last executing test programs: 4m9.897786075s ago: executing program 3 (id=4059): r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x80800) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000080)=0x5) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f00000000c0)) bind$llc(r0, &(0x7f0000000100)={0x1a, 0x5, 0x3, 0x5, 0xe, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xc2}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x20}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x80}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x96}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x20}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x9c}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x8051) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x830) connect(r0, &(0x7f0000000540)=@in6={0xa, 0x4e20, 0x172e051, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20a}, 0x80) r8 = socket$inet6(0xa, 0x80000, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x2, 0xf79d, 0x5, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x40, 0x0, 0x6}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x20, &(0x7f0000000a00)={&(0x7f0000000940)=""/98, 0x62, 0x0, &(0x7f00000009c0)=""/50, 0x32}}, 0x10) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c80)={0x6, 0x12, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@exit, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @alu={0x7, 0x1, 0x5, 0x7, 0x8, 0x2, 0xfffffffffffffff0}]}, &(0x7f0000000b40)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000b80)=""/4096, 0x41000, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001b80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001bc0)={0x3, 0x0, 0xc141, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001c00)=[0x1], &(0x7f0000001c40)=[{0x3, 0x5, 0xf, 0x7}], 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001dc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001d40), &(0x7f0000001d80)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001e80)={0x16, 0x11, &(0x7f0000000680)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], &(0x7f0000000740)='syzkaller\x00', 0x4, 0x4b, &(0x7f0000000780)=""/75, 0x40f00, 0x42, '\x00', r10, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0x8, 0x7fffffff, 0xfffffffd}, 0x10, r11, r12, 0x3, &(0x7f0000001e00)=[r13], &(0x7f0000001e40)=[{0x0, 0x2, 0x3, 0xa}, {0x1, 0x1, 0x8, 0x4}, {0x0, 0x2, 0xf, 0x6}], 0x10, 0x9}, 0x94) r14 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r14, 0x0, 0xcd, &(0x7f0000001f40)={@remote, @multicast1, 0x1, "79aabb58833c1288c25cb81a88a876a641a4cfe817482fcd4a78148a56221b38", 0x9, 0x5, 0x9, 0x9}, 0x3c) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000001fc0), r4) sendmsg$NFC_CMD_VENDOR(r4, &(0x7f0000002300)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002000)={0x284, r15, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_VENDOR_DATA={0xa6, 0x1f, "5fce6110c1a078d78c2843fcd89d73668758eb8039554e54b24ff1f0684fa4929da5d32c64e3dfd7e36243caf2d33bfd593dee5a51683b0e771b598926b64dc06cbcb5208a0f510b6aa8eea21e5c68848b050c81b285ce73b2e4337c3cd9a8a782f37932aa41eab98010f169140376c437e5da29662cdc5975f9705cb238604888b20314405e77911dc637c03ed4a724bc81e2b9d7413a16488b247fc39a9fa4c7cf"}, @NFC_ATTR_VENDOR_DATA={0xa8, 0x1f, "43c7f95c53cbdd5a98758ffd5d2be273d3ff8469e1044b552e8b7fbe6d23c491905a0fc8090b4dde835d7aad4b048c214d52e413f050b766ffca8a4fbfa6497dec8777ad7e28f018d5a1b42b9d788e78ccb68968d8f2eafd662386a3bfe18f74a98f87ba58de519d21b9dc679e565a398506058b8a4b46a43a11cee531cb721c7f866782bc836fab2bde7a55b02d9d0f32ca9277c26d7a9bfabc805552f0c76c9185efe1"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x6}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x628}, @NFC_ATTR_VENDOR_DATA={0xee, 0x1f, "758f0245d2ddae5ef41c4ab1991f1f30ac27ef3b38cecde541754a20db08ab8cba056580bef6b6c2f10f87ae6407c605cad98537ab432ac35d63eb2a6038b2c04df2c2c63300a0bc7de3d9179f7903a08c494b774db42e07f84fee46cb4dfe149c5ccf914113411a263e4c390700516cd8f36426b32bc426608fe343688a3a5a721945119a7a975a3340cdba1db062c7c4f5d8493eccd9b6e80058bfa12c955366fd64fc529ca2701a415c78b176f742f297f24abf4db74f239ba6f77bb836517aa5104bf8477421f9ee90cccb02bca1a4eb0f18554518d0308afb5982cac7f3994af1287aa0e1bd28f8"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}]}, 0x284}, 0x1, 0x0, 0x0, 0x8040}, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000002340)={'macvtap0\x00'}) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$mptcp(&(0x7f00000023c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000002400)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r16, &(0x7f0000002600)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0x98, r17, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r18}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x4004088}, 0x8001) 4m8.821985707s ago: executing program 3 (id=4065): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, 0x0, 0x7, 0xf, &(0x7f0000000140)=""/15, 0x40e00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x609}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03100001000000", @ANYRES32, @ANYBLOB="00000000000000001f000000008000ff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x7f, @mcast1, 0x1}, @in={0x2, 0x4e23, @rand_addr=0x64010101}], 0x2c) r3 = socket$inet_sctp(0x2, 0x7, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000180)=0xfdf, 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0xfd, 0x0, 0x2a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x40, 0x40, 0xfffffffc, 0x8}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000340)="a9", 0x0}, 0x20) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x448, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x418, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffc0, 0x5, 0x3, 0x5, 0x0, {0x2, 0x0, 0x6, 0x3d, 0x2, 0x80000000}, {0x20, 0x3, 0x8, 0xd, 0x963d, 0x5}, 0x1, 0x6, 0x4f}}]}, @TCA_BASIC_EMATCHES={0x244, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xe4, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xcb40, 0x8, 0xe}, {0xffffffffffffffff, 0x1, 0x4}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x1ff}, {0x5, 0xc, 0x2, 0xf}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x1000, 0x2, 0xdab}, {0x2, 0x2, 0x1, "bb31"}}}, @TCF_EM_IPT={0x3c, 0x3, 0x0, 0x0, {{0x7, 0x9, 0x1}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CONTAINER={0x20, 0x2, 0x0, 0x0, {{0x9, 0x0, 0x1}, "d829ff8e933c2f7adcaee59d634b7cbb2c66fe"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{}, {{0x2, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x9368, 0x9, 0x1}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xced3, 0x3, 0xf}, {0xc7b, 0x0, 0x4, 0x9}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x80f6}}, @TCA_EMATCH_TREE_LIST={0xb4, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x68, 0x8, 0x8}, {0xffffffffffffffff, 0x6, 0x7}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x3, 0x2}, {0xf2b, 0x10, 0x1, 0x9}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1000, 0x8, 0x9}, {0xffffffffffffffff, 