0e2bfa6ccdfe4f73cfedd5dac83ed5f7717bd6d"}, &(0x7f0000000300)=0xba) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) (async) r2 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) (async) r4 = epoll_create(0x11ffffe) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x40000001}) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000080)={0x2000a212}) (async) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="01000000080800"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="4100f60001000000000000000001"], 0x80}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711095000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'macsec0\x00', 0x8}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) sendmsg$key(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0xf, 0x1, 0x7, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_ident={0x2, 0xa, 0x200, 0x0, 0x1}]}, 0x20}}, 0x20004) (async) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x40) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000008, 0x1010, r5, 0x12504000) 1m0.078108738s ago: executing program 3 (id=5169): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000001c0)="5c00000012006bab9a3ff36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb00"/74, 0x4a}, {&(0x7f0000000380)="1ed6848306a77e7b115365cde0c05b774875", 0x12}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="10"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m0.025018905s ago: executing program 2 (id=5170): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001500)={{0xffffffffffffffff, 0x0, 0x80082, 0x0, 0x9, 0x0, &(0x7f0000000140)=0xa}, 0x1, &(0x7f0000001480)=[{0x2, 0x22189ac3, 0x0, &(0x7f0000000300)="f5bc92ae4643846d1e3733b78c7dcf0ed54767e895dd9b4ff4b969f8ffd02118fa07a52bb99e7d8cf8e06e27cc705197a8ef509bcdebb1b7ed6e3db5d1f59fc40d6e6bd761af64eae7717da5eb0af63df4c9305d85b6342f149d63fd3568ae98563ab8df54e94cd86483cc4adf12e09f960c29308081b86983cb63ea4141d9176ebe", 0x82, 0xa}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r7, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a320000000014000780050014000300000008000840000000000500050002000000050001"], 0x60}}, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x108, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x14, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000004000000000000000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff000000004c9100000000000037010000f8ffffffb702000008000000b7030000ffffffff15000000060000005f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 59.92949187s ago: executing program 5 (id=5171): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0) listen(r0, 0x0) (async) listen(r0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) listen(r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r4, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="53fb7bdc0f56297e8d81469a615db4192f58aa8c358d9957d4f84ba90ec0a5bfe9ec59611f6a064f", 0x28}], 0x1, 0x0, 0x24c0}}], 0x1, 0x60040d1) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x0) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x40, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) (async) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x40, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 59.928070041s ago: executing program 0 (id=5172): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x1c0, 0x194, 0x194, 0x1c0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x1a5, 0xc20, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x18, 0x2f, 0x22, 0x8, 0x1d, 0x18, 0x15, 0x2e, 0x29, 0x2a, 0xe, 0x2, 0x1a, 0x31, 0x39, 0x3f], 0x0, 0x8e, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x19, 0x4c}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x49, 0x10, &(0x7f0000000000), 0x3}, 0x28) 59.705936949s ago: executing program 3 (id=5173): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x4c, 0x0, 0x0) bind$unix(r1, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0) recvmsg$can_j1939(r0, &(0x7f0000001d40)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@const={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2, 0x0, 0x0, 0x12}, @typedef={0x4, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x42, 0x0, 0x1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0x1a, 0x0, 0x80000000, 0x40, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000013c0)={&(0x7f0000000000)="5c3a879f6d4b03167deb97a4ce3598f3ac996ba9ce3763f2a19c928f77a9ff29e9245624d0a9737e4a25206d61676ad6e46c3e4c", &(0x7f0000000100)=""/254, &(0x7f0000000240)="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", &(0x7f0000001240)="f16f00f6f9366fb0abaee8db7b81bc4f9f670112b1ca78a4fb70359ff32fbc5f4feaa4c3660522823de90f6cd3c6df83952d9e880538b94b3477645c6ff509a9c49509c4cb35ab9bbba845eece7acc73ee0e362cb424a63449e4797a6d9185a69e54b235e276fed3ba5d0c69cf06ef2f508932b55322cb8fa57efa04cf8fd036ac4bcbcb33bfb673eea0e9ea645cc5f9aa1e9f305303ae98d94a6e2a8ce07f4f4f4b25f75a7c43859892f3977533182d1044181a87dc5ac0c44b9ef68120234cc91441a610bb3f219172bbd64bb3e190", 0x768, r2, 0x4}, 0x38) 59.513483799s ago: executing program 2 (id=5174): r0 = socket(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x73) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d", "6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68", "dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b5", {"4e3bc06c34c945e45e27e747494b407f", "256d9ddc3e6e1f7c5f7b4c5e69c1dd72"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) clock_gettime(0x0, &(0x7f0000005980)={0x0, 0x0}) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) recvmmsg$unix(r0, &(0x7f0000005840)=[{{&(0x7f0000000040), 0x6e, &(0x7f00000016c0)=[{&(0x7f00000000c0)=""/193, 0xc1}, {&(0x7f00000001c0)=""/197, 0xc5}, {&(0x7f0000000300)=""/67, 0x43}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001880)}}, {{&(0x7f00000018c0)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001940)=""/6, 0x6}, {&(0x7f0000001980)=""/64, 0x40}, {&(0x7f00000019c0)=""/182, 0xb6}, {&(0x7f0000001a80)=""/249, 0xf9}, {&(0x7f0000001b80)=""/119, 0x77}, {&(0x7f0000001c00)=""/249, 0xf9}, {&(0x7f0000001d00)=""/194, 0xc2}], 0x7, &(0x7f0000001e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000001f80), 0x6e, &(0x7f0000003280)=[{&(0x7f0000002000)=""/7, 0x7}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/155, 0x9b}, {&(0x7f0000003100)=""/100, 0x64}, {&(0x7f0000003180)=""/254, 0xfe}], 0x5, &(0x7f0000003300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000003400), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/6, 0x6}, {&(0x7f00000044c0)=""/190, 0xbe}, {&(0x7f0000004580)}, {&(0x7f00000045c0)=""/21, 0x15}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000005600)=""/194, 0xc2}], 0x7, &(0x7f0000005780)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x5, 0x0, &(0x7f00000059c0)={r2, r3+10000000}) 59.339239993s ago: executing program 0 (id=5175): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x11, 0x26, &(0x7f0000000080)={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, 0xc) 45.834030746s ago: executing program 3 (id=5176): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) (fail_nth: 3) 38.815055087s ago: executing program 33 (id=5168): getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0xb2, "84cd74625f855532ffe2b91a83fbab2e6aa761905d0c52c26a61ecfb1c2bbc0dcc1e0fe80f133c34cbd8dec219413553a98ec84bd8c88167c3539226bfe7678d298de312ae65f5fef127c6d25cd8aa59f491407d5061d27c108acc0c9dccb6eb6d115da7efc757e2ea1806b4155a381e6077ab4d65cf68c75990032dc20f8cd0d65ed00020c674f1366641f2360bd1d6491160c0ea9ce9f5699775a00cadc0e2bfa6ccdfe4f73cfedd5dac83ed5f7717bd6d"}, &(0x7f0000000300)=0xba) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) (async) r2 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) (async) r4 = epoll_create(0x11ffffe) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x40000001}) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000080)={0x2000a212}) (async) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="01000000080800"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="4100f60001000000000000000001"], 0x80}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711095000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'macsec0\x00', 0x8}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) sendmsg$key(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0xf, 0x1, 0x7, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_ident={0x2, 0xa, 0x200, 0x0, 0x1}]}, 0x20}}, 0x20004) (async) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x40) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000008, 0x1010, r5, 0x12504000) 29.714845494s ago: executing program 34 (id=5171): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0) listen(r0, 0x0) (async) listen(r0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) listen(r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r4, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="53fb7bdc0f56297e8d81469a615db4192f58aa8c358d9957d4f84ba90ec0a5bfe9ec59611f6a064f", 0x28}], 0x1, 0x0, 0x24c0}}], 0x1, 0x60040d1) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x0) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x40, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) (async) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x40, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 21.310947544s ago: executing program 35 (id=5175): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x11, 0x26, &(0x7f0000000080)={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, 0xc) 12.405027021s ago: executing program 36 (id=5174): r0 = socket(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x73) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d", "6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68", "dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b5", {"4e3bc06c34c945e45e27e747494b407f", "256d9ddc3e6e1f7c5f7b4c5e69c1dd72"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) clock_gettime(0x0, &(0x7f0000005980)={0x0, 0x0}) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) recvmmsg$unix(r0, &(0x7f0000005840)=[{{&(0x7f0000000040), 0x6e, &(0x7f00000016c0)=[{&(0x7f00000000c0)=""/193, 0xc1}, {&(0x7f00000001c0)=""/197, 0xc5}, {&(0x7f0000000300)=""/67, 0x43}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001880)}}, {{&(0x7f00000018c0)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001940)=""/6, 0x6}, {&(0x7f0000001980)=""/64, 0x40}, {&(0x7f00000019c0)=""/182, 0xb6}, {&(0x7f0000001a80)=""/249, 0xf9}, {&(0x7f0000001b80)=""/119, 0x77}, {&(0x7f0000001c00)=""/249, 0xf9}, {&(0x7f0000001d00)=""/194, 0xc2}], 0x7, &(0x7f0000001e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000001f80), 0x6e, &(0x7f0000003280)=[{&(0x7f0000002000)=""/7, 0x7}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/155, 0x9b}, {&(0x7f0000003100)=""/100, 0x64}, {&(0x7f0000003180)=""/254, 0xfe}], 0x5, &(0x7f0000003300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000003400), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/6, 0x6}, {&(0x7f00000044c0)=""/190, 0xbe}, {&(0x7f0000004580)}, {&(0x7f00000045c0)=""/21, 0x15}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000005600)=""/194, 0xc2}], 0x7, &(0x7f0000005780)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x5, 0x0, &(0x7f00000059c0)={r2, r3+10000000}) 0s ago: executing program 37 (id=5176): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) (fail_nth: 3) kernel console output (not intermixed with test programs): ] netlink: 'syz.2.3881': attribute type 1 has an invalid length. [ 472.013319][T20849] 8021q: adding VLAN 0 to HW filter on device bond13 [ 472.090711][T20853] ip_tables: iptables: counters copy to user failed while replacing table [ 472.094122][T20852] veth7: entered promiscuous mode [ 472.094143][T20852] veth7: entered allmulticast mode [ 472.157045][T20860] sctp: [Deprecated]: syz.3.3883 (pid 20860) Use of int in max_burst socket option. [ 472.157045][T20860] Use struct sctp_assoc_value instead [ 472.183253][T12771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.222488][T20850] 8021q: adding VLAN 0 to HW filter on device bond7 [ 472.245776][T20849] bond13: (slave dummy0): making interface the new active one [ 472.246721][T20849] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 472.294685][T20863] __nla_validate_parse: 13 callbacks suppressed [ 472.294710][T20863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3884'. [ 472.592872][T20873] trusted_key: syz.0.3887 sent an empty control message without MSG_MORE. [ 472.660106][T20881] pimreg3: entered allmulticast mode [ 472.667580][T20878] validate_nla: 1 callbacks suppressed [ 472.667601][T20878] netlink: 'syz.2.3889': attribute type 2 has an invalid length. [ 472.667614][T20878] netlink: 'syz.2.3889': attribute type 8 has an invalid length. [ 472.667626][T20878] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3889'. [ 472.697792][T20881] netlink: 'syz.3.3888': attribute type 3 has an invalid length. [ 472.697814][T20881] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3888'. [ 472.700873][T20882] netlink: 'syz.3.3888': attribute type 3 has an invalid length. [ 472.700889][T20882] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3888'. [ 472.851174][T20878] netlink: 'syz.2.3889': attribute type 2 has an invalid length. [ 472.851512][T20878] netlink: 'syz.2.3889': attribute type 2 has an invalid length. [ 472.851702][T20878] netlink: 'syz.2.3889': attribute type 2 has an invalid length. [ 472.851880][T20878] netlink: 'syz.2.3889': attribute type 2 has an invalid length. [ 472.852054][T20878] netlink: 'syz.2.3889': attribute type 2 has an invalid length. [ 472.852258][T20878] netlink: 'syz.2.3889': attribute type 2 has an invalid length. [ 473.146077][T20899] 8021q: adding VLAN 0 to HW filter on device bond9 [ 473.148804][T20899] bond8: (slave bond9): making interface the new active one [ 473.149368][T20899] bond8: (slave bond9): Enslaving as an active interface with an up link [ 473.665290][T20926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3897'. [ 473.688231][T20930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3901'. [ 473.750081][T20919] 8021q: adding VLAN 0 to HW filter on device bond14 [ 473.909298][T20928] syzkaller0: entered promiscuous mode [ 473.909327][T20928] syzkaller0: entered allmulticast mode [ 474.099913][T20954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.180699][T20957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.376478][T20961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.442576][T20962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.524570][T17442] net_ratelimit: 14 callbacks suppressed [ 475.524595][T17442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.524841][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.582516][T12778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.572259][T17442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.574125][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.683080][T12776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.236238][T20976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3909'. [ 477.529226][T20987] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3913'. [ 477.592588][T20966] bond10: entered promiscuous mode [ 477.593081][T20966] 8021q: adding VLAN 0 to HW filter on device bond10 [ 477.593791][T20976] bond10: entered allmulticast mode [ 477.602355][T17442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.602590][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.657914][T20984] bond10: (slave bridge5): making interface the new active one [ 477.657940][T20984] bridge5: entered promiscuous mode [ 477.658131][T20984] bridge5: entered allmulticast mode [ 477.660369][T20984] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 477.700703][ T192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.720091][T20991] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3912'. [ 477.818602][T12778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.866708][T21001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3918'. [ 477.870309][T21001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3918'. [ 478.021185][T21011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3919'. [ 478.028639][T21007] validate_nla: 15 callbacks suppressed [ 478.028661][T21007] netlink: 'syz.2.3920': attribute type 1 has an invalid length. [ 478.045307][T21003] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3917'. [ 478.114336][T21007] bond15: entered promiscuous mode [ 478.114920][T21007] 8021q: adding VLAN 0 to HW filter on device bond15 [ 478.146274][T21008] netlink: 'syz.2.3920': attribute type 1 has an invalid length. [ 478.146300][T21008] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3920'. [ 478.148203][T21007] netlink: 'syz.2.3920': attribute type 1 has an invalid length. [ 478.148224][T21007] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3920'. [ 478.196329][T21007] 8021q: adding VLAN 0 to HW filter on device bond15 [ 478.196735][T21007] bond15: (slave xfrm1): The slave device specified does not support setting the MAC address [ 478.196754][T21007] bond15: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 478.236801][T21007] bond15: (slave xfrm1): making interface the new active one [ 478.236829][T21007] xfrm1: entered promiscuous mode [ 478.266697][T21007] xfrm1: left promiscuous mode [ 478.344979][T21008] bond15: (slave xfrm1): The slave device specified does not support setting the MAC address [ 478.348348][T21008] bond15: (slave xfrm1): making interface the new active one [ 478.648129][T21031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3927'. [ 478.648378][T21031] veth0_to_bond: entered allmulticast mode [ 478.689353][T21033] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 478.689375][T21033] IPv6: NLM_F_CREATE should be set when creating new route [ 478.690041][T21031] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3927'. [ 478.727409][T21037] netlink: 'syz.4.3930': attribute type 1 has an invalid length. [ 478.867833][T21048] x_tables: duplicate underflow at hook 1 [ 478.926059][T21037] bond11: entered promiscuous mode [ 478.926970][T21037] 8021q: adding VLAN 0 to HW filter on device bond11 [ 478.929107][T21041] bond11: entered allmulticast mode [ 479.030640][T21037] bond11: (slave bridge6): making interface the new active one [ 479.030680][T21037] bridge6: entered promiscuous mode [ 479.030894][T21037] bridge6: entered allmulticast mode [ 479.046475][T21037] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 479.556545][T21074] netlink: 'syz.3.3939': attribute type 2 has an invalid length. [ 479.556573][T21074] netlink: 'syz.3.3939': attribute type 2 has an invalid length. [ 480.074302][T21103] vlan0: entered promiscuous mode [ 480.074544][T21103] vlan0: entered allmulticast mode [ 480.074560][T21103] veth0_vlan: entered allmulticast mode [ 480.485752][T21111] vlan3: entered promiscuous mode [ 480.485778][T21111] gretap0: entered promiscuous mode [ 480.723389][ T10] net_ratelimit: 10 callbacks suppressed [ 480.723413][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.726293][T17440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.726529][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.147951][T21135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.186889][T21136] sctp: [Deprecated]: syz.1.3954 (pid 21136) Use of struct sctp_assoc_value in delayed_ack socket option. [ 481.186889][T21136] Use struct sctp_sack_info instead [ 481.213624][T12766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.358221][T21142] netlink: 'syz.4.3958': attribute type 1 has an invalid length. [ 481.433146][T21144] sctp: [Deprecated]: syz.1.3959 (pid 21144) Use of int in maxseg socket option. [ 481.433146][T21144] Use struct sctp_assoc_value instead [ 481.615668][T21149] netlink: 'syz.1.3962': attribute type 1 has an invalid length. [ 481.762117][T17442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.762367][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.146978][T21176] netlink: 'syz.1.3967': attribute type 16 has an invalid length. [ 482.334787][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.709434][T21203] x_tables: duplicate underflow at hook 1 [ 482.722788][T21199] netlink: 'syz.4.3977': attribute type 1 has an invalid length. [ 482.722831][T21199] __nla_validate_parse: 11 callbacks suppressed [ 482.722844][T21199] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3977'. [ 482.804596][T17442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.804885][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.919896][T21214] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3983'. [ 483.003732][T21217] syz_tun: entered allmulticast mode [ 483.065025][T21217] dvmrp8: entered allmulticast mode [ 483.431870][T21216] syz_tun: left allmulticast mode [ 483.434735][T21225] netlink: 'syz.4.3989': attribute type 2 has an invalid length. [ 483.435089][T21232] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 483.444863][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.659617][T21244] bond0: (slave ip6tnl0): refused to change device type [ 483.664867][T21244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3995'. [ 483.799505][T21250] xt_cgroup: no path or classid specified [ 483.893912][T21254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3998'. [ 483.900237][T21254] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3998'. [ 483.900335][T21254] nbd: couldn't find a device at index 65553 [ 483.900521][T21257] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3998'. [ 483.900540][T21257] nbd: couldn't find a device at index 65553 [ 484.298428][T21272] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4003'. [ 484.462982][T21278] netlink: 'syz.3.4005': attribute type 4 has an invalid length. [ 484.654008][T21287] netlink: 'syz.3.4009': attribute type 1 has an invalid length. [ 484.728141][T21289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4009'. [ 484.747789][T21287] bond7: entered promiscuous mode [ 484.748332][T21287] 8021q: adding VLAN 0 to HW filter on device bond7 [ 484.750769][T21289] bond7: entered allmulticast mode [ 484.870361][T21287] bond7: (slave bridge5): making interface the new active one [ 484.875122][T21287] bridge5: entered promiscuous mode [ 484.875357][T21287] bridge5: entered allmulticast mode [ 484.924081][T21287] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 485.214036][T21308] netlink: 'syz.0.4014': attribute type 21 has an invalid length. [ 485.238236][T21308] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4014'. [ 485.396487][T21313] netlink: 'syz.4.4015': attribute type 11 has an invalid length. [ 485.396513][T21313] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4015'. [ 485.789712][T21334] netlink: 'syz.3.4023': attribute type 1 has an invalid length. [ 485.836418][T21335] netlink: 'syz.2.4019': attribute type 1 has an invalid length. [ 485.836444][T21335] netlink: 'syz.2.4019': attribute type 4 has an invalid length. [ 485.838802][T21327] team0: Port device team_slave_0 removed [ 485.850868][T12776] net_ratelimit: 29 callbacks suppressed [ 485.850886][T12776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.851108][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.923203][T17442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.923517][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.998730][T21348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.998985][T21348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.001128][T21348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.034762][T21347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.034986][T21347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.116042][T21334] bond8: entered promiscuous mode [ 486.116589][T21334] 8021q: adding VLAN 0 to HW filter on device bond8 [ 486.119225][T21336] bond8: entered allmulticast mode [ 486.166352][T21350] bond8: (slave bridge6): making interface the new active one [ 486.166379][T21350] bridge6: entered promiscuous mode [ 486.166608][T21350] bridge6: entered allmulticast mode [ 486.167895][T21350] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 486.225171][T21352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.135865][T21414] ipvlan0: entered promiscuous mode [ 487.135894][T21414] ipvlan0: entered allmulticast mode [ 487.135908][T21414] veth0_vlan: entered allmulticast mode [ 487.181011][T21416] sctp: [Deprecated]: syz.3.4040 (pid 21416) Use of int in max_burst socket option. [ 487.181011][T21416] Use struct sctp_assoc_value instead [ 487.727093][T21429] FAULT_INJECTION: forcing a failure. [ 487.727093][T21429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.727129][T21429] CPU: 0 UID: 0 PID: 21429 Comm: syz.3.4047 Not tainted syzkaller #0 PREEMPT(full) [ 487.727152][T21429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 487.727164][T21429] Call Trace: [ 487.727172][T21429] [ 487.727182][T21429] dump_stack_lvl+0xe8/0x150 [ 487.727294][T21429] should_fail_ex+0x410/0x560 [ 487.727424][T21429] _copy_from_iter+0x1d3/0x1660 [ 487.727496][T21429] ? __alloc_skb+0x27a/0x7a0 [ 487.727597][T21429] ? __alloc_skb+0x27a/0x7a0 [ 487.727622][T21429] ? __alloc_skb+0x27a/0x7a0 [ 487.727646][T21429] ? __pfx__copy_from_iter+0x10/0x10 [ 487.727667][T21429] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 487.727733][T21429] ? __alloc_skb+0x27a/0x7a0 [ 487.727753][T21429] ? __alloc_skb+0x27a/0x7a0 [ 487.727781][T21429] ? netlink_sendmsg+0x650/0xb40 [ 487.727874][T21429] ? skb_put+0x112/0x210 [ 487.727901][T21429] netlink_sendmsg+0x6c0/0xb40 [ 487.727941][T21429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.727980][T21429] ? apparmor_socket_sendmsg+0x98/0x360 [ 487.728044][T21429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.728072][T21429] sock_sendmsg_nosec+0x13a/0x180 [ 487.728118][T21429] ____sys_sendmsg+0x54e/0x850 [ 487.728150][T21429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.728186][T21429] ? import_iovec+0x73/0xa0 [ 487.728214][T21429] ___sys_sendmsg+0x2a5/0x360 [ 487.728240][T21429] ? __lock_acquire+0x747/0x2de0 [ 487.728291][T21429] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.728356][T21429] ? __fget_files+0x2a/0x420 [ 487.728396][T21429] ? __fget_files+0x3a2/0x420 [ 487.728434][T21429] __x64_sys_sendmsg+0x1b1/0x290 [ 487.728463][T21429] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 487.728510][T21429] do_syscall_64+0x166/0x520 [ 487.728617][T21429] ? trace_irq_disable+0x3b/0x140 [ 487.728664][T21429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.728705][T21429] ? clear_bhb_loop+0x70/0xc0 [ 487.728731][T21429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.728752][T21429] RIP: 0033:0x7f129d99e159 [ 487.728772][T21429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.728789][T21429] RSP: 002b:00007f129e828028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.728812][T21429] RAX: ffffffffffffffda RBX: 00007f129dc25fa0 RCX: 00007f129d99e159 [ 487.728853][T21429] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 487.728867][T21429] RBP: 00007f129e828090 R08: 0000000000000000 R09: 0000000000000000 [ 487.728879][T21429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.728890][T21429] R13: 00007f129dc26038 R14: 00007f129dc25fa0 R15: 00007fff9c58b0c8 [ 487.728921][T21429] [ 488.026066][T21434] __nla_validate_parse: 14 callbacks suppressed [ 488.026090][T21434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4050'. [ 488.026117][T21434] netlink: 'syz.3.4050': attribute type 10 has an invalid length. [ 488.026131][T21434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4050'. [ 488.100169][T21434] geneve4: entered promiscuous mode [ 488.100205][T21434] geneve4: entered allmulticast mode [ 488.650865][T21465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4056'. [ 488.650894][T21465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4056'. [ 488.725954][T21465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4056'. [ 488.825811][T21465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4056'. [ 488.969101][T21473] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 488.996876][T21477] FAULT_INJECTION: forcing a failure. [ 488.996876][T21477] name failslab, interval 1, probability 0, space 0, times 0 [ 488.996912][T21477] CPU: 0 UID: 0 PID: 21477 Comm: syz.3.4060 Not tainted syzkaller #0 PREEMPT(full) [ 488.996935][T21477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 488.996946][T21477] Call Trace: [ 488.996954][T21477] [ 488.996964][T21477] dump_stack_lvl+0xe8/0x150 [ 488.997000][T21477] should_fail_ex+0x410/0x560 [ 488.997029][T21477] should_failslab+0xa8/0x100 [ 488.997054][T21477] ? skb_clone+0x212/0x3a0 [ 488.997148][T21477] kmem_cache_alloc_noprof+0xa1/0x600 [ 488.997182][T21477] ? skb_clone+0x212/0x3a0 [ 488.997216][T21477] skb_clone+0x212/0x3a0 [ 488.997246][T21477] __netlink_deliver_tap+0x413/0x860 [ 488.997290][T21477] ? netlink_deliver_tap+0x2e/0x1b0 [ 488.997320][T21477] netlink_deliver_tap+0x19c/0x1b0 [ 488.997349][T21477] netlink_unicast+0x781/0x940 [ 488.997401][T21477] netlink_sendmsg+0x813/0xb40 [ 488.997439][T21477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.997478][T21477] ? apparmor_socket_sendmsg+0x98/0x360 [ 488.997509][T21477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.997536][T21477] sock_sendmsg_nosec+0x13a/0x180 [ 488.997561][T21477] ____sys_sendmsg+0x54e/0x850 [ 488.997593][T21477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.997630][T21477] ? import_iovec+0x73/0xa0 [ 488.997660][T21477] ___sys_sendmsg+0x2a5/0x360 [ 488.997685][T21477] ? __lock_acquire+0x747/0x2de0 [ 488.997712][T21477] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.997789][T21477] ? __fget_files+0x2a/0x420 [ 488.997815][T21477] ? __fget_files+0x3a2/0x420 [ 488.997854][T21477] __x64_sys_sendmsg+0x1b1/0x290 [ 488.997883][T21477] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 488.997936][T21477] do_syscall_64+0x166/0x520 [ 488.997960][T21477] ? trace_irq_disable+0x3b/0x140 [ 488.997979][T21477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.997999][T21477] ? clear_bhb_loop+0x70/0xc0 [ 488.998025][T21477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.998044][T21477] RIP: 0033:0x7f129d99e159 [ 488.998064][T21477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.998080][T21477] RSP: 002b:00007f129e828028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.998104][T21477] RAX: ffffffffffffffda RBX: 00007f129dc25fa0 RCX: 00007f129d99e159 [ 488.998118][T21477] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 488.998131][T21477] RBP: 00007f129e828090 R08: 0000000000000000 R09: 0000000000000000 [ 488.998143][T21477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.998155][T21477] R13: 00007f129dc26038 R14: 00007f129dc25fa0 R15: 00007fff9c58b0c8 [ 488.998189][T21477] [ 489.557491][T21494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4065'. [ 489.577558][T21493] sctp: [Deprecated]: syz.3.4064 (pid 21493) Use of struct sctp_assoc_value in delayed_ack socket option. [ 489.577558][T21493] Use struct sctp_sack_info instead [ 489.587701][T21493] netlink: 'syz.3.4064': attribute type 26 has an invalid length. [ 490.210490][T21517] FAULT_INJECTION: forcing a failure. [ 490.210490][T21517] name failslab, interval 1, probability 0, space 0, times 0 [ 490.210528][T21517] CPU: 0 UID: 0 PID: 21517 Comm: syz.4.4072 Not tainted syzkaller #0 PREEMPT(full) [ 490.210551][T21517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 490.210562][T21517] Call Trace: [ 490.210571][T21517] [ 490.210580][T21517] dump_stack_lvl+0xe8/0x150 [ 490.210616][T21517] should_fail_ex+0x410/0x560 [ 490.210644][T21517] ? __alloc_skb+0x1db/0x7a0 [ 490.210668][T21517] should_failslab+0xa8/0x100 [ 490.210695][T21517] ? __alloc_skb+0x1db/0x7a0 [ 490.210716][T21517] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 490.210746][T21517] ? __alloc_skb+0x18d/0x7a0 [ 490.210770][T21517] ? __alloc_skb+0x1db/0x7a0 [ 490.210801][T21517] __alloc_skb+0x1db/0x7a0 [ 490.210829][T21517] netlink_ack+0x136/0xb30 [ 490.210887][T21517] netlink_rcv_skb+0x2a4/0x4a0 [ 490.210918][T21517] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 490.211007][T21517] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 490.211055][T21517] ? bpf_lsm_capable+0x9/0x20 [ 490.211096][T21517] ? security_capable+0x7e/0x2c0 [ 490.211153][T21517] nfnetlink_rcv+0x2b9/0x28c0 [ 490.211190][T21517] ? __dev_queue_xmit+0x29b/0x3820 [ 490.211261][T21517] ? __local_bh_enable_ip+0xd6/0x140 [ 490.211304][T21517] ? lockdep_hardirqs_on+0x7b/0x110 [ 490.211350][T21517] ? __dev_queue_xmit+0x29b/0x3820 [ 490.211375][T21517] ? __local_bh_enable_ip+0xd6/0x140 [ 490.211397][T21517] ? __dev_queue_xmit+0x29b/0x3820 [ 490.211421][T21517] ? __dev_queue_xmit+0x1edc/0x3820 [ 490.211445][T21517] ? do_syscall_64+0x166/0x520 [ 490.211466][T21517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.211499][T21517] ? __dev_queue_xmit+0x29b/0x3820 [ 490.211527][T21517] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 490.211559][T21517] ? __pfx___dev_queue_xmit+0x10/0x10 [ 490.211594][T21517] ? ref_tracker_free+0x689/0x830 [ 490.211652][T21517] ? __pfx_ref_tracker_free+0x10/0x10 [ 490.211685][T21517] ? __skb_clone+0x449/0x6c0 [ 490.211717][T21517] ? skb_clone+0x246/0x3a0 [ 490.211745][T21517] ? __netlink_deliver_tap+0x811/0x860 [ 490.211774][T21517] ? netlink_deliver_tap+0x2e/0x1b0 [ 490.211810][T21517] ? netlink_deliver_tap+0x2e/0x1b0 [ 490.211837][T21517] ? netlink_deliver_tap+0x2e/0x1b0 [ 490.211891][T21517] netlink_unicast+0x7bd/0x940 [ 490.211927][T21517] netlink_sendmsg+0x813/0xb40 [ 490.211966][T21517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.212004][T21517] ? apparmor_socket_sendmsg+0x98/0x360 [ 490.212027][T21517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.212053][T21517] sock_sendmsg_nosec+0x13a/0x180 [ 490.212076][T21517] ____sys_sendmsg+0x54e/0x850 [ 490.212106][T21517] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.212141][T21517] ? import_iovec+0x73/0xa0 [ 490.212169][T21517] ___sys_sendmsg+0x2a5/0x360 [ 490.212195][T21517] ? __lock_acquire+0x747/0x2de0 [ 490.212221][T21517] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.212282][T21517] ? __fget_files+0x2a/0x420 [ 490.212308][T21517] ? __fget_files+0x3a2/0x420 [ 490.212345][T21517] __x64_sys_sendmsg+0x1b1/0x290 [ 490.212375][T21517] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 490.212419][T21517] do_syscall_64+0x166/0x520 [ 490.212440][T21517] ? trace_irq_disable+0x3b/0x140 [ 490.212458][T21517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.212477][T21517] ? clear_bhb_loop+0x70/0xc0 [ 490.212501][T21517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.212521][T21517] RIP: 0033:0x7f53c019e159 [ 490.212541][T21517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.212558][T21517] RSP: 002b:00007f53c1106028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.212581][T21517] RAX: ffffffffffffffda RBX: 00007f53c0425fa0 RCX: 00007f53c019e159 [ 490.212595][T21517] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 490.212607][T21517] RBP: 00007f53c1106090 R08: 0000000000000000 R09: 0000000000000000 [ 490.212619][T21517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.212631][T21517] R13: 00007f53c0426038 R14: 00007f53c0425fa0 R15: 00007ffdcd6eca48 [ 490.212664][T21517] [ 490.499863][T21523] netlink: 'syz.1.4074': attribute type 2 has an invalid length. [ 490.695678][T21523] : entered promiscuous mode [ 490.801212][T21525] gre0: entered promiscuous mode [ 490.801237][T21525] gre0: entered allmulticast mode [ 491.051578][ C0] net_ratelimit: 14 callbacks suppressed [ 491.051603][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.081542][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.122397][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.122670][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.245327][T21551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4086'. [ 491.287323][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.350395][T21556] netlink: 'syz.1.4088': attribute type 1 has an invalid length. [ 491.407452][T21560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4089'. [ 491.412626][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.418239][T21556] bond5: entered promiscuous mode [ 491.418804][T21556] 8021q: adding VLAN 0 to HW filter on device bond5 [ 491.443356][T21556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4088'. [ 491.443481][T21556] bond5: entered allmulticast mode [ 491.569081][T21556] bond5: (slave bridge2): making interface the new active one [ 491.569111][T21556] bridge2: entered promiscuous mode [ 491.569321][T21556] bridge2: entered allmulticast mode [ 491.590945][T21556] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 491.607406][T12763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.607656][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.163847][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.164105][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.438911][T21603] netlink: 'syz.4.4101': attribute type 1 has an invalid length. [ 492.588734][T21603] bond12: entered promiscuous mode [ 492.589262][T21603] 8021q: adding VLAN 0 to HW filter on device bond12 [ 492.615674][T21606] bond12: entered allmulticast mode [ 492.770325][T21603] bond12: (slave bridge7): making interface the new active one [ 492.770353][T21603] bridge7: entered promiscuous mode [ 492.770575][T21603] bridge7: entered allmulticast mode [ 492.807304][T21603] bond12: (slave bridge7): Enslaving as an active interface with an up link [ 492.910029][T21619] tipc: Started in network mode [ 492.910053][T21619] tipc: Node identity 4, cluster identity 4711 [ 492.910066][T21619] tipc: Node number set to 4 [ 493.382652][T21651] __nla_validate_parse: 6 callbacks suppressed [ 493.382677][T21651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4110'. [ 493.818049][T21664] dvmrp0: entered allmulticast mode [ 493.954794][T21672] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 493.957580][T21672] tipc: Enabled bearer , priority 10 [ 494.002241][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 494.007237][ T5620] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 494.054191][T21672] netlink: 'syz.1.4116': attribute type 10 has an invalid length. [ 494.190325][T21680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4117'. [ 