0x4}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4, 0x1, 0x2}, {0x7f, 0x0, 0x5, 0x0, 0x0, 0x1}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x800, 0x2, 0x40}, {0x4, 0x2, 0x1, "b7a2"}}}, @TCF_EM_CONTAINER={0x48, 0x3, 0x0, 0x0, {{0x5, 0x0, 0x1}, "6abc799312c560083f6681c3c3679ddd34b5b723c0149b5dffc6b9dabd81cec098e9cc397c868346fa907f25946372dd1cd785258fe78b3e9d5c6f"}}]}, @TCA_EMATCH_TREE_LIST={0x88, 0x2, 0x0, 0x1, [@TCF_EM_META={0x3c, 0x1, 0x0, 0x0, {{0x2, 0x4, 0x3}, [@TCA_EM_META_RVALUE={0x1b, 0x3, [@TCF_META_TYPE_VAR="46db615e35", @TCF_META_TYPE_VAR="00f0", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0xdd, 0x1}, {0x0, 0xb6, 0x2}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x600, 0x1, 0x5}, {0x4, 0x100, 0x10, 0x5, 0x3, 0x1, 0x2}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1, 0x8, 0x6}, {0x2, 0x3, 0x4}}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x8, 0x2, 0x9}, {0x7, 0x0, 0x2}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x5, 0x8, 0x8}, {0x0, 0x1, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffe0}}, @TCA_BASIC_ACT={0x180, 0x3, [@m_tunnel_key={0x17c, 0x10, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0xfffffff8, 0x6, 0x3, 0x3}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0xef, 0x6, "47a7254d00ca6611d461ce5f1ba4391867c7d7558a8682812f78f0f3b3835e3d68bbad2177f4adc3d22a2d19fbff44fdacb436d91a237a6d2623d1ba95c3db7d7876832d5ef5fa14611ab967c0c446756ad2a0cc299964284f9498bb645f335d814456b3a65e72b99d75e63a67993705733cf4cec0994c745e4dab3faccd57c5056ede00d317b10f54fd07260cc980ce8dd1fa1a956d0401c2b6e3d45e35b3c1f70e589e82320a69cd9c2f5f7077139139a2d8f872274105221354f2eca27e8d2b9102df160eed76337491a34bc587138f33878d80e8a4eff9fa8ebb2445fb694ac596ab0f617033e4b48c"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xffe0}}]}}]}, 0x448}, 0x1, 0x0, 0x0, 0x4894}, 0x2) sendto$llc(r5, &(0x7f0000000200)="0b22c07c62", 0x5, 0x4000040, &(0x7f0000000240)={0x1a, 0x103, 0x9, 0x7, 0x6, 0x9, @link_local}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000640)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000740)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x170, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4e20, 0x71c, 0x4e21, 0xd, 0x2, 0x0, 0x20, 0x21, 0x0, r7}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1, {0xfffffffffffffffa, 0xf, 0x6, 0x2, 0x8251c, 0xffffffffffff37a6, 0xfffffffffffffffc, 0x1}, {0xffffffffffffffff, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x4003fe}, 0x70bd29, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}, @lifetime_val={0x24, 0x9, {0x2, 0xfff, 0x8000000000000000, 0x9}}, @mark={0xc, 0x15, {0x35075c, 0x4}}]}, 0x170}}, 0x844) 4m7.48531697s ago: executing program 0 (id=4067): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100273d7000ffdb7132172f0000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000100000005000c0000000000"], 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000008c0)={'macvlan0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x3, "6bd5cd02564f02baa6f0bebffdfae62afcb1fd7181456afb25ec29769ccfbab0", "3fd06d696e33edf2548c47a6ff34f2e528f318224e461f3782aae3d6a86be6b4", "168bc75f89267387dfe8f726649ab412c8ca4807008b540eccf6cbc20509a46a", "d010df955837f8ba675efba4d90d6941354f8b57b5e0f933bebd023dfd8556c7", "4c5138db1c62592d6f60fe50e538dc820105b16582d6dee0c3fd5fa47b3a23c0", "e9115c6266848f73be343ab4", 0x3, 0x9, 0x3, 0xfa, 0x5}}) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r8, 0x1) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r6, 0x1, 0x70bd36, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd5f}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x5a}}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 4m6.996398464s ago: executing program 4 (id=4068): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c", 0x5, 0x840, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00090005"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async) getsockopt(r3, 0x111, 0x6, 0x0, &(0x7f0000000080)) (async, rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x607, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x24, 0x1d, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4, 0x10}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) (rerun: 32) 4m6.675409177s ago: executing program 4 (id=4070): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f00000004c0)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e24, 0x1}}, 0x80, 0x0}, 0x2400c097) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x807, 0xaf85) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000130001080000000089840fd99bc4c8167030ec7a75fb9d5371bed0e9a98c3196d5b3ef93afdd95ed52b9ea0000000000000000"], 0x14}], 0x1}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x24}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) listen(r2, 0x5) setsockopt$inet_tcp_int(r2, 0x6, 0x3, &(0x7f0000000080)=0xa, 0x4) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r6, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0xfffe, 0x8, @private0, 0x805}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="280000000000000029000000390000008402020100edff00ff02000000000000000000000000310118000000000000002900000037"], 0x40}, 0x24004800) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a0000000000000005000b00"], 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40008001}, 0x850) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r9 = openat$cgroup_freezer_state(r8, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r9, &(0x7f0000000040)='FROZEN\x00', 0x7) sendfile(r9, r9, 0x0, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r10, 0x0, 0xffffffffffffffd1, 0x81) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtfilter={0x338, 0x2c, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffff}, {0x1, 0x5}, {0xf, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x300, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x8, 0xc}}, @TCA_BASIC_EMATCHES={0x2f4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x23c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0x8}, {{0x2, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x4, 0x2, 0xec12}, {0x7f, 0x4, 0x1, "748b6ea5"}}}, @TCF_EM_CONTAINER={0x100, 0x3, 0x0, 0x0, {{0x5f, 0x0, 0x6}, "9b142a318c5eeae176d6ae0cd809ccb36cfc58d3b7c4466a322358faef9aea1169807c3a27006ada57d21886013f4a7b772fa02ce828597ae6d1b9309d3b9f7e7da99fb24f598ac32ed143e4277d3a4308814d82136985d07a6dec9744895fa0a3ca77fa033f19431f36192d95f148b1e6601539d947d55390adc5afddc87e602e57b409133e68f95665ca6b0af5574163fdfba5c8ab821211cfc71a5f0c096028cbf71df6ac6c90501a7e1c8a79f209c3b690614db00c76fc9d362ea188227774889e6c0982c67daa3821abde02d431642afff6a5804685be3ab65b6b51b289d706a8099cdfa5f3547a71a21597fa3f19da7ac8"}}, @TCF_EM_CONTAINER={0xac, 0x3, 0x0, 0x0, {{0x1, 0x0, 0xa0e5}, "073b3f5187b6d610b6d28e37b70a1d0135f6bccff6eb41bdaf864da7cab787dd2949a066ef2673f3d89067de6ad2d1814e9e4e0c3452b2a86a935c4accd68e80dde391cfb8b3388b330f90b05d4068294e50584894795c3c6e043d60aa4c4da03a6315588bb62372a171e54a4c1023c915cc9efc681247dc6e543df1f17011134633582e115eec7df2e0b9a03886f3813ab46e9fbe17462b1579cce916"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x3}, {0x10000, 0x1, 0x3, 0x1, 0xa, 0x1, 0x1}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0xfffa}, {0x400, 0x6, 0xffffffff, 0x6}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x19c7, 0x3, 0x2}, {0x401, 0x9, 0xfffffff5, 0xd370}}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x7, 0x9, 0xa975}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x94, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x8}, {0x5, 0x0, 0x6, 0x9}}}, @TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x9}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xc}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}, @TCF_EM_IPT={0x48, 0x1, 0x0, 0x0, {{0x6, 0x9, 0xfff9}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0x31, 0x5, "578b2d7147619e0cea4102f6897c0f7f725896baeaf3704db4ecea63f8aa33d277a65858a7fcefcf8c5c000000"}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff9}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x338}, 0x1, 0x0, 0x0, 0x8890}, 0x4c040) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r11, 0x8080583a, &(0x7f0000000400)={0x10000, 0xffffffff, 0x200, 0x5256, 0xbde, 0x0, 0x1}) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) 4m6.257918924s ago: executing program 1 (id=4071): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8000038, 0x3, 0x320, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x5, 0x0, 0xa, 0xfffffff9, 'pptp\x00', 'syz0\x00', {0x7}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x7fffffff, 0xfffffffc, 'pptp\x00', {0x80000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x3}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0xfff}]}}}]}, 0x4c}}, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x3}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0xfff}]}}}]}, 0x4c}}, 0x4) 4m6.141756991s ago: executing program 3 (id=4072): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x48004) 4m5.909611155s ago: executing program 0 (id=4074): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x18, r1, 0xf03, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x880) 4m5.745673657s ago: executing program 4 (id=4075): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2100, 0x0) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000180)=0xfffffffc, 0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x288001, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x82, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c20f0000aaaaaaaaaa008100000086dd60f53a0400483a00fe8000000000000000000000000000bbff02000000000000000000000000000102009078000005006050835900000000fc012000000000000000000000000000ff0000000000000000000000000000003a0100000000000007a300000000000080ff000000000000"], 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4528622b97766ab3, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0x8, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x4000}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@deltaction={0x9c, 0x31, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1672}}, {0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2940}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}}, &(0x7f00000004c0)='syzkaller\x00', 0x6, 0x67, &(0x7f0000000500)=""/103, 0x41100, 0x1, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xa, 0xfffffff7, 0x5}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000006c0)=[{0x5, 0x2, 0xa, 0x2}, {0x3, 0x5, 0xd, 0x1}, {0x0, 0x2, 0xf, 0x7}, {0x2, 0x2, 0x0, 0x3}], 0x10, 0x1000}, 0x94) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x87, @loopback={0xfec0ffffffffffff, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xfffffffc}, 0x1c) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r8, &(0x7f00000000c0)={0x0, 0x2006a65402741c92, &(0x7f0000000080)={&(0x7f0000000680)={0x28, 0x0, 0x4, 0x80000, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc}]}, 0xffffffffffffff24}, 0x1, 0x0, 0x0, 0x24004081}, 0x40000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, [@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x36}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) 4m5.634525592s ago: executing program 1 (id=4077): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) (async, rerun: 64) r1 = socket(0x2, 0x80805, 0x0) (rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r2, 0xff, 0x1}, 0x8) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) (async) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000100)={'pimreg1\x00', {0x2, 0x4e22, @multicast2}}) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async) shutdown(r0, 0x0) 4m5.453782494s ago: executing program 3 (id=4078): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='illinois', 0x8) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000240)="a68770a2", 0x4, 0x24040001, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0xd}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r4, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r5, 0x0, 0x0, 0x20000040, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r6, 0x0, 0x32600) mmap(&(0x7f0000b16000/0x3000)=nil, 0x3000, 0x2000001, 0x4000010, r6, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, 0x0, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x337) shutdown(r3, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x40c0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r7, 0x8931, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x51}, 0x2400c000) 4m5.434718467s ago: executing program 0 (id=4079): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x5c, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0xffffff79, 0x1, [@m_connmark={0x0, 0x1e, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x0, 0x1, {{0x1, 0x9, 0xffffffffffffffff, 0x7fffffff, 0x1}, 0x71}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x2, 0x7, 0x6, 0xd, 0x5}, 0x9}}]}, {0x0, 0x6, "cee554b4457fa901eb6d718325acac54c4b046f4124fd05988840f62fb0ced17f30228d41fcf9dc28f01c446c7ac5feeefc239ac8dd80f3795f27fcebc6549eb2b1e936b0da8856e4b07427ace5b7bcbb0ae4e4754c4db42d32a6b569531d1b2357c0e9c24523e"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x24040001) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000ee3cb95a763fa3954a7693e4d8398b89f24db24793aeb5ceaf69ed736458baf2935f124c2c14d5de21b84cc22bdd5c1e23d25e52e6feb6430fc6ccfb27ace76fbf08135c0d5be9ff8d8be7d67a632ddd594360e18a8af4dee6a83118c9607563448a8933e3e6e55743dfebba87a76f943f2882d76e3e2c02eb86709f235671a5bb58f5287f875a707a7d9a0bfcb6e6d816f541d1591e9cc3011bbbef77b6ce9dd2ce0dfab6560eb89d69f51ed7247ae6542edceadd8ffc7419f2af4988f474abdf7e414f0593a574394c65"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x26, 0x101, 0x70bd25, 0x25dfdbfb, {0x11}, [@typed={0x7, 0x167, 0x0, 0x0, @binary="17462d"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24008080) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="080001"], 0x90}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) 