494.546315][T21685] pim6reg: entered allmulticast mode [ 494.825483][T21697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4121'. [ 494.825622][T21697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.903953][T21697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.490949][T21725] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4130'. [ 495.516762][T21727] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4129'. [ 495.697581][T21743] netlink: 'syz.4.4133': attribute type 1 has an invalid length. [ 495.964324][T21756] netlink: 'syz.0.4137': attribute type 1 has an invalid length. [ 495.992608][T21743] 8021q: adding VLAN 0 to HW filter on device bond13 [ 496.080472][T21761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4137'. [ 496.207924][T21756] bond8: entered promiscuous mode [ 496.210898][T21756] 8021q: adding VLAN 0 to HW filter on device bond8 [ 496.226522][T21761] bond8: entered allmulticast mode [ 496.285690][T21772] Cannot find del_set index 3 as target [ 496.322993][ T5752] net_ratelimit: 18 callbacks suppressed [ 496.323017][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.323262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.378900][T21771] bond8: (slave bridge5): making interface the new active one [ 496.378927][T21771] bridge5: entered promiscuous mode [ 496.381140][T21771] bridge5: entered allmulticast mode [ 496.405795][T21771] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 496.725120][T21789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4143'. [ 496.833861][T21793] batadv_slave_0: entered promiscuous mode [ 496.837435][T21793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4145'. [ 496.863648][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.961649][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.204518][T12780] wlan1: Trigger new scan to find an IBSS to join [ 497.208761][T21806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4150'. [ 497.272517][T21807] netlink: 'syz.1.4149': attribute type 1 has an invalid length. [ 497.310703][T21810] netlink: 'syz.4.4153': attribute type 1 has an invalid length. [ 497.363823][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.364068][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.364094][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.364405][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.368259][T21807] 8021q: adding VLAN 0 to HW filter on device bond6 [ 497.368797][T21816] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4153'. [ 497.528188][T21819] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 497.580308][T21810] bond14: entered promiscuous mode [ 497.580658][T21810] 8021q: adding VLAN 0 to HW filter on device bond14 [ 497.682561][T21822] ip6t_srh: unknown srh invflags 4000 [ 497.707656][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803592cc00: rx timeout, send abort [ 497.710509][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803592cc00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 497.716652][T21822] geneve3: entered promiscuous mode [ 497.716673][T21822] geneve3: entered allmulticast mode [ 497.787847][T21826] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:19999 [ 497.863472][T21385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.196692][T21846] netlink: 'syz.0.4162': attribute type 1 has an invalid length. [ 498.228626][T21846] 8021q: adding VLAN 0 to HW filter on device bond9 [ 498.243250][T21846] bond9: (slave veth0_to_bond): making interface the new active one [ 498.245011][T21846] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 498.284467][T21851] netlink: 'syz.4.4161': attribute type 1 has an invalid length. [ 498.284523][T21851] netlink: 'syz.4.4161': attribute type 268 has an invalid length. [ 498.294741][T21846] bond9: entered promiscuous mode [ 498.294762][T21846] veth0_to_bond: entered promiscuous mode [ 498.294972][T21846] bond9: entered allmulticast mode [ 498.294985][T21846] veth0_to_bond: entered allmulticast mode [ 498.512022][T21864] __nla_validate_parse: 1 callbacks suppressed [ 498.512046][T21864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4165'. [ 498.564530][T21855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4163'. [ 498.608380][T21866] netlink: 'syz.0.4166': attribute type 1 has an invalid length. [ 498.678818][T21870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4166'. [ 498.707814][T21866] bond10: entered promiscuous mode [ 498.708462][T21866] 8021q: adding VLAN 0 to HW filter on device bond10 [ 498.715353][T21870] bond10: entered allmulticast mode [ 498.806064][ T5629] Bluetooth: hci5: command 0x0406 tx timeout [ 498.806161][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout [ 498.826431][T21866] bond10: (slave bridge6): making interface the new active one [ 498.826459][T21866] bridge6: entered promiscuous mode [ 498.826816][T21866] bridge6: entered allmulticast mode [ 498.834693][T21866] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 499.448789][T21902] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4170'. [ 499.677015][T21916] xt_l2tp: v2 doesn't support IP mode [ 499.726238][T21921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4175'. [ 499.746999][T21921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4175'. [ 499.962045][T21921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4175'. [ 500.019190][T21931] xt_limit: Overflow, try lower: 536871034/127 [ 500.145233][T21935] netlink: 'syz.2.4177': attribute type 1 has an invalid length. [ 500.200353][T21939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4178'. [ 500.243647][T12762] wlan1: Trigger new scan to find an IBSS to join [ 500.545792][T21957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4185'. [ 500.545830][T21957] netlink: 'syz.4.4185': attribute type 10 has an invalid length. [ 500.545846][T21957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4185'. [ 500.642048][T12773] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.642149][T12773] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.642813][T12773] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.642990][T12773] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.880010][T21963] syzkaller0: entered promiscuous mode [ 500.880036][T21963] syzkaller0: entered allmulticast mode [ 501.395338][T22002] validate_nla: 2 callbacks suppressed [ 501.395363][T22002] netlink: 'syz.1.4198': attribute type 1 has an invalid length. [ 501.509017][T22002] 8021q: adding VLAN 0 to HW filter on device bond7 [ 501.522453][ T5812] net_ratelimit: 15 callbacks suppressed [ 501.522474][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.522706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.569259][T22007] ip6erspan0: entered allmulticast mode [ 501.710032][T22015] netlink: zone id is out of range [ 501.710053][T22015] netlink: del zone limit has 4 unknown bytes [ 501.849719][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.945925][T22028] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 501.945945][T22028] IPv6: NLM_F_CREATE should be set when creating new route [ 501.951698][T22026] netlink: 'syz.3.4207': attribute type 21 has an invalid length. [ 502.161611][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.427122][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.449438][T22050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.450188][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.529577][T22054] pimreg: entered allmulticast mode [ 502.570141][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.570530][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.640808][T22045] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64 [ 503.306261][T12762] wlan1: Trigger new scan to find an IBSS to join [ 503.598260][T22094] netlink: 'syz.0.4229': attribute type 1 has an invalid length. [ 503.678609][T22094] 8021q: adding VLAN 0 to HW filter on device bond11 [ 503.838511][T22110] __nla_validate_parse: 11 callbacks suppressed [ 503.838536][T22110] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4232'. [ 503.838571][T22110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4232'. [ 503.838587][T22110] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4232'. [ 504.050095][T22117] netlink: 45 bytes leftover after parsing attributes in process `syz.0.4233'. [ 504.226475][T22132] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4237'. [ 504.268177][T22123] bond9: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 504.292597][T22123] bond9 (unregistering): Released all slaves [ 504.320156][T12751] wlan1: Creating new IBSS network, BSSID 2a:ed:df:85:35:4f [ 504.387240][T22135] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4238'. [ 504.497614][T22145] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4241'. [ 504.596869][T22147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4242'. [ 504.599892][T22143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.622457][T22119] wg1 speed is unknown, defaulting to 1000 [ 504.686120][T22149] netlink: 'syz.3.4243': attribute type 1 has an invalid length. [ 504.806681][T22149] 8021q: adding VLAN 0 to HW filter on device bond9 [ 504.818134][T22153] sctp: [Deprecated]: syz.0.4244 (pid 22153) Use of struct sctp_assoc_value in delayed_ack socket option. [ 504.818134][T22153] Use struct sctp_sack_info instead [ 505.271694][T22171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4250'. [ 505.350775][T22176] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 505.416680][T22171] bond16: entered promiscuous mode [ 505.417301][T22171] 8021q: adding VLAN 0 to HW filter on device bond16 [ 505.523538][T22180] 8021q: adding VLAN 0 to HW filter on device bond16 [ 505.531947][T22180] bond16: (slave sit1): The slave device specified does not support setting the MAC address [ 505.550517][T22180] bond16: (slave sit1): Error -95 calling set_mac_address [ 505.807358][T22190] netlink: 'syz.1.4255': attribute type 11 has an invalid length. [ 506.040887][T22201] netlink: 'syz.0.4258': attribute type 1 has an invalid length. [ 506.106639][T22208] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4259'. [ 506.177433][T22203] netlink: 'syz.3.4259': attribute type 21 has an invalid length. [ 506.363994][T22201] 8021q: adding VLAN 0 to HW filter on device bond12 [ 506.364631][T22207] bond0: (slave bond_slave_1): Device is not our slave [ 506.364655][T22207] bond0: option active_slave: invalid value (bond_slave_1) [ 506.366119][T22203] netlink: 'syz.3.4259': attribute type 1 has an invalid length. [ 506.860027][T22234] netlink: 'syz.4.4267': attribute type 1 has an invalid length. [ 506.987201][T22234] bond15: entered promiscuous mode [ 506.989943][T22234] 8021q: adding VLAN 0 to HW filter on device bond15 [ 506.990844][T22236] bond15: entered allmulticast mode [ 507.137023][T22234] bond15: (slave bridge9): making interface the new active one [ 507.137053][T22234] bridge9: entered promiscuous mode [ 507.140111][T22234] bridge9: entered allmulticast mode [ 507.196360][T22234] bond15: (slave bridge9): Enslaving as an active interface with an up link [ 507.233716][T22249] netlink: 'syz.2.4273': attribute type 1 has an invalid length. [ 507.393201][T22249] 8021q: adding VLAN 0 to HW filter on device bond17 [ 507.528850][T22263] hsr_slave_0: left promiscuous mode [ 507.545282][T22263] hsr_slave_1: left promiscuous mode [ 507.616184][T22270] IPVS: set_ctl: invalid protocol: 102 103.0.0.0:21 [ 508.063675][T22285] netlink: 'syz.2.4284': attribute type 1 has an invalid length. [ 508.165261][ T5627] Bluetooth: hci3: command 0x0405 tx timeout [ 508.247060][T22285] bond18: entered promiscuous mode [ 508.249825][T22285] 8021q: adding VLAN 0 to HW filter on device bond18 [ 508.268410][T22294] bond18: entered allmulticast mode [ 508.337329][T22303] bond18: (slave bridge4): making interface the new active one [ 508.337358][T22303] bridge4: entered promiscuous mode [ 508.337542][T22303] bridge4: entered allmulticast mode [ 508.339031][T22303] bond18: (slave bridge4): Enslaving as an active interface with an up link [ 508.766848][T22312] net_ratelimit: 5 callbacks suppressed [ 508.766873][T22312] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 508.888648][T22312] __nla_validate_parse: 11 callbacks suppressed [ 508.888671][T22312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4290'. [ 509.207862][T22341] ip6t_hbh: too many supported opts specified [ 509.529885][T22355] netlink: 'syz.3.4302': attribute type 1 has an invalid length. [ 509.697384][T22360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4302'. [ 509.780244][T22355] bond10: entered promiscuous mode [ 509.780753][T22355] 8021q: adding VLAN 0 to HW filter on device bond10 [ 509.790866][T22360] bond10: entered allmulticast mode [ 509.846248][T22355] bond10: (slave bridge7): making interface the new active one [ 509.846275][T22355] bridge7: entered promiscuous mode [ 509.846461][T22355] bridge7: entered allmulticast mode [ 509.847748][T22355] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 509.975199][T22371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4306'. [ 509.976542][T22371] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4306'. [ 510.091803][T22373] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4304'. [ 510.201834][T22373] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4304'. [ 510.342637][T22380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4307'. [ 510.420655][T22387] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 510.917065][T12778] IPVS: starting estimator thread 0... [ 510.928501][T22402] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4313'. [ 511.012433][T22403] IPVS: using max 25 ests per chain, 60000 per kthread [ 511.015947][T22410] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4313'. [ 511.055283][T22409] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 511.080901][T22414] netlink: NAT attribute has 8 unknown bytes [ 511.080941][T22414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.159753][T22407] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4314'. [ 511.487587][T22422] netlink: 'syz.3.4317': attribute type 1 has an invalid length. [ 511.583403][T22422] bond11: entered promiscuous mode [ 511.583924][T22422] 8021q: adding VLAN 0 to HW filter on device bond11 [ 511.588017][T22422] bond11: entered allmulticast mode [ 511.604204][T22422] bond11: (slave bridge8): making interface the new active one [ 511.604230][T22422] bridge8: entered promiscuous mode [ 511.604413][T22422] bridge8: entered allmulticast mode [ 511.605343][T22422] bond11: (slave bridge8): Enslaving as an active interface with an up link [ 511.722527][T22389] xt_CT: You must specify a L4 protocol and not use inversions on it [ 512.052148][T22446] macsec1: entered promiscuous mode [ 512.052177][T22446] bridge0: entered promiscuous mode [ 512.052434][T22446] macsec1: entered allmulticast mode [ 512.052449][T22446] bridge0: entered allmulticast mode [ 514.487824][T22425] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 514.857709][T22476] nbd: must specify a device to reconfigure [ 514.957808][T22485] __nla_validate_parse: 3 callbacks suppressed [ 514.957833][T22485] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4332'. [ 514.957851][T22485] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4332'. [ 514.957900][T22485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4332'. [ 515.004356][T22485] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.004377][T22485] IPv6: NLM_F_CREATE should be set when creating new route [ 515.004411][T22485] IPv6: NLM_F_CREATE should be set when creating new route [ 515.746315][T22518] netlink: 'syz.3.4341': attribute type 16 has an invalid length. [ 515.746342][T22518] netlink: 'syz.3.4341': attribute type 3 has an invalid length. [ 515.746355][T22518] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4341'. [ 515.929752][T22526] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4344'. [ 516.094141][T22534] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4344'. [ 516.455014][T22551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.506046][T22556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4352'. [ 516.506077][T22556] block nbd4: Unsupported socket: should be TCP or UNIX. [ 516.706759][T22566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4355'. [ 516.706807][T22566] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4355'. [ 516.835972][T22569] netlink: 'syz.4.4357': attribute type 13 has an invalid length. [ 516.842768][T22571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4356'. [ 516.994317][T22575] openvswitch: netlink: Message has 8 unknown bytes. [ 517.158405][T22577] syzkaller0: entered promiscuous mode [ 517.158431][T22577] syzkaller0: entered allmulticast mode [ 517.541243][T22596] netlink: 'syz.1.4367': attribute type 1 has an invalid length. [ 517.571199][T22597] netlink: 'syz.3.4366': attribute type 4 has an invalid length. [ 517.605034][T22597] netlink: 'syz.3.4366': attribute type 4 has an invalid length. [ 517.607341][T22602] netlink: 'syz.1.4367': attribute type 1 has an invalid length. [ 517.760873][T22614] netlink: 'syz.3.4370': attribute type 5 has an invalid length. [ 517.807056][T22614] geneve4: entered promiscuous mode [ 517.807084][T22614] geneve4: entered allmulticast mode [ 517.845830][T12763] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 517.846621][T12763] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 517.847580][T12763] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 517.847944][T12779] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 517.997986][ T59] IPVS: starting estimator thread 0... [ 518.081615][T22631] IPVS: using max 25 ests per chain, 60000 per kthread [ 518.378224][T22632] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 519.184805][T22688] netlink: 'syz.2.4386': attribute type 5 has an invalid length. [ 519.289692][ T5627] Bluetooth: hci4: command 0x0406 tx timeout [ 519.303739][T22688] geneve4: entered promiscuous mode [ 519.303796][T22688] geneve4: entered allmulticast mode [ 519.320462][T12763] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 519.320511][T12763] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 519.339481][T12763] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 519.339530][T12763] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 519.826134][T22657] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 520.207755][ T5279] veth1_vlan: left promiscuous mode [ 520.236978][T22721] __nla_validate_parse: 19 callbacks suppressed [ 520.237003][T22721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4391'. [ 520.309002][T22721] batman_adv: batadv0: Adding interface: syzkaller0 [ 520.309024][T22721] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.309058][T22721] batman_adv: batadv0: Interface activated: syzkaller0 [ 520.399285][T22719] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 520.509588][T22719] batman_adv: batadv0: Removing interface: syzkaller0 [ 520.523329][T22729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4393'. [ 520.579408][T22732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4395'. [ 520.667365][T22736] netlink: 'syz.3.4396': attribute type 