4m4.353923776s ago: executing program 0 (id=4081): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="cdbe3bb613e8a2dd400c04f1a7a74336ae1425c3c18cfe93f7ec35faa739ded2c75830981b6c3db1923fe96a3572afaa5af1bdf582f0ab5da1b6ae3345bc9af14dd9394a2b97b712f03539d7a791cc7797cc4e854a3f1cb5b39ade1892165f34e934581970ae414305ff9e24d5fe71b791ff6d24e494540df7fa2cde6c89a05e2577a4358f86925b78be0e2dfdded62522e291406db071c1c3c2e494d7566c3f6c3374f91b0ec7e2a69a07f282cd080c36b74f6e932a788b925902b18e0c5756ce544321ce9393e56a7818be7db341", @ANYRES16=0x0, @ANYBLOB="000329bd7000fddbdf251000000005000f000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x24000004) (async) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="cdbe3bb613e8a2dd400c04f1a7a74336ae1425c3c18cfe93f7ec35faa739ded2c75830981b6c3db1923fe96a3572afaa5af1bdf582f0ab5da1b6ae3345bc9af14dd9394a2b97b712f03539d7a791cc7797cc4e854a3f1cb5b39ade1892165f34e934581970ae414305ff9e24d5fe71b791ff6d24e494540df7fa2cde6c89a05e2577a4358f86925b78be0e2dfdded62522e291406db071c1c3c2e494d7566c3f6c3374f91b0ec7e2a69a07f282cd080c36b74f6e932a788b925902b18e0c5756ce544321ce9393e56a7818be7db341", @ANYRES16=0x0, @ANYBLOB="000329bd7000fddbdf251000000005000f000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x24000004) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, r2, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) 4m4.159259557s ago: executing program 1 (id=4082): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000012002927000000000000008b050021"], 0x38}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000004000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) pipe(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000100000000000200000f8ffffffffffffff0008000000"], 0x34}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, 0x0, 0x0) (async) connect$inet(r3, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x10001, 0x12) (async) write$cgroup_int(r3, &(0x7f0000000200)=0x10001, 0x12) sendfile(r3, r2, 0x0, 0xf03a0005) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r5, 0x8100587e, &(0x7f00000003c0)) (async) ioctl$XFS_IOC_FSGEOMETRY(r5, 0x8100587e, &(0x7f00000003c0)) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x14, 0x32, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a0000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$sock_int(r8, 0x1, 0x28, &(0x7f0000000000)=0x803ff, 0x4) (async) setsockopt$sock_int(r8, 0x1, 0x28, &(0x7f0000000000)=0x803ff, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$cgroup_type(r7, &(0x7f00000000c0), 0x9) (async) write$cgroup_type(r7, &(0x7f00000000c0), 0x9) sendfile(r7, r4, 0x0, 0x10000) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000840)={&(0x7f0000000280), 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYRES32=r2, @ANYRES16=0x0, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x16, 0x4, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x23ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x5, 0x0, 0x4}, 0x50) 4m4.110412689s ago: executing program 3 (id=4083): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f00010300000000480000000101"], 0x114}], 0x1}, 0x24044010) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) close(0x3) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x14022, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x0, @local}, 0x10) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r2, 0x0, 0x800) (async) sendfile(r4, r2, 0x0, 0x800) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="9856b6c5820fac9d6dcd32b9eb54c7beef", 0x11) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f0000000600)={0x0, @aes128, 0x0, @desc3}) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f0000000600)={0x0, @aes128, 0x0, @desc3}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='blkio.bfq.io_merged\x00', 0x0, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='blkio.bfq.io_merged\x00', 0x0, 0x0) mkdirat$cgroup(r8, &(0x7f00000005c0)='syz0\x00', 0x1ff) (async) mkdirat$cgroup(r8, &(0x7f00000005c0)='syz0\x00', 0x1ff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r7, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x5, 0x31, 0x80, 0xe63}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r7, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x5, 0x31, 0x80, 0xe63}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe8000000000000000000000000000bb000000000000000000000000000000000000ecdf000000000a00002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a0}}, 0x24004000) 4m3.92907378s ago: executing program 2 (id=4084): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x9, 0xf, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0x78}, 0x1, 0x7}, 0x0) (async) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000780)="67ddb1dbcf80044de84cbee66c66bc58444791ed289481c11a8b3a8d23bb66c010dfda4def8b735dc6a494ccfc60c37977c77be7660f839cc342e73518b6fd97b239198c99bc9e1249a18fa001727115090e009a") (async) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x6, 0x1}, &(0x7f0000003c40)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r2, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000001640)=""/4092, 0xffc}], 0x2}, 0x2}], 0x1, 0x0, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x20, 0x8, 0x5, 0x0, {{0x1d, 0x4, 0x2, 0x7, 0x74, 0x9, 0x0, 0x1, 0x4, 0x0, @rand_addr, @local, {[@timestamp_prespec={0x44, 0x2c, 0xf5, 0x3, 0x2, [{@remote, 0x7}, {@multicast2, 0x8}, {@multicast2, 0x1}, {@rand_addr=0x64010100, 0xfffffffc}, {@broadcast, 0x400}]}, @lsrr={0x83, 0x7, 0x1a, [@loopback]}, @timestamp={0x44, 0x18, 0x13, 0x0, 0x1, [0x8, 0x2, 0x1000, 0x3, 0x9]}, @rr={0x7, 0xf, 0x55, [@empty, @dev={0xac, 0x14, 0x14, 0x23}, @empty]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @local, @empty}, &(0x7f0000000380)=0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f00000004c0), 0xce, r10}, 0x38) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f00000004c0)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)=@updpolicy={0x1ec, 0x19, 0x400, 0x70bd26, 0x25dfdbfc, {{@in6=@mcast1, @in=@multicast1, 0x4e23, 0x2e31, 0x4e23, 0x5, 0x0, 0xa0, 0x80, 0x3b, r6, r7}, {0xfffffffffffffffb, 0x8, 0x8, 0xdf5, 0x7, 0xfe00000000000000, 0x8, 0x9ffd}, {0x4, 0x8, 0x3860, 0x7f}, 0xa, 0x0, 0x2, 0x1, 0x3, 0x3}, [@sec_ctx={0x31, 0x8, {0x2d, 0x8, 0x1, 0xa8, 0x25, "1fe0badbf30af375ffecff43a308a7b9ad5d4ba6ad859f6b93620c38bbf8e21658c120fd3c"}}, @encap={0x1c, 0x4, {0x2, 0x4e21, 0x4e24, @in=@multicast2}}, @sa={0xe4, 0x6, {{@in=@multicast2, @in=@remote, 0x4e22, 0x10, 0x4e20, 0x7, 0x2, 0x20, 0x20, 0x5b, r8, r12}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x7, 0x0}, 0x4d5, 0x32}, @in=@multicast2, {0x9, 0x81f0, 0x1, 0x5f, 0xfffffffffffffff8, 0x10000, 0x79545ee6}, {0xbe6b, 0x4, 0x2, 0x4}, {0x7, 0x7, 0x9}, 0x70bd29, 0x3505, 0x2, 0x3, 0x6, 0xa0}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) sendmsg$nl_xfrm(r1, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002400)=@allocspi={0xf8, 0x16, 0xb25, 0x70bd2c, 0x25dfdbfd, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x3a}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e22, 0xfffd, 0x4e21, 0x4, 0x2, 0x0, 0x20}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d3, 0x32}, @in6=@mcast1, {0x40, 0x8, 0x8, 0x5, 0xedce, 0x18c, 0x8, 0x8001}, {0x400, 0x6, 0x3, 0x3}, {0x9, 0x8, 0x6}, 0x70bd2d, 0x3507, 0x0, 0x3, 0x91, 0x12}, 0x0, 0x8}}, 0xf8}, 0x1, 0x0, 0x0, 0x800}, 0x20008054) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003700000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 3m58.850301672s ago: executing program 4 (id=4085): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)=0x5, 0x4) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008800}, 0x811) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r5, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40c90}, 0x20000000) sendmmsg$alg(r0, &(0x7f00000017c0)=[{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000480)="d0b6b2e781fbc43771b1e635761c3b31dbf7941b411d4aecac07f38b538f7ad43b87", 0x22}, {&(0x7f00000004c0)="d84176f7bdf74dfd322c6bed7b7de697216c7b9b85c886ce4790126d550655ddc5", 0x21}, {&(0x7f0000000500)="7c886a054d1f3681e58ca6984730c28e8e", 0x11}, {&(0x7f0000000540)="4f06177ea1f6e48113ed284d0d2103e5d427da517e179f16a2f0eaca54f56a5b8d6d6f3ecd153e10d4dcfafec07f9d6e018883b609c2ec586e16fb761af8baf32233af0760f981d65737007f719b15fff3d1e0660f17570764546820d7cfd5444c9095d57238ac67a1bb627fd0c6c356badb40540bed17f4a58d049edd70084da71f8c31df0dcc46f2f17678106502996cb9ea07b4f8b08f58ab7d470371ce6ab45bf94bfdc4b37d196b44c1366eb8a1d2cb26884faaf114d3bf2b064d48698329c4b6b339f5087f14a56937e51ec3cecea4073a556af6266e10113a6b83d4e4ccc62d97999a983963", 0xe9}, {&(0x7f0000000640)="806abe4dfe9ecb8b93712d1cd0547e799f56a073d3bdc5bfc3cc0ea1689d2dfa44dc0af4d82e95f43c6b55cdbe16b82f874d8da451da783b69f010bc46db5a0fd29c7ea5497cf634c310f2362cc0bea9f414acfd0543b7e1bbd75f935630ad44e852754fa9d3ec89aeeb471ead3bb516161acea8bf1a688ce2841263ecd47e607fc8a438b1218cd00c32e0d7ebd870700cc8a124c09bf946453f7e5316fa1f8b1de9af2e7a7586fda815535964254c1a022861ce8a200b054ee795222c2e99430432e24cd812fed984316cf33125170964f25d4b34f2d1f709ad1d95acdd880a71f7c39ac2ef8f51e1b985a7090223ed795f620111", 0xf5}, {&(0x7f0000000740)="9fb2004c4c04186b60841cc7dd4e9a7c0e6b9a192e7c5ffd66a02e2b8a206e823e7bf229e007c53060d4ccbdae0498bc54df0e2ceb554a35eecf2f9a6eac6a1d8d0b8c2e0f350d7626d54abfd1bdc7f4b94f883128c276dfd7586bc6355bea4b3a19edb758f7d23a315e1afa1c3bc49c6d6270a6c418be3b705e3cc555c0518d80926d5b0bd588c23719ffa2d09a6ce7a4819bb453d79ed255e92432a5205f5ae64b42b5b4e5d630f0a936a3ad435102083298ec6911713a84d8ddd2612a7ce7f72aebaa9165a5bdb51828559f6a861b1ca5eef977944f7013d9772edc6de7701231990daf94a5e7d0284917277546dce521a1c322b17c667a7a446bb94f216f5fad0077987f7b34537cf8cebafb0c389b4f4259f7ca4b1cdd2eeed023d69a9840c2e9b384733d966c1e4201f6b0a9be2c2f8fc5e80c0e1378c957f68165b8d1b25c5f22d1558c2f54b19efd3e76e7bf878331fb3e206f79fafab91685ff54618f5288eba90ab7f74a96a6696401e77dbc6835bd0bd7717191d2d2edb7e1fa87687c03d844f21302187b5314f3ebb58df9d6602c71c4041010c4be517c48d6d5d8b43ee18fade7706fd48f6eae9b55236ad8816f76728eca459ca63be664240dd968c6ee1c17555a8df92787a64eb42bd33e4899e6467bbbd883c0e87008f7699f2e08dbcef5f5cf39b8122850693ef4a3f20984e62004b2af724c09b320bb8c1c6374b7bd423c9a4f2aa8bfe0404cc984b206649de5997d5cb44a82eec6015a2031716e88910e504fc07ac7e222b01fcaacb61ad99c7da288c96977f3c8a8b36b4ac53ba37116800b3c641ae611b7998a37046824f542068eb6b2af02c219867288cf7e00578ccffd16c29765207b63cd2a6bb76708071d9879c1308ad38426f9af9216c5d107d1465e8f81f14f9e4e6776a8ee2e8e2701d24716c2c15d08429986046f617f3b2ae55a84900e433d8f2560e666a3068dbec9db9ac5ca98e7903d588fda6749adc0295f96c377aa00926f490e8a07da52c6b8c9be7d48f7dc34bd409a546e6e09b3d5d7259082dcef9beb3ae35cb36cc84bb95deab749b0c32440e6a8bd6abc51f55be615f94c0522c4beb450dec82f7cc0722dfd0ae95d2743f3705d97ca42a34f95850ae9ed75e11d000f2be803d801212ac6ef5734ca93c25163ba65af7f834dcad1e191ec3aa48dd50c0de8ec1fd791fa4fa71d6a078016468baf9de8a029958286846dab0ffbb4d6b4e1c7484c746afeebe6e56dffb9bc25b6deef2aa59e733bda7ab8e03492b15588747b22d3e57f9b9d5511e7aa2150abc6997a43babd7bb370455438a91c90c6cb814290d1f835259f710a8f62a5cce1ae4c8f705afed7556f44ffc7b116a4f973169bb1d9ba3f92fc4c4ea47132690e7222527c1add6b420bdeb269fd85d50a1d6c0b19727e19779328a1d959b2c750291c720a9add371f48cb99539fd42efcc2551f30f98796910122fc5e7012fc2c84a36cf51e890aba9ab4a3589e88fa823c0943de46fd7bd2566d7af1e4de804b09eaf9def8a73bda3cef40c172bf36b55ae8a086b33133c017db94b2a7c6c0f149c4cb2a29b927bca20f885db6d105c94def4c82821d864acc097333ac6a1ce647226958569cc32a78b3c9071e1f8369dcd0b78ba747273da5516e8089e7fdfb1bc317ec3953f0bbffb83b229e43ac88af2ebe6f86c14c326620471751308f189649819a1da1f64ce736d62a0bc572f64d66b39878789650179fcfd34bd70f538c89db6db8aa009e217d3e9d42c099e0b66150e1a41cb0b258cda00f71401e5c0e8dce8a549d6474fc2437e516e9d828368fbf799858a612ba0e96313b3011868b9cbc68deb9b0f528c499a75e0382463b0faa4748e541d37918fc9b35d2463b1c9177b2e7f9d352f8e7f057e080c9bb2e659d66a7436099c5f439f08597ff1c5e18535dd7a98c1ad511279ad46c857542288cfaa7ea2c54b9adf9e585fac57526e5b98f25d1b30c54b5f6e814ca6a2b123025415a78c78a1ad0e7949ae170e7234280370ff511f81e363da82517bc0a0803b037c3ca4e40631d2243a2b58a37374c165e991c43d3b7d3cc5713060643f95d92cd0e879fe232cda4d6e3c7eb28d43d905937ebb471cbcf800365fc2d97c807acae5238469ef33264e8be936b607930a50b9e20cf21f7ad05492c0107e9dd511e9f838ac303e506b4998ae3cb8774c6ff1a7770ae1557bad54748df29849c274d95231e4cad4276690bd9c811f4688d8cc525b3284db12b81fa210bdd64a828abea300070667b9ac14a0aa8d1f2d7a1703743de63a8645e48d8c4b393c1727d494ce46d3a8e3cd26f98add1980a19af1eab83b1a5c7085d06976e7f7c027f6ac3ff8ca0a40979cfa7dbc6951673150c0f1ee89553047a5a915a53d196cacfc4c8336843b529d3b3e8e56ee60806cfd42dd9f1ea86f14feb7ad914a87ed72684cf997c20670fdc2a0779c12fec4e6663b6e96ad1b21795fcd5c3f56730c7f98cc938a05e2959c2395009eb63f7485be0f4e50243f445572f55032c6b1b1b8f37a02ccceb5236423fc45779bc199d335feb3b4079d6ab3abc30bf5ffdda18ed285f77930ec1c5b5278d211f5733b60d7794064023bc6d2a8114accb73a8c855b96f30e1d666811b513bf33a4067ecf176b3008895746d8bb280d833e2d00881971b0890e9f11eb7fb8f8309d6391f5e2ee6280695636353d679cd9b2f17d419c3f76691c5841ee005f93b69b5ba9994f71caaf95ff39cf16a26875c905045d9b372b661492e18f8b34b16f152edf4e322219fdcf55d8b3afb4ebd51f35b4b2f5cced5c41e3f409e49d1ffd3da1da5bce013f56a2f2cbcc5d3131c432c5aff7f8ca51061315ccce77d906fa4654e540a79c4d82eb257489000e17520a76e004c0b17b8b0508357627a72f8b9b6a25368a6963a490fbe09090e97d85d7fff13fbc62df9c2df5b0978df9214864a25af557e819663477f8c95362af31d4deffbbdba26e73e86c2afa08f6ad33f37d321f8fbc40e50b1f85e2e219b68f4422a453e0f16368a4b995a733f4c0bbbfe6944ce81b293783fff49d88c42d763335ad646abc409465242a6dabce15395ad238062a6891c1ab912364a61ff1a47471962c13fe14daa6ac66f37b2b430302d8228e749ebb595c4f19376418c0fc985145f722d6f060d17849a5da994fb8feafd74fa4d07518669e5489da4e0407f50dd9d107fe0a0960f39a68b6cafdab159a0700b8eaa8da5b436d62779d8e3403b301d19d2ad2c1ce3db2bfc79e6505b29ae3dd479e509a33641d343dd5487a0378ec8d8373f125bb01f9a34118858074ace6676b1af97cb75f7f1054da3887cb7121e3b1eb621f48da142c6e640165615964adbb1a0292a32cc1adff692963e5b526259992