83 has an invalid length. [ 520.753547][T22738] netlink: 'syz.3.4397': attribute type 2 has an invalid length. [ 521.177448][T22759] netlink: 'syz.3.4403': attribute type 9 has an invalid length. [ 521.177472][T22759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4403'. [ 521.237369][T22764] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4403'. [ 521.907416][T22786] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4406'. [ 521.944010][T22786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4406'. [ 521.949376][T22789] bond_slave_0: mtu less than device minimum [ 522.754953][T22815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.795415][T22815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.799882][T22813] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 522.800008][T22813] syzkaller1: linktype set to 823 [ 522.875551][T22815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4413'. [ 522.875578][T22815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4413'. [ 523.045549][T22826] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4415'. [ 524.226349][T22872] netlink: 'syz.3.4428': attribute type 1 has an invalid length. [ 524.398993][T22875] netlink: 'syz.4.4429': attribute type 5 has an invalid length. [ 524.444444][T22884] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 524.558810][T22887] netlink: 'syz.2.4433': attribute type 3 has an invalid length. [ 524.558834][T22887] netlink: 'syz.2.4433': attribute type 4 has an invalid length. [ 524.848055][T22900] syzkaller0: entered promiscuous mode [ 524.848415][T22900] syzkaller0: entered allmulticast mode [ 525.480965][T22918] __nla_validate_parse: 2 callbacks suppressed [ 525.480987][T22918] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4439'. [ 525.481010][T22918] nbd: nbd64 already in use [ 525.688236][ T5632] udevd[5632]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 529.132798][T22910] netlink: 'syz.4.4439': attribute type 4 has an invalid length. [ 529.534889][T22959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.707213][T22967] batman_adv: batadv0: Adding interface: macvtap1 [ 529.707235][T22967] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.707263][T22967] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 529.819056][T22964] netlink: 'syz.4.4449': attribute type 1 has an invalid length. [ 529.905951][T22980] netlink: 5176 bytes leftover after parsing attributes in process `syz.2.4453'. [ 530.053955][T22988] xt_hashlimit: size too large, truncated to 1048576 [ 530.076683][T22988] xt_hashlimit: size too large, truncated to 1048576 [ 530.155552][T22993] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4455'. [ 530.157525][T22993] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4455'. [ 530.548699][T23010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4460'. [ 530.548812][T23003] netlink: 'syz.4.4460': attribute type 1 has an invalid length. [ 530.548830][T23003] netlink: 'syz.4.4460': attribute type 2 has an invalid length. [ 532.502236][T23102] netlink: 'syz.2.4487': attribute type 9 has an invalid length. [ 532.550717][T23109] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4491'. [ 532.550750][T23109] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4491'. [ 532.559021][T23107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4489'. [ 532.568195][T23107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4489'. [ 532.583456][T23107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4489'. [ 532.589516][T23107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4489'. [ 532.601455][T23107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4489'. [ 532.637241][T23107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4489'. [ 532.647688][T23107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4489'. [ 533.233186][T23131] gretap0: entered promiscuous mode [ 533.241247][T23134] IPv6: NLM_F_CREATE should be specified when creating new route [ 533.254911][T23135] 0ªî{X¹¦: renamed from gretap0 [ 533.286856][T23135] 0ªî{X¹¦: left promiscuous mode [ 533.286883][T23135] 0ªî{X¹¦: entered allmulticast mode [ 533.300487][T23124] netlink: Failed to add helper -22 [ 533.300543][T23124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.318632][T23135] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 533.321730][T23124] netlink: 'syz.0.4496': attribute type 1 has an invalid length. [ 533.426869][T23124] bond13: entered promiscuous mode [ 533.427587][T23124] 8021q: adding VLAN 0 to HW filter on device bond13 [ 533.572374][T23149] netlink: 'syz.2.4499': attribute type 1 has an invalid length. [ 533.658366][T23124] bond13: (slave bridge7): making interface the new active one [ 533.658396][T23124] bridge7: entered promiscuous mode [ 533.676135][T23124] bond13: (slave bridge7): Enslaving as an active interface with an up link [ 533.797650][T23149] 8021q: adding VLAN 0 to HW filter on device bond19 [ 534.826414][T23185] sctp: [Deprecated]: syz.2.4506 (pid 23185) Use of struct sctp_assoc_value in delayed_ack socket option. [ 534.826414][T23185] Use struct sctp_sack_info instead [ 535.499937][T23201] netlink: 'syz.4.4511': attribute type 23 has an invalid length. [ 535.630683][T23194] netlink: 'syz.1.4510': attribute type 64 has an invalid length. [ 535.708555][T23209] netlink: 'syz.3.4514': attribute type 1 has an invalid length. [ 535.797683][T23209] 8021q: adding VLAN 0 to HW filter on device bond12 [ 535.938787][T23217] __nla_validate_parse: 61 callbacks suppressed [ 535.963424][T23217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4516'. [ 535.965733][T23217] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.4516'. [ 535.965925][T23217] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 536.024818][T23217] 0ªX¹¦Dö»: entered allmulticast mode [ 536.167098][T23220] netlink: 'syz.2.4515': attribute type 5 has an invalid length. [ 536.167148][T23220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4515'. [ 536.398569][T23234] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4520'. [ 536.823031][T23248] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4524'. [ 536.848109][T23246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4523'. [ 537.311733][T23276] netlink: 'syz.0.4528': attribute type 1 has an invalid length. [ 537.516269][T23276] 8021q: adding VLAN 0 to HW filter on device bond14 [ 537.875175][T23267] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4527'. [ 537.875240][T23267] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4527'. [ 537.875260][T23267] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4527'. [ 538.076144][T23306] syzkaller0: entered promiscuous mode [ 538.076169][T23306] syzkaller0: entered allmulticast mode [ 538.190028][T23306] tc action pedit 'at' offset 5 out of bounds [ 538.233179][T23311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4532'. [ 538.848730][T23324] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 538.875829][T23324] bond8 (unregistering): Released all slaves [ 539.763432][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 539.866643][T23357] netlink: 'syz.1.4540': attribute type 1 has an invalid length. [ 539.930962][T23361] netlink: 'syz.2.4541': attribute type 1 has an invalid length. [ 540.049277][T23357] 8021q: adding VLAN 0 to HW filter on device bond8 [ 540.186667][T23361] bond20: entered promiscuous mode [ 540.187103][T23361] 8021q: adding VLAN 0 to HW filter on device bond20 [ 540.187784][T23362] bond20: entered allmulticast mode [ 540.375248][T23367] bond20: (slave bridge5): making interface the new active one [ 540.375275][T23367] bridge5: entered promiscuous mode [ 540.375468][T23367] bridge5: entered allmulticast mode [ 540.391103][T23367] bond20: (slave bridge5): Enslaving as an active interface with an up link [ 540.460155][T23383] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 540.483721][T23383] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 540.484016][T23383] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 540.484294][T23383] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 540.484521][T23383] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 540.484746][T23383] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 540.484990][T23383] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 540.485247][T23383] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 540.485463][T23383] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 540.485684][T23383] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 540.646990][T23388] wg1 speed is unknown, defaulting to 1000 [ 541.196402][T23401] netlink: 'syz.3.4553': attribute type 83 has an invalid length. [ 541.604687][T23423] netlink: 'syz.2.4559': attribute type 1 has an invalid length. [ 541.720579][T23425] __nla_validate_parse: 2 callbacks suppressed [ 541.720603][T23425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4559'. [ 541.900979][T23423] bond21: entered promiscuous mode [ 541.911253][T23423] 8021q: adding VLAN 0 to HW filter on device bond21 [ 541.927389][T23425] bond21: entered allmulticast mode [ 541.963607][T23436] Cannot find add_set index 4 as target [ 541.990123][T23437] bond21: (slave bridge6): making interface the new active one [ 541.990150][T23437] bridge6: entered promiscuous mode [ 541.990347][T23437] bridge6: entered allmulticast mode [ 542.013254][T23437] bond21: (slave bridge6): Enslaving as an active interface with an up link [ 542.503024][T23460] netlink: 'syz.3.4569': attribute type 2 has an invalid length. [ 542.568617][T23464] netlink: 'syz.1.4570': attribute type 2 has an invalid length. [ 543.487174][T23488] netlink: 'syz.4.4577': attribute type 1 has an invalid length. [ 543.566825][T23492] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4577'. [ 543.653753][T23488] bond17: entered promiscuous mode [ 543.654732][T23488] 8021q: adding VLAN 0 to HW filter on device bond17 [ 543.655217][T23492] bond17: entered allmulticast mode [ 543.712848][T23488] bond17: (slave bridge10): making interface the new active one [ 543.712876][T23488] bridge10: entered promiscuous mode [ 543.713106][T23488] bridge10: entered allmulticast mode [ 543.714699][T23488] bond17: (slave bridge10): Enslaving as an active interface with an up link [ 543.730938][T23498] netlink: 'syz.2.4580': attribute type 1 has an invalid length. [ 543.860588][T23500] netlink: 'syz.2.4581': attribute type 1 has an invalid length. [ 543.870190][T23494] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4579'. [ 544.024217][T23500] 8021q: adding VLAN 0 to HW filter on device bond22 [ 544.092369][T23512] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4584'. [ 544.096621][T23512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4584'. [ 544.096646][T23512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4584'. [ 544.597758][T23526] IPVS: sync thread started: state = BACKUP, mcast_ifn = gretap0, syncid = 0, id = 0 [ 544.726222][T23530] xt_HMARK: proto mask must be zero with L3 mode [ 544.847701][T23536] netlink: 'syz.1.4593': attribute type 1 has an invalid length. [ 544.850454][T23536] netlink: 'syz.1.4593': attribute type 1 has an invalid length. [ 545.119687][T23536] 8021q: adding VLAN 0 to HW filter on device bond9 [ 545.127983][T23539] veth0_to_bond: left allmulticast mode [ 545.153780][T23539] bond9: (slave veth0_to_bond): making interface the new active one [ 545.169737][T23539] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 545.244560][T23541] macvlan2: entered promiscuous mode [ 545.244589][T23541] macvlan2: entered allmulticast mode [ 545.245567][T23541] bond9: entered promiscuous mode [ 545.245587][T23541] veth0_to_bond: entered promiscuous mode [ 545.250944][T23541] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 545.285102][T23541] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 545.285481][T23541] bond9: left promiscuous mode [ 545.285498][T23541] veth0_to_bond: left promiscuous mode [ 545.408818][T23559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4598'. [ 545.408843][T23559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4598'. [ 545.468821][T23561] netlink: 'syz.4.4597': attribute type 4 has an invalid length. [ 545.778627][T23571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4600'. [ 545.793086][T23574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4602'. [ 545.882380][T23579] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 546.004556][T23577] bond3: (slave veth0_to_bond): Releasing active interface [ 546.088293][T23577] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 546.318369][T23580] batadv0: entered promiscuous mode [ 546.320956][T23594] batadv0: left promiscuous mode [ 547.017359][T23623] validate_nla: 1 callbacks suppressed [ 547.017376][T23623] netlink: 'syz.3.4615': attribute type 10 has an invalid length. [ 547.069753][T23623] team0: Port device dummy0 added [ 547.256135][T23626] __nla_validate_parse: 2 callbacks suppressed [ 547.256153][T23626] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4616'. [ 547.290370][T23626] netlink: 'syz.3.4616': attribute type 4 has an invalid length. [ 547.290396][T23626] netlink: 13439 bytes leftover after parsing attributes in process `syz.3.4616'. [ 547.290975][T23630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4617'. [ 547.292708][T23626] siw: device registration error -23 [ 547.673213][T23644] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 547.834747][T23652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4624'. [ 547.886373][T12773] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 547.888019][T12773] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 547.914500][ T5812] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 548.046823][T23662] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4628'. [ 548.233123][ T5812] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 548.271417][T23667] netlink: 'syz.1.4629': attribute type 1 has an invalid length. [ 548.360766][T23668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4629'. [ 548.364047][T17412] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 548.488570][T23667] bond10: entered promiscuous mode [ 548.489265][T23667] 8021q: adding VLAN 0 to HW filter on device bond10 [ 548.513098][T23668] bond10: entered allmulticast mode [ 548.574117][T23684] bond10: (slave bridge4): making interface the new active one [ 548.574145][T23684] bridge4: entered promiscuous mode [ 548.574342][T23684] bridge4: entered allmulticast mode [ 548.577506][T23684] bond10: (slave bridge4): Enslaving as an active interface with an up link [ 548.909518][T23695] netlink: 'syz.3.4634': attribute type 2 has an invalid length. [ 548.909546][T23695] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4634'. [ 548.931481][T23692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4633'. [ 548.995861][T23695] : entered promiscuous mode [ 549.109205][T23697] netlink: 'syz.4.4636': attribute type 34 has an invalid length. [ 549.109230][T23697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4636'. [ 549.286704][T23697] bond18: option lacp_strict: invalid value (78) [ 549.312422][T23697] bond18 (unregistering): Released all slaves [ 549.689302][T23722] netlink: 'syz.1.4643': attribute type 4 has an invalid length. [ 550.053721][T23743] erspan0: left allmulticast mode [ 550.053751][T23743] erspan0: left promiscuous mode [ 550.059041][T23743] bridge4: port 1(erspan0) entered disabled state [ 550.230065][T23743] bridge_slave_0: left allmulticast mode [ 550.230095][T23743] bridge_slave_0: left promiscuous mode [ 550.230336][T23743] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.307159][T23743] bridge_slave_1: left promiscuous mode [ 550.307379][T23743] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.316115][T23742] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.4650'. [ 550.396609][T23743] bond0: (slave veth0_to_bond): Releasing backup interface [ 550.484952][T23743] bond0: (slave bond_slave_0): Releasing backup interface [ 550.559326][T23743] bond0: (slave bond_slave_1): Releasing backup interface [ 550.622947][T23772] ieee802154 phy1 wpan1: encryption failed: -22 [ 550.773523][T23743] team0: Port device team_slave_1 removed [ 550.900981][T23743] bond5: (slave geneve2): Releasing active interface [ 550.960481][T23743] bond8: (slave bond9): Releasing backup interface [ 550.982026][T23784] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 551.001196][T23743] bond10: (slave bridge5): Releasing backup interface [ 551.001224][T23743] bridge5: left promiscuous mode [ 551.007946][T23743] bridge5: left allmulticast mode [ 551.035567][T23743] bond11: (slave bridge6): Releasing backup interface [ 551.035627][T23743] bridge6: left promiscuous mode [ 551.035847][T23743] bridge6: left allmulticast mode [ 551.103513][T23743] bond12: (slave bridge7): Releasing backup interface [ 551.103543][T23743] bridge7: left promiscuous mode [ 551.103754][T23743] bridge7: left allmulticast mode [ 551.137667][T23743] bond15: (slave bridge9): Releasing backup interface [ 551.137698][T23743] bridge9: left promiscuous mode [ 551.137921][T23743] bridge9: left allmulticast mode [ 551.164735][T23743] bond17: (slave bridge10): Releasing backup interface [ 551.164755][T23743] bridge10: left promiscuous mode [ 551.164875][T23743] bridge10: left allmulticast mode [ 551.508665][T23791] l2tp_ppp: sess 2/0: no socket in recv [ 551.731264][T23798] wireguard: wg2: Could not create IPv4 socket [ 551.842008][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 551.970386][T23806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 552.196526][T23818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 552.364316][T23822] __nla_validate_parse: 5 callbacks suppressed [ 552.364338][T23822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4665'. [ 552.424849][T23829] ieee802154 phy1 wpan1: encryption failed: -22 [ 552.556527][T23834] netlink: 'syz.0.4669': attribute type 1 has an invalid length. [ 552.694014][T23837] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4669'. [ 552.758528][T23834] bond15: entered promiscuous mode [ 552.758890][T23834] 8021q: adding VLAN 0 to HW filter on device bond15 [ 552.761019][T23837] bond15: entered allmulticast mode [ 552.825675][T23844] 8021q: adding VLAN 0 to HW filter on device bond11 [ 552.827798][T23844] team0: Port device bond11 added [ 552.938353][T23834] bond15: (slave bridge8): making interface the new active one [ 552.938379][T23834] bridge8: entered promiscuous mode [ 552.949516][T23834] bridge8: entered allmulticast mode [ 552.968172][T23834] bond15: (slave bridge8): Enslaving as an active interface with an up link [ 552.968507][T23850] openvswitch: netlink: Duplicate or invalid key (type 0). [ 552.970018][T23841] tc_dump_action: action bad kind [ 553.076158][T23841] netlink: 'syz.4.4672': attribute type 28 has an invalid length. [ 553.076185][T23841] netlink: 'syz.4.4672': attribute type 3 has an invalid length. [ 553.076199][T23841] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4672'. [ 553.269515][T23859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4674'. [ 553.294531][T23858] bond13: (slave dummy0): Releasing active interface [ 