791f9a3e73a9ef37814240edf5ea4294a56b060f6d416a3feab089516566c2df945a13a04b57066ae622f96e9684ddbb2052d02c06d27ee69adc63e757939d1d66bf3803a2e8885553a5bae330ad9744069e21fd75221b78ae712003604bf02517c9f87e3a98e06c495e503a4728e5855759b707ad771d777302aa7be1738f1b398170b87c54d96e04af53ae971942c29d90089ac2a11b1f40b6a029f79237d450cd6d4cc2e89728fca362e3014403a718a227a6e15264a373844b774dd99a34fa927e276e01c14dd2862bedd4aa9ec2da941886ce56e472dcb8562494df21bc210c92741df6e96bd47edca0c1c98fff7e4d34cd53243a85b60bdc416e256f26a507aae8a2e9451ee4b4ce0aebb08f0d470a1b7acf14835cbd6942422db24d1230d360c6a6fb4a9b885f52d446bd4edc45d8c21c699eb9b59ccaf1e91a62274c2f18cf0b261fc91c2a8e59a606e74fddf271debde694f23ee497d86f3711aefabcab47c794a916dc346e67c4404857296cabb9fd1bb36d1de28c840d9eb1e53629cc7dd165494532a0ddd4e2720bdc20ecd512a42d2274db127910e9dabb1757ad443c7f9e3ddc5e12439ed2b86c20f33dbd1c867436f1582594f4b8ea241af407fa1a715ccbebb45c723422c6e2aa0f5d5130d2a1484fc545c783f5bedca8a8dc3b97b2ef8511d22df2525d254dc9da968c5fffd6858467afe821ee825ee452c13c8ae77d1ab2af9b78a6c02eb5c3cfc0d87bc82cd0ce8d98e83daa987f247022f21c052e103d08ed320638a988dd369ef822efd70bc5731343d074c808a8b0fb8ea2e648d7f2bb1b0e246696c58c29ded23580a92578f28010338fdb9079c8ed8cb04257c5cc83812585ce4989b65465b2bab5090ee9019cbdbfcd3b1327fb73804bf544222e4330dbeb1a827c6d0588f9f874a3e43fd00f14b52c760f1942e014e8c58ca587c880cd6c519761ff1df5df41b1a1a9b68adf42470f1eb88148bd263b471f64934ab675cf4bd1cfb9725dcef1c7e86a436eb6f6ee2596560de390ce19ad378aa65464a9762b0ef1af4638e4d65a53fa946298ce2c49ef6d122a9803c922e87dbe810b12cb332286060d04f8e37c49e1ce3623d6fff499b8eabe523effd9c9ee2e9113b4d6125537320f144b78ea5c129309c133569b07db44fe43216c40d6b067a9f1fff4923e5808170e205c060a835db8c6f74f828bf5fc312189cae869fe346db74e1b2f305aadc0c309077f66eb2289ecd377a380869bf727d67961a0439a7150ef92068a79ef6dc4459cb593fdd7cb0e32c5058cb9b89c1e47f51e947d006a6e68babc03c5ed1bb4bec2df5a8ee46c60592ca363366cabc94d96e65ab885eae93706975765d1fde47713470a8c7275c73a836dfdc705e33ecba067113d9ce43c8bd950216276eac8b36236cfac65c8dd859340d626594c9a755464883058b6a63790e4b610504fd7a49a4d59e9c5d4160fcba5574d8a1df72f6a304835961aa857f9c6e743c8481f8311a12219b37468a7ba84eefdd00e3aabfe686f7df4b10c23807bd8d1b5eb7a932142d66b28078223de76f122aad9539917c910bd22e9317db76e484fb5cd09ad41e7b9287bdd55f4f8b39e64dac0b2df0e359f93f40fbbe31c113c5dbd2aef5ab6506d75b6adb531646a1f233aeafc672be58d96b8f2c922a95bdb18d3977e53d8ae340d6f807aa1e8865c8d8edaa865012aa527027581e627762d298ac26e73f29fe533ca12a8a90431aa7f51457e307c676928cfb351b25505da6acc9edd2740544b511dac08f1b85f6f4ab556ffa178feec4774e69639d72aa2d5344f1bdc27061e4ebb3808fd36bf9d47591d7602fbb9a1ed247c59e54b9d7510bfd7dcf8e7529a8b945d11867d901ce52759062930492bc86e281ddec2b9868e4418e30106526303d08d8f387d6fd8fafc4dff33c609b084ec331a5d57010d072fbfc2370561aadef356c031625127330e17fbf9770bc5d7c99f922c075dead063ff1c3bc96a4822adc533027e13fc714c005c4b9b9d10c51fa89db9d3a2b2273a490b487d2668eb5f7fea18b52541c74a0511393c329c786b16de95c118e0fa4e51d3afe46815c7a0ef58f989a7fcc910b2a8d7e5a2e38fa52b023abf8ebb99ed258b0ae6006540f3cdf616b7e1cf9306eae6d245d4c14bbb7c04b3bdcc255c667a15c280d37dc0b3d54fc2ed4a611f70fd8ca2b281bea439946f1f848e156f354d849949f6362462fbb6dd4349647af3fea37d500880277fd0e8fae6af0293cff00c78500fe581914bada11fa8dfdfdade9e47758e82cbba86c5201d2370394ac3f299811fe38658f232e602be4e871526df3c674d9740f99bbeb9f849a", 0x1000}], 0x6, 0x0, 0x0, 0x94}], 0x1, 0x0) sendmsg(r2, &(0x7f0000001b80)={&(0x7f0000001800)=@llc={0x1a, 0x310, 0x9, 0x32, 0x80, 0x0, @remote}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001880)="0eda1870d75079443b25310f56b1855b11bc7496f7dcbcb0130e1e5840c09d76cd2651ab605b9f3f00d5f3843189a2d6a5c6694cea1f674e99cb6f073a71e33bcf09f6282faa32a753", 0x49}, {&(0x7f0000001900)="9e230dc261ded4a1", 0x8}, {&(0x7f0000001940)="70edf16fd25fa704645cb77391a63fbe1df718f42a7c578c6d23d63512f0d76b4a37e00f0b32f05e7b4ae0be32db42119d115e3c1ab699dc378d2914a55f9b7facf918", 0x43}], 0x3, &(0x7f0000001a00)=[{0x58, 0x111, 0x7, "ee6aac54d83dd4df3b3740bdfaa7ad956b0d6ee53330d17f2a2e78e8387cf0e5ee21fc68f01d92b9e0b223c5a053ecc387136eb56b66193a15a00fa0627749fd3c"}, {0x88, 0x112, 0x4, "1e1f06bfa59874ef6e46bf6ff137d2dcbf51cb2c4d784cc6cd6e294c25002ae30732f904d296ee6cd34a7e7dd1325343fe1cad74cfa5c3da6b9cf1a7f5089173741ba404ba8fc49183842cb14200956e5ec3f802209dd595f069e2dc5b5c4b45a44b84bae7af20cf25d57aabbef063b04a8061aaec"}, {0x70, 0x102, 0xfffffffe, "374ae8ab7572226276aa3c91cecf20cb8fa9c4fbe641155f412d3edcb55fda2b0bb1bf0b35bc892f71519d83c805d7fb2502200921258d50d0b4fb7ea62cf3cd1ef11ab896d470c3806d262c2f899f519a016eb4a20e489576013b9802"}], 0x150}, 0xad6d8d7e28a079d5) connect$unix(r0, &(0x7f0000001bc0)=@file={0x0, './file0\x00'}, 0x6e) sendto$inet(r0, &(0x7f0000001c40)="6074f6e7209253fffc2d74f9f930f99b3a09cb5e2f57b797ac54fe69edd01d1cba4e11bebff2c252c0d6672915eb", 0x2e, 0x20000004, &(0x7f0000001c80)={0x2, 0x4e23, @local}, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001d00), r0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000001dc0)={&(0x7f0000001cc0), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x2c, r6, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000001e00)={{0x0, 0xffff, 0xc0fa, 0x7, 0x6, 0x61, 0x81, 0x6, 0xfffff800, 0x2, 0x4, 0x5, 0x100000000, 0x4}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f0000001ec0)={r7, 0xffff}) getpeername$packet(0xffffffffffffffff, &(0x7f0000002ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002f00)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003200)={r0, 0xe0, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002f40)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000002f80)=[0x0], &(0x7f0000002fc0)=[0x0], 0x0, 0x8, &(0x7f0000003000)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000003040), &(0x7f0000003080), 0x8, 0xaf, 0x8, 0x8, &(0x7f00000030c0)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000003240)={r0, r8, 0x25, 0x11, @val=@target_btf_id=r10}, 0x14) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000003280)) sendmsg$nl_route_sched(r0, &(0x7f0000003380)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)=@newtfilter={0x3c, 0x2c, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xc, 0xb}, {0xffe0, 0xffe0}, {0x8, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x5, 0xf2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003640)={0x11, 0x11, &(0x7f00000033c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7d}}, @ldst={0x3, 0x2, 0x2, 0x6, 0x8, 0xfffffffffffffff4, 0xfffffffffffffffc}]}, &(0x7f0000003480)='syzkaller\x00', 0x5, 0x73, &(0x7f00000034c0)=""/115, 0x40f00, 0x2, '\x00', r9, 0x0, r0, 0x8, &(0x7f0000003540)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000003580)={0x0, 0xb, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000035c0)=[r0, r0, r0, r0, 0xffffffffffffffff, r0], &(0x7f0000003600)=[{0x0, 0x2, 0xa, 0x7}], 0x10, 0x15}, 0x94) r11 = socket(0x25, 0x800, 0x6) syz_extract_tcp_res(&(0x7f0000003700), 0xe2d, 0xfff) sendmsg$802154_raw(r0, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000003800)={&(0x7f0000003740)="846e64161519907ea0c63c6aa3a6429333ac83c8e0a0c959de56741e3e796516c34556b8d0ae303988c300e549c81b1e070030fbc51fcd3938e5e2cb752c6447d9a2964956a2b852b6f06991caba8dcdf26cfe44dfd4ecc155c115b9ada17ba60759f3f0e292b5d063f07df946a71961eb1ceda336cf4f661af3ad35183889336452b90f5eb9d11292d9949cf4ca532c069e6cd41289990aaecf3546391236ff1f56755c3957a35feb239642a767adaae69946badd9c", 0xb6}, 0x1, 0x0, 0x0, 0x84}, 0x802) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000003880)={0x1, 0xe}, 0x8) ioctl$BTRFS_IOC_START_SYNC(r11, 0x80089418, &(0x7f00000038c0)) 3m58.848163583s ago: executing program 3 (id=4086): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x500}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a1401"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)={0x14, 0x2d, 0x8c7c251b32d84713, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x4, 0x9, 0x1, 0x4984, 0xa066}, &(0x7f0000000340)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000380)={r7, 0xca, "0a009b1400b412c6cfc82d2501b9ca2882a1552e147963249655e10339e59e355640a0cfefc7fbea70aabce6bed0631ac86a7d434a9eba09338c7a1c1be3b91707da7be058f7853185cf044bc1a1163a108af2a25687455cbef23cf60f0773f2395f52241f44bbb83eb7beb9ecba01a71d67c8d0530c4fcf66c0ec33318453073468e3d37f9282be71f85d016b910963a8061ed23b1eda3ad1274babfbc96f32e02f1ca9ee4b0f84451ed5f2afce8c8480955e143152fd821381b59e1275b6e460463f59f9325fc51b1c"}, &(0x7f0000000480)=0xd2) r8 = syz_genetlink_get_family_id$ethtool(0x0, r4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@loopback, @local, 0x0}, &(0x7f0000000040)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r8, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xfffffffb}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xffffffff}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="170100000000b2000500000000000000850000004700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x27, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r10 = socket(0x840000000002, 0x3, 0x100) connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r10, &(0x7f0000005240), 0x4000095, 0x0) bind$rds(r10, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', r9, 0x29, 0x3, 0x5, 0x80000000, 0x20, @rand_addr=' \x01\x00', @local, 0x20, 0x20}}) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_FLOWER_KEY_TCP_DST={0x6}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041891}, 0x24040010) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000003a40)={'lo\x00', 0xc737, 0x4}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6000}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88a2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}]}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}]}], {0x14}}, 0xe4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3m58.730025014s ago: executing program 2 (id=4087): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00010000031401002abd700001dcdf250900020073797a31000000000800410073a825533a09b6cc771b91cba5a86977001400330076657468315f746f5f626f6e6400000009000200730000000008004100736977001400330077673200000000000000000000000000090002e772797a30000000000800410073697700140033007665746830000000000000000000000009000200010000000000000008004100727865001400330070696d726567310000000000000000000900020073797a30000000000800410072786500140033006c"], 0x100}, 0x1, 0x0, 0x0, 0x20000040}, 0x24008080) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf4, r1, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "603f715a36dcef93d9f57ce0bb387607eb91b2b719c5b71a"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20040014}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001200015e36bfa1000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m58.673876242s ago: executing program 0 (id=4088): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x7, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000900)=@framed={{0x18, 0x3}, [@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x40, r3, 0x1, 0x70bd2c, 0xfffffffc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffc}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xd49920d352514742}, 0x4000000) (async) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000200)=0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r7, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) (async) r8 = socket$inet(0x2, 0x2, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x31e) bind$inet(r8, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000004008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0xc18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) (async) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000100)={0x1f, 0xfffd, 0x1}, 0xfffffffffffffdea) write(r10, &(0x7f0000000040)="4c00000011002914000700020000170002000400200000", 0x17) (async) socket$nl_generic(0x10, 0x3, 0x10) 3m58.639053059s ago: executing program 1 (id=4089): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000000705000008004ef02d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000006000000160302000ee60060bf500000000000001f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9d0cc7d3b4814261bdb94a050000a28a404be266df76965947c73c00c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e567238809000000000000000ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket(0x1, 0x3, 0xfffffff9) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r1, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x8040) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0011802e"], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) 3m58.216062674s ago: executing program 2 (id=4090): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010004b0429bd7000000000007a000000", @ANYRES32=0x0, @ANYBLOB="09a0010006810000240012800b0001006272696467650000144dc9f6c60024000100000005001600000200000a0001"], 0x50}}, 0x20000000) accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10) socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) 3m57.663224583s ago: executing program 1 (id=4091): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf25010000001400020077673200000000000000000000000000240003000000000000000000000000000000000000000000000000000000000000000000480108805400008024000200935fcc0d76a5bcfce584052ea21b4b2622057154ff788c325f3b596e54307c08080003000300000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696bf000008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39222400020082a3fee8508b9dedc00d8ccb9cfa517d48a03e6112bfa9074c524b2a05708654a400098028000080060001000a00000014000200fe880000000000000000000000000101050003000300000040000080060001000a0000001400020000000000000000000000ffff7f00000105000300030000000600010002000000080002007f000001050003"], 0x194}, 0x1, 0x0, 0x0, 0x8c004}, 0x4000040) 3m57.533293771s ago: executing program 4 (id=4092): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x800, 0x43c, 0x0, 0xffff0001, 0x7a21, 0xfffffff8, 0x6, 0x2831}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000400088004001400030064756d6d79300000000000000000000018003480140035"], 