553.413631][T23865] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4675'. [ 553.453584][T23858] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 554.109461][T23886] netlink: 85 bytes leftover after parsing attributes in process `syz.4.4681'. [ 554.666158][T23907] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4685'. [ 555.005835][T23918] netlink: Failed to add helper -22 [ 555.005900][T23918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.857101][T23949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.094068][T23963] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.4696'. [ 556.171093][T23949] 8021q: adding VLAN 0 to HW filter on device bond9 [ 556.194510][T23949] 8021q: adding VLAN 0 to HW filter on device bond15 [ 556.198164][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a1c9400: rx timeout, send abort [ 556.200105][T23949] 8021q: adding VLAN 0 to HW filter on device bond16 [ 556.235848][T23949] erspan0: entered promiscuous mode [ 556.263824][T12753] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 556.365044][T21385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.622524][T23973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4701'. [ 556.694473][T23971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4701'. [ 556.698222][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a1c9400: abort rx timeout. Force session deactivation [ 556.698571][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a1c9800: rx timeout, send abort [ 556.909391][T23978] netlink: 'syz.3.4702': attribute type 2 has an invalid length. [ 557.123595][T21385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.198621][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a1c9800: abort rx timeout. Force session deactivation [ 557.207392][T12773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.339915][T23997] netlink: 'syz.2.4709': attribute type 6 has an invalid length. [ 557.647680][T24003] netlink: 'syz.4.4710': attribute type 1 has an invalid length. [ 557.688453][T24008] netlink: 'syz.1.4713': attribute type 2 has an invalid length. [ 557.690306][T24008] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4713'. [ 557.705369][T24009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4710'. [ 557.843561][T24003] bond18: entered promiscuous mode [ 557.846808][T24003] 8021q: adding VLAN 0 to HW filter on device bond18 [ 557.878259][T24009] bond18: entered allmulticast mode [ 557.938261][T24018] bond18: (slave bridge11): making interface the new active one [ 557.938288][T24018] bridge11: entered promiscuous mode [ 557.938546][T24018] bridge11: entered allmulticast mode [ 557.939699][T24018] bond18: (slave bridge11): Enslaving as an active interface with an up link [ 558.214108][T24032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4718'. [ 558.437676][ T1113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.437998][ T1113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.540190][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.939133][T12773] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 560.045029][T24089] netlink: 'syz.2.4730': attribute type 49 has an invalid length. [ 560.081848][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 560.217466][T24088] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4729'. [ 560.219640][T24088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4729'. [ 560.616957][T24093] netlink: 'syz.0.4732': attribute type 1 has an invalid length. [ 560.642654][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 560.678239][T24089] ip6gretap0: entered promiscuous mode [ 560.678303][T24089] ip6gretap0: entered allmulticast mode [ 560.850890][T24102] netlink: 'syz.3.4734': attribute type 12 has an invalid length. [ 560.864102][T24093] 8021q: adding VLAN 0 to HW filter on device bond16 [ 560.976949][T24102] bond13: option primary_reselect: invalid value (255) [ 561.028728][T24102] bond13 (unregistering): Released all slaves [ 561.513367][T24107] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4735'. [ 561.726841][T24116] IPVS: length: 35 != 24 [ 561.811177][T24114] IPVS: set_ctl: invalid protocol: 33 172.20.20.12:20003 [ 561.890538][T24109] dvmrp0: entered allmulticast mode [ 561.934437][T24119] x_tables: unsorted entry at hook 1 [ 562.254884][T24124] netlink: 'syz.1.4740': attribute type 10 has an invalid length. [ 562.254910][T24124] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4740'. [ 562.257160][T24124] dummy0: entered promiscuous mode [ 562.257226][T24124] dummy0: entered allmulticast mode [ 562.273308][T24124] bridge0: port 3(dummy0) entered blocking state [ 562.274193][T24124] bridge0: port 3(dummy0) entered disabled state [ 562.292534][T24124] bridge0: port 3(dummy0) entered blocking state [ 562.292660][T24124] bridge0: port 3(dummy0) entered listening state [ 562.496390][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.305611][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.563541][T24139] netlink: 'syz.0.4746': attribute type 1 has an invalid length. [ 564.016115][T24151] netlink: 'syz.3.4747': attribute type 1 has an invalid length. [ 564.676415][T24151] 8021q: adding VLAN 0 to HW filter on device bond13 [ 565.306219][T24171] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4752'. [ 565.394432][T24178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4752'. [ 565.394456][T24178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4752'. [ 566.478847][T24189] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 567.168272][T24202] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4758'. [ 567.461745][T24061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.502048][T24206] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4760'. [ 567.502079][T24206] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4760'. [ 567.663398][T21375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.087045][T24219] netlink: 'syz.2.4762': attribute type 1 has an invalid length. [ 568.431728][T24219] 8021q: adding VLAN 0 to HW filter on device bond23 [ 568.614975][T24232] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4758'. [ 569.683399][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 570.120758][T24259] netlink: 'syz.2.4768': attribute type 1 has an invalid length. [ 570.373037][T24265] netlink: 'syz.2.4768': attribute type 1 has an invalid length. [ 570.659471][T24250] : renamed from bond0 (while UP) [ 570.750909][T24259] bond24: entered promiscuous mode [ 570.752093][T24259] 8021q: adding VLAN 0 to HW filter on device bond24 [ 570.915367][T24261] 8021q: adding VLAN 0 to HW filter on device bond24 [ 570.915746][T24261] bond24: (slave wireguard1): The slave device specified does not support setting the MAC address [ 570.915765][T24261] bond24: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 570.965827][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.018108][T24261] bond24: (slave wireguard1): making interface the new active one [ 571.018137][T24261] wireguard1: entered promiscuous mode [ 571.026711][T24261] bond24: (slave wireguard1): Enslaving as an active interface with an up link [ 571.122961][T24263] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 571.462572][T24275] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4769'. [ 571.497190][T24280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4773'. [ 571.580962][T24280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4773'. [ 571.939311][T24286] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 572.076491][T24290] netlink: 'syz.2.4775': attribute type 1 has an invalid length. [ 572.475369][T24290] 8021q: adding VLAN 0 to HW filter on device bond25 [ 572.698399][T24305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4778'. [ 573.077408][T24313] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4781'. [ 574.230794][T24323] bond14: Unable to set peer notification delay as MII monitoring is disabled [ 574.261731][T24323] bond14 (unregistering): Released all slaves [ 574.637461][T24335] xt_ecn: cannot match TCP bits for non-tcp packets [ 574.705208][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 574.713769][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 574.733348][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 574.739430][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 574.750060][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 575.489135][T24356] netlink: 'syz.1.4790': attribute type 1 has an invalid length. [ 575.637698][T24356] 8021q: adding VLAN 0 to HW filter on device bond12 [ 575.966323][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 575.966436][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 575.966534][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 575.966660][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 575.966764][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 575.966859][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 575.967019][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 575.967114][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 575.967235][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 575.967329][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 575.976387][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 575.976488][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 575.976575][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.007995][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.008114][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.008226][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.008317][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.008403][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.008487][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.008571][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.008656][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.008740][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.008833][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.008917][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.009009][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.009095][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.009179][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.009291][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.009376][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.009460][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.009545][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.027454][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.027557][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.027645][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.027730][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.027856][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.027944][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.028028][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.028121][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.028206][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.028319][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.028405][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.028489][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.028574][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.028657][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.028746][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.028854][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.028975][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.077523][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.077623][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.077711][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.077806][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.077892][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.077977][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.078063][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.078148][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.078231][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.078362][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.078449][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.078537][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.078621][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.078705][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.078800][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.078888][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.146262][T24366] ieee802154 phy1 wpan1: encryption failed: -90 [ 576.721700][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 576.882660][ T5627] Bluetooth: hci1: command tx timeout [ 577.084796][T24382] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 577.202055][T24385] IPVS: Unknown mcast interface: pim6reg [ 577.363909][ C0] bridge0: port 3(dummy0) entered learning state [ 577.804178][T24396] netlink: 'syz.2.4800': attribute type 1 has an invalid length. [ 577.945672][T24345] wg1 speed is unknown, defaulting to 1000 [ 578.645911][T24412] netlink: 'syz.3.4803': attribute type 1 has an invalid length. [ 578.950784][T24412] 8021q: adding VLAN 0 to HW filter on device bond14 [ 578.961562][ T5627] Bluetooth: hci1: command tx timeout [ 579.412357][T24424] netlink: 'syz.1.4805': attribute type 1 has an invalid length. [ 579.605236][T24428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4805'. [ 579.749785][T24424] bond13: entered promiscuous mode [ 579.750308][T24424] 8021q: adding VLAN 0 to HW filter on device bond13 [ 579.828919][T24428] bond13: entered allmulticast mode [ 580.120148][T24433] bond13: (slave bridge5): making interface the new active one [ 580.120176][T24433] bridge5: entered promiscuous mode [ 580.120375][T24433] bridge5: entered allmulticast mode [ 580.211028][T24433] bond13: (slave bridge5): Enslaving as an active interface with an up link [ 580.370868][T24437] netlink: 'syz.3.4807': attribute type 1 has an invalid length. [ 581.036279][T24444] bond15: (slave bridge9): making interface the new active one [ 581.042366][ T5627] Bluetooth: hci1: command tx timeout [ 581.057622][T24444] bond15: (slave bridge9): Enslaving as an active interface with an up link [ 581.666394][T24459] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4812'. [ 581.853587][T24466] x_tables: unsorted underflow at hook 4 [ 581.945478][T24467] netlink: 'syz.0.4814': attribute type 1 has an invalid length. [ 582.146569][T24471] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4814'. [ 582.146594][T24471] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4814'. [ 582.160118][T24474] netlink: 'syz.1.4815': attribute type 1 has an invalid length. [ 582.297413][T24482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4814'. [ 582.337567][T24467] bond0: entered promiscuous mode [ 582.338105][T24467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.999490][T24474] 8021q: adding VLAN 0 to HW filter on device bond14 [ 583.012169][T24493] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4817'. [ 583.121999][ T5627] Bluetooth: hci1: command tx timeout [ 583.449118][T24497] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 583.717633][T24507] openvswitch: netlink: Missing key (keys=40, expected=100) [ 584.856244][T24345] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.858079][T24345] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.858256][T24345] bridge_slave_0: entered allmulticast mode [ 584.868044][T24345] bridge_slave_0: entered promiscuous mode [ 584.875068][T24345] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.875244][T24345] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.875390][T24345] bridge_slave_1: entered allmulticast mode [ 584.880749][T24345] bridge_slave_1: entered promiscuous mode [ 585.059119][T24345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.095977][T24345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.339961][T24345] team0: Port device team_slave_0 added [ 585.360882][T24345] team0: Port device team_slave_1 added [ 585.670929][T24345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.670949][T24345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.670976][T24345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.703019][T24345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.703038][T24345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.703063][T24345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.070949][T24345] hsr_slave_0: entered promiscuous mode [ 586.076159][T24345] hsr_slave_1: entered promiscuous mode [ 586.081496][T24345] debugfs: 'hsr0' already exists in 'hsr' [ 586.081519][T24345] Cannot create hsr debugfs directory [ 586.128563][T24555] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4829'. [ 586.173754][T24555] xt_CT: You must specify a L4 protocol and not use inversions on it [ 586.873502][T24565] syzkaller0: entered promiscuous mode [ 586.873527][T24565] syzkaller0: entered allmulticast mode [ 587.603496][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.185007][T24601] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4840'. [ 588.186019][T24601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4840'. [ 588.241715][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 588.338316][T24612] netlink: 'syz.1.4841': attribute type 1 has an invalid length. [ 588.994078][T24622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4844'. [ 589.017876][T24345] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 589.035894][T24345] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 589.055906][T24624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4846'. [ 589.104014][T24345] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 589.176604][T24345] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 589.182018][T24345] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 589.235849][T24345] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 589.266417][T24345] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 589.293394][T24345] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 589.750410][T24642] netlink: 'syz.1.4850': attribute type 1 has an invalid length. [ 589.780996][T24643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4849'. [ 589.816388][T24648] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4850'. [ 589.882829][T24642] bond15: entered promiscuous mode [ 589.886163][T24642] 8021q: adding VLAN 0 to HW filter on device bond15 [ 589.928185][T24648] bond15: entered allmulticast mode [ 589.966189][T12779] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 590.087649][T24642] bond15: (slave bridge6): making interface the new active one [ 590.087680][T24642] bridge6: entered promiscuous mode [ 590.087896][T24642] bridge6: entered allmulticast mode [ 590.106710][T24642] bond15: (slave bridge6): Enslaving as an active interface with an up link [ 590.387516][T24345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.534475][T24345] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.570860][T12777] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.570977][T12777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.640427][T12777] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.640547][T12777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.128154][T24675] netlink: 'syz.0.4856': attribute type 4 has an invalid length. [ 591.303172][T24684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4859'. [ 591.303236][T24684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4859'. [ 591.335853][T24682] netlink: 'syz.3.4860': attribute type 1 has an invalid length. [ 591.335914][T24682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4860'. [ 591.451702][T24691] openvswitch: netlink: Message has 8 unknown bytes. [ 591.451745][T24691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 592.612631][T24713] netlink: 'syz.3.4864': attribute type 1 has an invalid length. [ 592.723220][ C0] bridge0: port 3(dummy0) entered forwarding state [ 592.723250][ C0] bridge0: topology change detected, propagating [ 592.767884][T24716] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4864'. [ 592.864461][T24713] bond16: entered promiscuous mode [ 592.865278][T24713] 8021q: adding VLAN 0 to HW filter on device bond16 [ 592.890561][T24716] bond16: entered allmulticast mode [ 592.996612][T24713] bond16: (slave bridge11): making interface the new active one [ 592.996641][T24713] bridge11: entered promiscuous mode [ 592.996961][T24713] bridge11: entered allmulticast mode [ 592.998621][T24713] bond16: (slave bridge11): Enslaving as an active interface with an up link [ 593.023511][T24723] openvswitch: netlink: Message has 8 unknown bytes. [ 593.056380][T24725] netlink: 'syz.2.4868': attribute type 1 has an invalid length. [ 593.184170][T24725] 8021q: adding VLAN 0 to HW filter on device bond26 [ 593.420584][T24731] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 593.479624][T24731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4869'. [ 593.577057][T24731] macsec2: entered promiscuous mode [ 593.577081][T24731] bridge0: entered promiscuous mode [ 593.577334][T24731] macsec2: entered allmulticast mode [ 593.577350][T24731] bridge0: entered allmulticast mode [ 593.579109][T24731] bridge0: port 4(macsec2) entered blocking state [ 593.579304][T24731] bridge0: port 4(macsec2) entered disabled state [ 593.640579][T24731] bridge0: left allmulticast mode [ 593.667122][T21375] bridge0: left promiscuous mode [ 594.354717][T24345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.630272][T24763] netlink: 'syz.3.4880': attribute type 1 has an invalid length. [ 594.715725][T24763] 8021q: adding VLAN 0 to HW filter on device bond17 [ 594.909612][T24771] netlink: 'syz.1.4879': attribute type 1 has an invalid length. [ 595.047216][T24776] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4879'. [ 595.269406][T24771] bond16: entered promiscuous mode [ 595.273827][T24771] 8021q: adding VLAN 0 to HW filter on device bond16 [ 595.278778][T24776] bond16: entered allmulticast mode [ 595.455680][T24779] bond16: (slave bridge7): making interface the new active one [ 595.455708][T24779] bridge7: entered promiscuous mode [ 595.455903][T24779] bridge7: entered allmulticast mode [ 595.457172][T24779] bond16: (slave bridge7): Enslaving as an active interface with an up link [ 595.457470][T24784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4883'. [ 595.512914][T24789] pim6reg: entered allmulticast mode [ 595.800259][T24796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4884'. [ 595.817312][ T5627] block nbd4: Receive control failed (result -107) [ 596.012439][T24345] veth0_vlan: entered promiscuous mode [ 596.078665][T24345] veth1_vlan: entered promiscuous mode [ 596.256286][T24345] veth0_macvtap: entered promiscuous mode [ 596.303030][T24345] veth1_macvtap: entered promiscuous mode [ 596.365141][T24345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.423096][T24345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.506208][T12753] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.506304][T12753] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.671020][T24810] bridge10: entered promiscuous mode [ 596.671076][T24810] bridge10: entered allmulticast mode [ 596.885337][T24812] vcan0: tx address claim with dest, not broadcast [ 597.039005][T24815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4891'. [ 597.070968][T12754] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.313782][T12763] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.000950][T24819] syzkaller1: entered promiscuous mode [ 598.000974][T24819] syzkaller1: entered allmulticast mode [ 598.068593][T24833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4894'. [ 598.488186][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.488210][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.730045][T12763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.730105][T12763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.047519][T24870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4906'. [ 600.047773][T24870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4906'. [ 600.083170][T24868] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 600.169788][T24870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.179806][T24870] .`: (slave bond0): Enslaving as an active interface with an up link [ 600.325099][T24877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4908'. [ 600.325133][T24877] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4908'. [ 600.586446][T24889] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4906'. [ 600.597801][T12777] bond0: (slave bridge2): link status definitely down, disabling slave [ 600.696618][T12777] bond0: now running without any active interface! [ 601.097496][T24894] netlink: 'syz.5.4911': attribute type 1 has an invalid length. [ 601.164747][T24894] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4911'. [ 601.164911][T24894] ip6_vti0: entered promiscuous mode [ 601.164970][T24894] ip6_vti0: entered allmulticast mode [ 601.346388][T24899] netlink: 'syz.0.4912': attribute type 10 has an invalid length. [ 601.429906][T24899] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4912'. [ 601.482631][T24902] ip_tables: iptables: counters copy to user failed while replacing table [ 602.293479][T24920] netlink: 'syz.1.4919': attribute type 1 has an invalid length. [ 602.352222][T24924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4922'. [ 602.439836][T24920] 8021q: adding VLAN 0 to HW filter on device bond17 [ 603.007078][T24942] netlink: 'syz.1.4926': attribute type 1 has an invalid length. [ 603.119333][T24945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4926'. [ 603.140414][T24951] netlink: 'syz.3.4928': attribute type 23 has an invalid length. [ 603.304972][T24942] bond18: entered promiscuous mode [ 603.305679][T24942] 8021q: adding VLAN 0 to HW filter on device bond18 [ 603.329922][T24945] bond18: entered allmulticast mode [ 603.412869][T24956] bond18: (slave bridge8): making interface the new active one [ 603.412896][T24956] bridge8: entered promiscuous mode [ 603.413088][T24956] bridge8: entered allmulticast mode [ 603.414240][T24956] bond18: (slave bridge8): Enslaving as an active interface with an up link [ 603.686128][T24964] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4930'. [ 603.686194][T24964] netlink: 'syz.5.4930': attribute type 6 has an invalid length. [ 603.686209][T24964] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4930'. [ 604.152058][T12753] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.152110][T12753] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.152144][T12753] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.152412][T24964] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4930'. [ 604.152441][T24964] netlink: 'syz.5.4930': attribute type 6 has an invalid length. [ 604.152456][T24964] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4930'. [ 604.220221][T12753] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.660590][T24983] ip_tables: iptables: counters copy to user failed while replacing table [ 604.789075][T24991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4936'. [ 604.789103][T24991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4936'. [ 604.790934][T24990] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 605.047552][T24996] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4940'. [ 605.368936][T24998] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4942'. [ 605.475135][T25004] macvlan0: entered promiscuous mode [ 605.475159][T25004] veth1_vlan: entered promiscuous mode [ 606.516793][T25022] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20003 [ 607.638852][T25064] __nla_validate_parse: 2 callbacks suppressed [ 607.638877][T25064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4955'. [ 607.638906][T25064] netlink: 'syz.0.4955': attribute type 7 has an invalid length. [ 607.638919][T25064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4955'. [ 608.132397][T25077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4958'. [ 608.170215][T25064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4955'. [ 608.170257][T25064] netlink: 'syz.0.4955': attribute type 7 has an invalid length. [ 608.170270][T25064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4955'. [ 608.206805][T25077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4958'. [ 608.300534][T25083] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 608.301123][T25083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.490449][T25086] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 608.806838][T25089] netlink: 'syz.1.4961': attribute type 142 has an invalid length. [ 609.332770][T25102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4964'. [ 609.490645][T25104] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 609.619689][T25105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4964'. [ 610.058442][T25123] netlink: 'syz.0.4971': attribute type 4 has an invalid length. [ 610.407323][T25130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4973'. [ 610.607335][T25133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4974'. [ 611.921985][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 613.140994][T25195] x_tables: duplicate underflow at hook 1 [ 613.157354][T25195] __nla_validate_parse: 3 callbacks suppressed [ 613.157376][T25195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4991'. [ 613.459732][T12777] IPVS: starting estimator thread 0... [ 613.495295][T25212] netlink: 'syz.5.4993': attribute type 1 has an invalid length. [ 613.495378][T25212] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4993'. [ 613.553944][T25215] IPVS: using max 27 ests per chain, 64800 per kthread [ 614.298764][T25226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4995'. [ 614.359655][T25225] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4995'. [ 614.581990][T25234] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4998'. [ 614.582022][T25234] openvswitch: netlink: Message has 512 unknown bytes. [ 614.760135][T25236] netlink: 'syz.5.4997': attribute type 1 has an invalid length. [ 615.056070][T25236] 8021q: adding VLAN 0 to HW filter on device bond1 [ 615.120232][T25243] bond1: (slave geneve2): making interface the new active one [ 615.138246][T25243] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 615.700790][T25255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5001'. [ 616.071656][T25262] netlink: 'syz.1.5005': attribute type 3 has an invalid length. [ 616.363105][T25269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5007'. [ 616.927724][T25286] netlink: 'syz.2.5011': attribute type 1 has an invalid length. [ 617.100339][T25286] 8021q: adding VLAN 0 to HW filter on device bond27 [ 617.778942][T25310] syzkaller0: entered promiscuous mode [ 617.779114][T25310] syzkaller0: entered allmulticast mode [ 618.568076][T25322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 619.384887][T25344] syzkaller0: entered promiscuous mode [ 619.384983][T25344] syzkaller0: entered allmulticast mode [ 619.518892][T25348] x_tables: unsorted underflow at hook 2 [ 619.950209][T25350] bond19: option packets_per_slave: invalid value (18446744073709551615) [ 619.950239][T25350] bond19: option packets_per_slave: allowed values 0 - 65535 [ 619.981831][T25350] bond19 (unregistering): Released all slaves [ 620.810102][T25378] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5032'. [ 620.823151][T25354] syzkaller0: entered promiscuous mode [ 620.823218][T25354] syzkaller0: entered allmulticast mode [ 620.993927][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 624.746615][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.364145][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 628.049741][T25413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5041'. [ 628.092632][T25416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5041'. [ 628.227377][T25414] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5040'. [ 628.247658][T25414] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5040'. [ 628.285651][T25422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5042'. [ 628.285674][T25422] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5042'. [ 628.548183][T25430] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5044'. [ 630.036501][T25466] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5056'. [ 630.375215][T25474] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5059'. [ 630.665148][T25481] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5061'. [ 630.973873][T25489] ip6tnl3: entered allmulticast mode [ 631.588578][T25504] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 631.696419][T25512] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 631.786096][T25515] 8021q: VLANs not supported on ip_vti0 [ 631.786493][T25515] netlink: NAT attribute has 5 unknown bytes [ 631.786527][T25515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.880414][T25535] netlink: 'syz.0.5075': attribute type 1 has an invalid length. [ 633.304676][T25535] 8021q: adding VLAN 0 to HW filter on device bond17 [ 633.359245][T25547] __nla_validate_parse: 5 callbacks suppressed [ 633.359268][T25547] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5077'. [ 633.386641][T25542] ip6tnl2: entered promiscuous mode [ 633.884098][T25554] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5081'. [ 633.884320][T25554] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5081'. [ 633.884524][T25554] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5081'. [ 633.884722][T25554] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5081'. [ 633.884927][T25554] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5081'. [ 633.885151][T25554] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5081'. [ 633.885342][T25554] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5081'. [ 633.985786][T25554] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5081'. [ 633.986057][T25554] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5081'. [ 634.321798][T25562] netlink: 'syz.2.5083': attribute type 13 has an invalid length. [ 634.463073][T25562] netlink: 'syz.2.5083': attribute type 13 has an invalid length. [ 635.255373][T25587] netlink: 'syz.2.5092': attribute type 1 has an invalid length. [ 635.504186][T25593] netlink: 'syz.3.5091': attribute type 2 has an invalid length. [ 635.766493][T25587] 8021q: adding VLAN 0 to HW filter on device bond28 [ 636.647648][T25612] erspan0: entered promiscuous mode [ 638.038548][T25642] ip_tables: iptables: counters copy to user failed while replacing table [ 638.490927][T25650] netlink: 'syz.1.5107': attribute type 1 has an invalid length. [ 638.635484][T25653] __nla_validate_parse: 63 callbacks suppressed [ 638.635536][T25653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5107'. [ 638.862826][T25650] 8021q: adding VLAN 0 to HW filter on device bond19 [ 639.460116][T25672] netlink: 'syz.5.5113': attribute type 2 has an invalid length. [ 639.520985][T25672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5113'. [ 639.639493][T25673] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5112'. [ 639.706681][T25680] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5116'. [ 640.163847][T25690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 640.313278][T25694] sctp: [Deprecated]: syz.3.5117 (pid 25694) Use of int in maxseg socket option. [ 640.313278][T25694] Use struct sctp_assoc_value instead [ 640.319963][T25694] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20003 [ 640.688431][T25698] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5121'. [ 640.742500][T25700] netlink: 'syz.2.5122': attribute type 1 has an invalid length. [ 640.841802][T25706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5122'. [ 641.041192][T25716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5123'. [ 641.097783][T25700] 8021q: adding VLAN 0 to HW filter on device bond29 [ 642.331216][T25759] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 642.393267][T25731] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 643.140596][T25771] netlink: 'syz.2.5139': attribute type 1 has an invalid length. [ 643.201191][T25773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5139'. [ 643.309907][T25771] 8021q: adding VLAN 0 to HW filter on device bond30 [ 643.948842][T25805] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 643.969302][T25806] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 644.019207][T25806] xt_hashlimit: size too large, truncated to 1048576 [ 644.085613][T25797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5143'. [ 644.273670][T25812] netlink: 45 bytes leftover after parsing attributes in process `syz.5.5146'. [ 644.878402][T25817] bond20: Removing last arp target with arp_interval on [ 646.258231][T25866] netlink: 'syz.2.5158': attribute type 28 has an invalid length. [ 646.258258][T25866] netlink: 'syz.2.5158': attribute type 3 has an invalid length. [ 646.258269][T25866] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5158'. [ 646.456758][T25868] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5161'. [ 646.456784][T25868] netlink: 'syz.2.5161': attribute type 9 has an invalid length. [ 647.661549][T25898] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5169'. [ 647.665718][T25898] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5169'. [ 647.667175][T25898] netlink: 'syz.3.5169': attribute type 32 has an invalid length. [ 647.667197][T25898] netlink: 500 bytes leftover after parsing attributes in process `syz.3.5169'. [ 647.921924][T25902] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5170'. [ 648.067615][T25910] xt_TCPMSS: Only works on TCP SYN packets [ 650.322913][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 653.436235][T12754] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 654.562209][ C1] sched: DL replenish lagged too much [ 681.043213][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 683.123557][ T5625] Bluetooth: hci3: command 0x0405 tx timeout [ 686.189856][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.401714][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 697.645595][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 706.743348][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 708.112074][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 708.305073][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 709.807306][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 709.816262][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 712.321397][ T5625] Bluetooth: hci0: command tx timeout [ 714.416301][ T5625] Bluetooth: hci0: command tx timeout [ 716.482598][ T5627] Bluetooth: hci0: command tx timeout [ 716.576091][ T5627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 716.766740][ T5627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 717.301785][ T5627] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 717.315605][ T5627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 717.317948][ T5627] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 718.566944][ T5625] Bluetooth: hci0: command tx timeout [ 719.591394][ T5625] Bluetooth: hci6: command tx timeout [ 721.608785][ T5625] Bluetooth: hci6: command tx timeout [ 723.851578][ T5625] Bluetooth: hci6: command tx timeout [ 724.743736][ T5627] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 725.921408][ T5627] Bluetooth: hci6: command tx timeout [ 726.458414][ T5627] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 726.812169][ T5627] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 727.380512][ T5627] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 727.383144][ T5627] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 729.931668][ T5625] Bluetooth: hci7: command tx timeout [ 732.081643][ T5625] Bluetooth: hci7: command tx timeout [ 734.162675][ T5625] Bluetooth: hci7: command tx timeout [ 736.341634][ T5627] Bluetooth: hci7: command tx timeout [ 736.718364][ T5627] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 736.734635][ T5627] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 736.736423][ T5627] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 737.261808][ T5627] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 737.310190][ T5627] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 740.165512][ T5625] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 740.202527][ T5625] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 740.731699][ T5625] Bluetooth: hci8: command tx timeout [ 740.739949][T12755] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 740.973488][ T5625] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 740.976287][ T5625] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 740.978169][ T5625] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 742.811267][ T5625] Bluetooth: hci8: command tx timeout [ 743.434432][ T5625] Bluetooth: hci9: command tx timeout [ 745.104473][ T5625] Bluetooth: hci8: command tx timeout [ 745.463233][ T5625] Bluetooth: hci9: command tx timeout [ 747.195570][ T5625] Bluetooth: hci8: command tx timeout [ 747.522271][ T5625] Bluetooth: hci9: command tx timeout [ 747.613660][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.618411][ T5625] Bluetooth: hci9: command tx timeout [ 783.301962][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 783.841975][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 783.868398][T12778] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 785.147205][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 788.062848][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 788.396531][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 792.143055][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 793.430447][T25989] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 793.482036][T25989] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 793.763681][T25989] Bluetooth: hci2: command tx timeout [ 793.771667][T25989] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 793.772353][T25989] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 796.023482][T25989] Bluetooth: hci2: command tx timeout [ 797.375020][T25989] Bluetooth: hci1: command tx timeout [ 798.112345][T25989] Bluetooth: hci2: command tx timeout [ 799.503267][ T5625] Bluetooth: hci1: command tx timeout [ 800.177345][ T5629] Bluetooth: hci2: command tx timeout [ 800.426097][T25989] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 801.541884][T25989] Bluetooth: hci1: command tx timeout [ 802.161210][T25989] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 803.602524][T25989] Bluetooth: hci1: command tx timeout [ 806.429620][T25989] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 806.681784][T25989] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 807.182994][T25989] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 807.185273][T25989] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 809.151735][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.853043][T25989] Bluetooth: hci3: command tx timeout [ 810.612477][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 811.929995][ T5629] Bluetooth: hci3: command tx timeout [ 811.974317][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 811.992399][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 812.229736][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 812.231842][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 814.012023][ T5625] Bluetooth: hci3: command tx timeout [ 816.101874][ T5625] Bluetooth: hci3: command tx timeout [ 816.155170][T25989] Bluetooth: hci5: command tx timeout [ 818.170302][T25989] Bluetooth: hci5: command tx timeout [ 820.212882][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 820.251791][ T5629] Bluetooth: hci5: command tx timeout [ 820.257941][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 820.260452][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 821.279005][ T250] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 822.022834][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 822.024842][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 822.432532][T25989] Bluetooth: hci5: command tx timeout [ 824.402183][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 831.364307][T25989] Bluetooth: hci4: command tx timeout [ 833.441740][T25989] Bluetooth: hci4: command tx timeout [ 834.642546][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 835.588796][T25989] Bluetooth: hci4: command tx timeout [ 837.672161][T25989] Bluetooth: hci4: command tx timeout [ 842.564947][T25989] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 844.583875][T25989] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 845.381216][T25989] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 845.784752][T25989] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 846.673975][T25989] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 846.905092][T25989] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 859.042714][ T5629] Bluetooth: hci0: command tx timeout [ 860.194085][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 861.121493][ T5629] Bluetooth: hci0: command tx timeout [ 863.201615][ T5629] Bluetooth: hci0: command tx timeout [ 865.403025][ T5629] Bluetooth: hci0: command tx timeout [ 867.876662][T25989] Bluetooth: hci9: command 0x0406 tx timeout [ 870.502140][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.546387][ T5629] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 879.122662][ T5629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 882.824685][ T5629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 882.864201][ T5629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 882.911626][ T5629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 883.337388][ T5629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 883.765220][T25989] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 884.112597][T25989] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 884.491549][T25989] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 886.175641][ T5620] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 886.179489][ T5620] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 886.332988][ T5620] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 886.337616][ T5620] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 887.476672][T26040] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 887.902433][T25989] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 887.904185][T25989] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 889.751732][ T5627] Bluetooth: hci6: command tx timeout [ 889.752933][ T5627] Bluetooth: hci7: command tx timeout [ 890.401266][ T5625] Bluetooth: hci8: command tx timeout [ 891.231358][ T5625] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 891.396513][ T5625] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 891.398871][ T5625] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 891.425250][ T5625] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 891.429067][ T5625] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 891.861278][T25989] Bluetooth: hci7: command tx timeout [ 891.861324][T25989] Bluetooth: hci6: command tx timeout [ 892.591845][T25989] Bluetooth: hci8: command tx timeout [ 893.921364][T25989] Bluetooth: hci6: command tx timeout [ 893.921405][T25989] Bluetooth: hci7: command tx timeout [ 894.711736][ T5625] Bluetooth: hci8: command tx timeout [ 895.679158][ T5625] Bluetooth: hci10: command tx timeout [ 896.006909][ T5625] Bluetooth: hci7: command tx timeout [ 896.006951][ T5625] Bluetooth: hci6: command tx timeout [ 896.731193][T25989] Bluetooth: hci8: command tx timeout [ 897.503632][T18809] bridge0: port 3(syz_tun) entered disabled state [ 897.694365][T25989] Bluetooth: hci10: command tx timeout [ 899.792362][T25989] Bluetooth: hci10: command tx timeout [ 899.861329][T12779] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 901.888504][T25989] Bluetooth: hci10: command tx timeout [ 902.082981][ T5627] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 902.361330][ T5627] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 902.365145][ T5627] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 902.368169][ T5627] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 902.370146][ T5627] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 912.843738][T25989] Bluetooth: hci9: command tx timeout [ 912.935841][T18809] syz_tun (unregistering): left allmulticast mode [ 912.936963][T18809] syz_tun (unregistering): left promiscuous mode [ 912.937468][T18809] bridge0: port 3(syz_tun) entered disabled state [ 914.894281][T25989] Bluetooth: hci9: command tx timeout [ 916.962182][T25989] Bluetooth: hci9: command tx timeout [ 919.221300][T25989] Bluetooth: hci9: command tx timeout [ 931.935638][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.483767][T25989] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 933.968345][T25989] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 933.985317][T25989] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 933.988186][T25989] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 933.990715][T25989] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 934.017651][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 935.331721][T25989] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 939.125812][ T5629] Bluetooth: hci5: command 0x0406 tx timeout [ 941.610322][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 942.484763][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 942.673148][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 942.844363][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 943.108223][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 944.803348][ T5627] Bluetooth: hci1: command tx timeout [ 946.897499][ T5625] Bluetooth: hci1: command tx timeout [ 948.338121][ T8179] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 948.811302][ T5625] Bluetooth: hci2: command tx timeout [ 949.014146][ T5625] Bluetooth: hci1: command tx timeout [ 950.882246][ T5625] Bluetooth: hci2: command tx timeout [ 951.087727][ T5625] Bluetooth: hci1: command tx timeout [ 953.011303][ T5627] Bluetooth: hci2: command tx timeout [ 954.801379][ T5627] Bluetooth: hci4: command 0x0406 tx timeout [ 955.064955][ T5627] Bluetooth: hci2: command tx timeout [ 962.723246][ T5627] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 964.561421][ T32] INFO: task kworker/u8:21:12761 blocked for more than 148 seconds. [ 964.561455][ T32] Not tainted syzkaller #0 [ 964.561466][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 964.561476][ T32] task:kworker/u8:21 state:D stack:22664 pid:12761 tgid:12761 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 964.561535][ T32] Workqueue: netns cleanup_net [ 964.561631][ T32] Call Trace: [ 964.561639][ T32] [ 964.561655][ T32] __schedule+0x17db/0x58f0 [ 964.561982][ T32] ? __pfx___schedule+0x10/0x10 [ 964.562018][ T32] ? schedule+0x90/0x2b0 [ 964.562046][ T32] schedule+0x164/0x2b0 [ 964.562071][ T32] schedule_preempt_disabled+0x13/0x30 [ 964.562094][ T32] __mutex_lock+0x7c1/0x1550 [ 964.562125][ T32] ? __mutex_lock+0x5d4/0x1550 [ 964.562154][ T32] ? rtnl_net_dev_lock+0x257/0x2f0 [ 964.562181][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 964.562219][ T32] ? rtnl_net_dev_lock+0x36/0x2f0 [ 964.562245][ T32] ? rtnl_net_dev_lock+0x36/0x2f0 [ 964.562267][ T32] rtnl_net_dev_lock+0x257/0x2f0 [ 964.562295][ T32] unregister_netdevice_notifier_dev_net+0x2f/0x1a0 [ 964.562320][ T32] ? nsim_destroy+0xe4/0x800 [ 964.562432][ T32] nsim_destroy+0x105/0x800 [ 964.562463][ T32] __nsim_dev_port_del+0x14e/0x200 [ 964.562492][ T32] nsim_dev_reload_destroy+0x288/0x490 [ 964.562525][ T32] nsim_dev_reload_down+0x8a/0xc0 [ 964.562552][ T32] devlink_reload+0x1c5/0x890 [ 964.562659][ T32] ? __pfx_devlink_reload+0x10/0x10 [ 964.562944][ T32] devlink_pernet_pre_exit+0x1ff/0x420 [ 964.562974][ T32] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 964.562998][ T32] ? _raw_spin_unlock+0x28/0x50 [ 964.563042][ T32] ? iput+0xb84/0xf00 [ 964.563116][ T32] ops_undo_list+0x17d/0x8d0 [ 964.563148][ T32] ? __pfx_ops_undo_list+0x10/0x10 [ 964.563176][ T32] ? idr_destroy+0x218/0x290 [ 964.563229][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 964.563287][ T32] cleanup_net+0x572/0x810 [ 964.563316][ T32] ? __pfx_cleanup_net+0x10/0x10 [ 964.563347][ T32] ? rcu_is_watching+0x16/0xb0 [ 964.563382][ T32] ? process_scheduled_works+0x97a/0x1630 [ 964.563421][ T32] process_scheduled_works+0xc3d/0x1630 [ 964.563483][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 964.563518][ T32] ? assign_work+0x3cf/0x5d0 [ 964.563551][ T32] worker_thread+0xa47/0xfb0 [ 964.563609][ T32] kthread+0x38b/0x480 [ 964.563632][ T32] ? __pfx_worker_thread+0x10/0x10 [ 964.563656][ T32] ? __pfx_kthread+0x10/0x10 [ 964.563679][ T32] ret_from_fork+0x514/0xb70 [ 964.563949][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 964.563969][ T32] ? __switch_to+0xc89/0x1420 [ 964.564027][ T32] ? __pfx_kthread+0x10/0x10 [ 964.564050][ T32] ret_from_fork_asm+0x1a/0x30 [ 964.564110][ T32] [ 964.564228][ T32] [ 964.564228][ T32] Showing all locks held in the system: [ 964.564239][ T32] locks held by kworker/u8:0/12: 2, on CPU#0: [ 964.564254][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.564313][ T32] #1: ffffc90000117c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.564367][ T32] locks held by kworker/u8:1/13: 3, last CPU#0: [ 964.564381][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.564435][ T32] #1: ffffc90000127c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.564489][ T32] #2: ffff888052fd8258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 964.564563][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 964.564577][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 964.564643][ T32] locks held by kworker/u8:3/50: 3, last CPU#0: [ 964.564657][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.564945][ T32] #1: ffffc90000bb7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.565000][ T32] #2: ffff88806731b258 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 964.565066][ T32] locks held by kworker/u8:6/143: 3, last CPU#0: [ 964.565081][ T32] #0: ffff888032a20940 ((wq_completion)krds_cp_wq#11/3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.565136][ T32] #1: ffffc90002dcfc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.565190][ T32] #2: ffff88806a54d880 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 964.565295][ T32] locks held by kworker/u8:7/250: 4, last CPU#0: [ 964.565310][ T32] #0: ffff888032313140 ((wq_completion)krds_cp_wq#11/6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.565362][ T32] #1: ffffc9000321fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.565417][ T32] #2: ffff88806a54cf80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 964.565471][ T32] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: inet6_create+0x80/0x1270 [ 964.565568][ T32] locks held by kworker/u8:8/1105: 4, last CPU#1: [ 964.565582][ T32] #0: ffff888032a25140 ((wq_completion)krds_cp_wq#11/0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.565642][ T32] #1: ffffc90004ee7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.565935][ T32] #2: ffff88806a54e180 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 964.565991][ T32] #3: ffff88807d2caae0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 964.566072][ T32] locks held by kworker/u8:9/1113: 4, last CPU#0: [ 964.566086][ T32] #0: ffff888032a20140 ((wq_completion)krds_cp_wq#11/4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.566141][ T32] #1: ffffc90004f87c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.566196][ T32] #2: ffff88806a54d580 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 964.566251][ T32] #3: ffff88805369d360 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 964.566320][ T32] locks held by udevd/4984: 1, last CPU#0: [ 964.566335][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 964.566395][ T32] locks held by getty/5374: 2, on CPU#0: [ 964.566410][ T32] #0: ffff888028f940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 964.566547][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 964.566601][ T32] locks held by kworker/u9:3/5625: 3, on CPU#0: [ 964.566615][ T32] #0: ffff88806807f140 ((wq_completion)hci11){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.566669][ T32] #1: ffffc9000423fc40 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.566967][ T32] #2: ffff888038d98ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_power_on+0x1a2/0x750 [ 964.567053][ T32] locks held by kworker/u9:4/5627: 3, on CPU#0: [ 964.567068][ T32] #0: ffff888054e3a940 ((wq_completion)hci12){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.567122][ T32] #1: ffffc9000425fc40 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.567175][ T32] #2: ffff888038d9cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_power_on+0x1a2/0x750 [ 964.567227][ T32] locks held by kworker/u8:11/8179: 4, last CPU#0: [ 964.567242][ T32] #0: ffff8880737c3140 ((wq_completion)wg-kex-wg1#19){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.567300][ T32] #1: ffffc90003d2fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.567356][ T32] #2: ffff8880334b1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 964.567482][ T32] #3: ffff88803148e640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 964.567540][ T32] locks held by kworker/u8:13/8183: 3, last CPU#0: [ 964.567555][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.567609][ T32] #1: ffffc90004e07c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.567666][ T32] #2: ffff88804719f258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 964.567973][ T32] locks held by kworker/u8:14/8185: 4, last CPU#0: [ 964.567988][ T32] #0: ffff888032312140 ((wq_completion)krds_cp_wq#11/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.568040][ T32] #1: ffffc90003c07c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.568093][ T32] #2: ffff88806a54cc80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 964.568147][ T32] #3: ffff88807cfd0fe0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 964.568205][ T32] locks held by kworker/u8:15/12750: 3, last CPU#1: [ 964.568218][ T32] #0: ffff888032a25940 ((wq_completion)krds_cp_wq#11/1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.568269][ T32] #1: ffffc90006167c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.568323][ T32] #2: ffff88806a54de80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 964.568379][ T32] locks held by kworker/u8:16/12751: 3, on CPU#0: [ 964.568393][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.568447][ T32] #1: ffffc900035efc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.568501][ T32] #2: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 964.568611][ T32] locks held by kworker/u8:17/12752: 3, last CPU#0: [ 964.568626][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.568679][ T32] #1: ffffc9000682fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.568974][ T32] #2: ffff88802b175258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 964.569037][ T32] locks held by kworker/u8:20/12755: 2, last CPU#0: [ 964.569051][ T32] #0: ffff888032006940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.569105][ T32] #1: ffffc900075efc40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.569160][ T32] locks held by kworker/u8:21/12761: 6, on CPU#0: [ 964.569175][ T32] #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.569228][ T32] #1: ffffc9000a60fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.569281][ T32] #2: ffffffff90244b88 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 964.569333][ T32] #3: ffff888058ee6128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 964.569385][ T32] #4: ffff888058ee3258 (&devlink->lock_key#9){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 964.569442][ T32] #5: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 964.569493][ T32] locks held by kworker/u8:22/12762: 5, last CPU#1: [ 964.569507][ T32] #0: ffff888032314140 ((wq_completion)krds_cp_wq#11/5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.569561][ T32] #1: ffffc9000a63fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.569614][ T32] #2: ffff88806a54d280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 964.569669][ T32] #3: ffff88807cfd45e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: gate_timer_func+0x2b/0x450 [ 964.570029][ T32] #4: ffffffff9acae5b8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_deactivate+0x9a/0x250 [ 964.570129][ T32] locks held by kworker/u8:23/12763: 4, last CPU#0: [ 964.570143][ T32] #0: ffff8880737c5940 ((wq_completion)wg-kex-wg0#19){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.570203][ T32] #1: ffffc9000aa27c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.570257][ T32] #2: ffff888029631440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 964.570316][ T32] #3: ffff888067206640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 964.570375][ T32] locks held by kworker/u8:24/12765: 3, last CPU#0: [ 964.570389][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.570442][ T32] #1: ffffc9000689fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.570496][ T32] #2: ffff888055800800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 964.570545][ T32] locks held by kworker/u8:25/12766: 3, on CPU#0: [ 964.570560][ T32] #0: ffff888032e58940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.570614][ T32] #1: ffffc9000aa37c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.570669][ T32] #2: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 964.570988][ T32] locks held by kworker/u8:26/12768: 3, last CPU#1: [ 964.571003][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 964.571056][ T32] #1: ffffc9000aa47c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0} [ 964.802667][ T5629] Bluetooth: hci11: command 0x1003 tx timeout [ 964.856029][ T5625] Bluetooth: hci11: Opcode 0x1003 failed: -110 [ 965.031673][ T5627] Bluetooth: hci12: Opcode 0x0c03 failed: -110 [ 965.661901][ T5627] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 965.811735][ T5627] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 965.814066][ T5627] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 967.013755][ T32] , at: process_scheduled_works+0x97a/0x1630 [ 967.013796][ T32] #2: ffff888047d70800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 967.013852][ T32] locks held by kworker/u8:27/12771: 3, last CPU#0: [ 967.013868][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 967.013924][ T32] #1: ffffc9000aa67c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 967.013979][ T32] #2: ffff888068a8a258 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 967.014044][ T32] locks held by kworker/u8:29/12775: 4, last CPU#0: [ 967.014059][ T32] #0: ffff888032a27140 ((wq_completion)krds_cp_wq#11/2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 967.014332][ T32] #1: ffffc9000ceffc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 967.014386][ T32] #2: ffff88806a54db80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 967.014440][ T32] #3: ffff888053699d60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 967.014495][ T32] locks held by kworker/u8:30/12776: 3, last CPU#0: [ 967.014509][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 967.014800][ T32] #1: ffffc9000cf17c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 967.014854][ T32] #2: ffff88803b9a0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 967.014902][ T32] locks held by kworker/u8:31/12777: 3, last CPU#0: [ 967.014916][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 967.014968][ T32] #1: ffffc900071c7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 967.015022][ T32] #2: ffff88803d190800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 967.015070][ T32] locks held by kworker/u8:34/12780: 1, last CPU#0: [ 967.015085][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: process_scheduled_works+0x97a/0x1630 [ 967.015146][ T32] locks held by syz-executor/17899: 2, on CPU#0: [ 967.015160][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 967.015297][ T32] #1: ffffffff8ed62ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 967.015369][ T32] locks held by kworker/0:27/24059: 2, last CPU#0: [ 967.015383][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 967.015436][ T32] #1: ffffc9000d8bfc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 967.015490][ T32] locks held by kworker/0:28/24061: 3, on CPU#0: [ 967.015504][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 967.015792][ T32] #1: ffffc9000dba7c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 967.015867][ T32] #2: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 967.015979][ T32] locks held by syz-executor/25990: 1, on CPU#1: [ 967.015995][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 967.016094][ T32] locks held by syz-executor/25997: 1, on CPU#0: [ 967.016110][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 967.016168][ T32] locks held by syz-executor/26002: 1, on CPU#1: [ 967.016185][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 967.379198][ T5627] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 967.715798][ T5627] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 967.941362][ T32] locks held by syz-executor/26016: 1, last CPU#0: [ 967.941389][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 967.941481][ T32] locks held by syz-executor/26027: 1, last CPU#0: [ 967.941497][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 967.941548][ T32] locks held by syz-executor/26030: 1, last CPU#0: [ 967.941562][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 967.941848][ T32] locks held by syz-executor/26033: 1, last CPU#0: [ 967.941863][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x26/0x2b0 [ 967.941935][ T32] locks held by syz-executor/26054: 1, on CPU#1: [ 967.941949][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 967.942008][ T32] locks held by syz-executor/26067: 2, last CPU#0: [ 967.942022][ T32] #0: ffff8880557dc378 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 967.942089][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 967.942140][ T32] locks held by syz-executor/26073: 4, last CPU#0: [ 967.942155][ T32] #0: ffffffff8ee363b0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 967.942213][ T32] #1: ffff88807ee6c378 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 967.942276][ T32] #2: ffff88801b09e9b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 967.942337][ T32] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 967.942390][ T32] locks held by dhcpcd/26081: 1, last CPU#0: [ 967.942404][ T32] #0: ffff88802a1129f8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 967.942459][ T32] locks held by syz-executor/26082: 1, on CPU#1: [ 967.942472][ T32] #0: ffff888038d98ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_open+0x1f3/0x360 [ 967.942574][ T32] locks held by dhcpcd/26083: 1, on CPU#0: [ 967.942833][ T32] #0: ffff88802676a260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 967.942911][ T32] locks held by syz-executor/26084: 1, on CPU#0: [ 967.942926][ T32] #0: ffff888038d9cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_open+0x1f3/0x360 [ 967.942978][ T32] locks held by dhcpcd/26085: 1, on CPU#1: [ 967.942992][ T32] #0: ffff88805318c260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 967.943043][ T32] locks held by dhcpcd/26087: 2, last CPU#0: [ 967.943057][ T32] #0: ffff888034367bc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 967.943111][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 967.943165][ T32] locks held by syz-executor/26088: 2, last CPU#0: [ 967.943179][ T32] #0: ffff888076078948 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 967.943242][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x6c/0x430 [ 968.905485][ T5627] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 969.277545][ T5627] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 969.435458][ T32] [ 969.435473][ T32] ============================================= [ 969.435473][ T32] [ 969.435482][ T32] NMI backtrace for cpu 0 [ 969.435500][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 969.435523][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 969.435535][ T32] Call Trace: [ 969.435544][ T32] [ 969.435556][ T32] dump_stack_lvl+0xe8/0x150 [ 969.435589][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 969.435689][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 969.435723][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 969.435757][ T32] sys_info+0x135/0x170 [ 969.435809][ T32] watchdog+0xfd7/0x1030 [ 969.435845][ T32] ? watchdog+0x1c7/0x1030 [ 969.435885][ T32] kthread+0x38b/0x480 [ 969.435907][ T32] ? __pfx_watchdog+0x10/0x10 [ 969.435926][ T32] ? __pfx_kthread+0x10/0x10 [ 969.435948][ T32] ret_from_fork+0x514/0xb70 [ 969.435972][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 969.435989][ T32] ? __switch_to+0xc89/0x1420 [ 969.436019][ T32] ? __pfx_kthread+0x10/0x10 [ 969.436041][ T32] ret_from_fork_asm+0x1a/0x30 [ 969.436085][ T32] [ 969.436094][ T32] Sending NMI from CPU 0 to CPUs 1: [ 969.436122][ C1] NMI backtrace for cpu 1 [ 969.436139][ C1] CPU: 1 UID: 0 PID: 12776 Comm: kworker/u8:30 Not tainted syzkaller #0 PREEMPT(full) [ 969.436160][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 969.436173][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 969.436194][ C1] RIP: 0010:check_preemption_disabled+0x1/0xd0 [ 969.436222][ C1] Code: 20 a0 6d 8c 48 c7 c6 60 a0 6d 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 65 8b 05 db 2d af 07 65 48 8b 0d ab 2d af 07 85 c9 [ 969.436238][ C1] RSP: 0018:ffffc90000a18e40 EFLAGS: 00000046 [ 969.436254][ C1] RAX: 0000000000000000 RBX: ffffc90000a18e68 RCX: 8000000000000102 [ 969.436278][ C1] RDX: 0000000000000000 RSI: ffffffff8c08ff80 RDI: ffffffff8c6da080 [ 969.436291][ C1] RBP: 0000000000000000 R08: ffffffff907a447f R09: 1ffffffff20f488f [ 969.436304][ C1] R10: dffffc0000000000 R11: fffffbfff20f4890 R12: 0000000000000000 [ 969.436317][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 969.436331][ C1] FS: 0000000000000000(0000) GS:ffff888124dce000(0000) knlGS:0000000000000000 [ 969.436348][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 969.436362][ C1] CR2: 00007f7faacdab45 CR3: 0000000077300000 CR4: 00000000003526f0 [ 969.436382][ C1] Call Trace: [ 969.436390][ C1] [ 969.436399][ C1] sysvec_apic_timer_interrupt+0x1c/0xc0 [ 969.436425][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 969.436466][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 969.436489][ C1] Code: f7 e8 2d 48 bb f5 f7 c3 00 02 00 00 74 05 e8 90 92 e7 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 94 55 ac f5 65 48 8b 05 0c 91 ac 07 48 85 c0 74 18 5b 41 5e e9 [ 969.436506][ C1] RSP: 0018:ffffc90000a18f18 EFLAGS: 00000206 [ 969.436524][ C1] RAX: 0000000000000006 RBX: 0000000000000283 RCX: 8000000000000101 [ 969.436538][ C1] RDX: 0000000000000002 RSI: ffffffff8e41405d RDI: 0000000000000001 [ 969.436552][ C1] RBP: 0000000000000001 R08: ffffffff907a447f R09: 1ffffffff20f488f [ 969.436565][ C1] R10: dffffc0000000000 R11: fffffbfff20f4890 R12: 0000000000000006 [ 969.436578][ C1] R13: 0000000000000008 R14: ffff8880b8728280 R15: 0000000000000020 [ 969.436601][ C1] handle_softirqs+0x226/0x860 [ 969.436627][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 969.436654][ C1] __irq_exit_rcu+0xcb/0x220 [ 969.436676][ C1] irq_exit_rcu+0x9/0x30 [ 969.436698][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 969.436719][ C1] [ 969.436726][ C1] [ 969.436734][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 969.436753][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x5b/0x110 [ 969.436781][ C1] Code: 48 85 c0 0f 84 c7 00 00 00 41 57 41 56 41 54 53 48 8d 0c 4d 01 00 00 00 48 8b 54 24 20 65 4c 8b 05 c2 46 cd 11 45 31 c9 eb 0c <49> ff c1 4c 39 c8 0f 84 93 00 00 00 4e 8b 54 ce 10 65 4c 8b 1d ac [ 969.436796][ C1] RSP: 0018:ffffc9000cf17078 EFLAGS: 00000293 [ 969.436810][ C1] RAX: 0000000000000028 RBX: 000000000000000a RCX: 0000000000000001 [ 969.436822][ C1] RDX: ffffffff8b64ea07 RSI: ffffffff905075b0 RDI: 0000000000000001 [ 969.436835][ C1] RBP: ffffc9000cf174f0 R08: ffff888053169f40 R09: 0000000000000024 [ 969.436849][ C1] R10: 00000000000000d6 R11: 0000000000000000 R12: ffff8880526b277c [ 969.436861][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880526b279c [ 969.436879][ C1] ? _ieee802_11_parse_elems_full+0x8d7/0x48f0 [ 969.436971][ C1] _ieee802_11_parse_elems_full+0x8d7/0x48f0 [ 969.436997][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 969.437057][ C1] ? __pfx__ieee802_11_parse_elems_full+0x10/0x10 [ 969.437087][ C1] ? cfg80211_find_elem_match+0x1bf/0x200 [ 969.437135][ C1] ieee802_11_parse_elems_full+0xfd1/0x2de0 [ 969.437164][ C1] ? unwind_next_frame+0x8f/0x2550 [ 969.437188][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 969.437213][ C1] ? unwind_next_frame+0x8f/0x2550 [ 969.437235][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 969.437253][ C1] ? arch_stack_walk+0x11b/0x150 [ 969.437285][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 969.437312][ C1] ? stack_trace_save+0xa9/0x100 [ 969.437334][ C1] ieee80211_ibss_rx_queued_mgmt+0x509/0x2c40 [ 969.437393][ C1] ? kasan_save_track+0x4f/0x80 [ 969.437421][ C1] ? kasan_save_track+0x3e/0x80 [ 969.437441][ C1] ? kasan_save_free_info+0x40/0x50 [ 969.437468][ C1] ? __kasan_slab_free+0x5c/0x80 [ 969.437490][ C1] ? ieee80211_iface_work+0x259/0x1010 [ 969.437535][ C1] ? cfg80211_wiphy_work+0x29e/0x420 [ 969.437552][ C1] ? process_scheduled_works+0xc3d/0x1630 [ 969.437575][ C1] ? worker_thread+0xa47/0xfb0 [ 969.437604][ C1] ? __lock_acquire+0x747/0x2de0 [ 969.437624][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 969.437650][ C1] ? irqentry_exit+0x218/0x910 [ 969.437671][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 969.437692][ C1] ? irqentry_exit+0x218/0x910 [ 969.437711][ C1] ? trace_irq_disable+0x3b/0x140 [ 969.437734][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 969.437758][ C1] ? kcov_remote_start+0x9c/0x7e0 [ 969.437780][ C1] ? kcov_remote_start+0x1a6/0x7e0 [ 969.437802][ C1] ieee80211_iface_work+0x78a/0x1010 [ 969.437831][ C1] cfg80211_wiphy_work+0x29e/0x420 [ 969.437850][ C1] ? process_scheduled_works+0x97a/0x1630 [ 969.437873][ C1] process_scheduled_works+0xc3d/0x1630 [ 969.437909][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 969.437936][ C1] ? assign_work+0x3cf/0x5d0 [ 969.437960][ C1] worker_thread+0xa47/0xfb0 [ 969.437996][ C1] kthread+0x38b/0x480 [ 969.438013][ C1] ? __pfx_worker_thread+0x10/0x10 [ 969.438035][ C1] ? __pfx_kthread+0x10/0x10 [ 969.438053][ C1] ret_from_fork+0x514/0xb70 [ 969.438072][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 969.438089][ C1] ? __switch_to+0xc89/0x1420 [ 969.438114][ C1] ? __pfx_kthread+0x10/0x10 [ 969.438133][ C1] ret_from_fork_asm+0x1a/0x30 [ 969.438167][ C1] [ 970.217870][ T5627] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 970.346223][ T5627] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 970.614219][ T5627] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 971.391805][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 972.617187][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 972.626329][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 972.636500][ T32] Call Trace: [ 972.639805][ T32] [ 972.642759][ T32] vpanic+0x56d/0xa60 [ 972.646783][ T32] ? __pfx___schedule+0x10/0x10 [ 972.651663][ T32] ? __pfx_vpanic+0x10/0x10 [ 972.656205][ T32] panic+0xc5/0xd0 [ 972.659956][ T32] ? __pfx_panic+0x10/0x10 [ 972.664390][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 972.669975][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 972.675497][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 972.681839][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 972.688124][ T32] watchdog+0x1030/0x1030 [ 972.692485][ T32] ? watchdog+0x1c7/0x1030 [ 972.696923][ T32] kthread+0x38b/0x480 [ 972.701020][ T32] ? __pfx_watchdog+0x10/0x10 [ 972.705714][ T32] ? __pfx_kthread+0x10/0x10 [ 972.710416][ T32] ret_from_fork+0x514/0xb70 [ 972.715232][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 972.720363][ T32] ? __switch_to+0xc89/0x1420 [ 972.725060][ T32] ? __pfx_kthread+0x10/0x10 [ 972.729759][ T32] ret_from_fork_asm+0x1a/0x30 [ 972.734558][ T32] [ 972.737908][ T32] Kernel Offset: disabled [ 972.742238][ T32] Rebooting in 86400 seconds..