0x4c}, 0x1, 0x0, 0x0, 0x6}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x800, 0x43c, 0x0, 0xffff0001, 0x7a21, 0xfffffff8, 0x6, 0x2831}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000400088004001400030064756d6d79300000000000000000000018003480140035"], 0x4c}, 0x1, 0x0, 0x0, 0x6}, 0x0) (async) 3m57.527581213s ago: executing program 2 (id=4093): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x0, 0x13, 0x0, &(0x7f00000005c0)="07ec0c191cd2749bf8ffc2c4257f078b3909d0", 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x224, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x1f4, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x11386}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_ACT={0x1d8, 0x9, 0x0, 0x1, [@m_connmark={0xb0, 0x3, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1000, 0xfffffff0, 0xc21e80d3dc60892d, 0x7f, 0x7fff}, 0x584}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x26d, 0x4b, 0x3, 0x3ff, 0x9}, 0x1000}}]}, {0x45, 0x6, "84e2bd869fd948776bb3fcc9ee4eb3d59eb79e5cc19a0b4d5b13ec1203cd66b06dcc24ed3f883f8229aaf20231e9ad327324bf5d2ba3a36366edc67a38d1eddcea"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0x7c, 0x9, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0x7, 0x3, 0x9, 0x4}, 0x4}}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_BOS={0x5}]}, {0x1c, 0x6, "c7e99f0655bc358a1aaeb9649bcbe748533de056d64f94f7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbedit={0xa8, 0x10, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4892, 0x6, 0x6, 0x7ff, 0x1}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3ff}]}, {0x3c, 0x6, "c0af679de28a52e9b01630690ef13b73801c017ad5e2883073e13611795c2c96c34a3c13cdc123893b765994fd6f42e9763b76cf813733dc"}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x224}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r3, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x101, 0x4, 0x81, 0x28000, r6, 0x4, '\x00', r3, r5, 0x4, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r7, &(0x7f00000000c0)}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e00010069703665727370616e000000140002800800040000000020060002003000000008001f000500000008000400", @ANYBLOB="210e20d2"], 0x58}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0xf0, 0x30, 0x8101, 0xe501, 0x1000, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1}, {0x0, 0x2}, 0x8001, 0x0, 0x5}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x400000, {0x0, 0x0, 0x0, 0x0, 0xffff}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 3m57.260487609s ago: executing program 0 (id=4094): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x6, 0x4, 0x4, 0x9, 0x8, 0x1, 0x9}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmmsg$alg(r2, &(0x7f0000000540), 0x0, 0x40800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r6, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="00008100ffffffffffffaaaaaaaaaaaa88a8110081002f0008004a0000cc4000e000062f90787f000001ac1414400101441c5f61ffffffff00000005ac1414bb00000009e0000001000000034434d733e0000001000000090000000000000003ffffffff0000007b64010101000000040a01010100000006e0000002fffffff90000a001880b0064907802000000010000000000000043d6711ac0efef1e1f74c17f85988f65f1056db60a9e01ce4431787073bbdb19328e2e0061f77511c108d27b66ea7d870480859021d635692db37c1a923903858454813e253429"], 0xe6) accept4(r1, &(0x7f0000000440)=@can, &(0x7f00000004c0)=0x80, 0x80000) 3m56.697215251s ago: executing program 1 (id=4095): socket$inet6(0xa, 0x3, 0x87) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x3, 0x3a) socket(0x18, 0x80000, 0x1) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x54, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x54, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) r7 = epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r8], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r8], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r9, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, @long={0x3, 0xfffd, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x20040814}, 0x4090) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x20) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, 0x0, 0x0) 3m53.761316747s ago: executing program 4 (id=4096): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff3400000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a651, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a651, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000200)=r3) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r8, 0x0, 0x32600) sendto$inet(r8, 0x0, 0x0, 0x8000, 0x0, 0x0) (async) sendto$inet(r8, 0x0, 0x0, 0x8000, 0x0, 0x0) sendto$packet(r6, &(0x7f00000004c0)="478ed4", 0x3, 0x40, &(0x7f00000005c0)={0x11, 0x18, r7, 0x1, 0x6}, 0x14) (async) sendto$packet(r6, &(0x7f00000004c0)="478ed4", 0x3, 0x40, &(0x7f00000005c0)={0x11, 0x18, r7, 0x1, 0x6}, 0x14) sendto$packet(r6, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x8100, r7, 0x1, 0x3, 0x6, @remote}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) 3m48.752497824s ago: executing program 2 (id=4097): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast1}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x5c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000}, 0x20000004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{0x0, 0x8c, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 3m40.911725461s ago: executing program 32 (id=4086): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x500}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a1401"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)={0x14, 0x2d, 0x8c7c251b32d84713, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x4, 0x9, 0x1, 0x4984, 0xa066}, &(0x7f0000000340)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000380)={r7, 0xca, "0a009b1400b412c6cfc82d2501b9ca2882a1552e147963249655e10339e59e355640a0cfefc7fbea70aabce6bed0631ac86a7d434a9eba09338c7a1c1be3b91707da7be058f7853185cf044bc1a1163a108af2a25687455cbef23cf60f0773f2395f52241f44bbb83eb7beb9ecba01a71d67c8d0530c4fcf66c0ec33318453073468e3d37f9282be71f85d016b910963a8061ed23b1eda3ad1274babfbc96f32e02f1ca9ee4b0f84451ed5f2afce8c8480955e143152fd821381b59e1275b6e460463f59f9325fc51b1c"}, &(0x7f0000000480)=0xd2) r8 = syz_genetlink_get_family_id$ethtool(0x0, r4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@loopback, @local, 0x0}, &(0x7f0000000040)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r8, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xfffffffb}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xffffffff}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="170100000000b2000500000000000000850000004700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x27, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r10 = socket(0x840000000002, 0x3, 0x100) connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r10, &(0x7f0000005240), 0x4000095, 0x0) bind$rds(r10, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', r9, 0x29, 0x3, 0x5, 0x80000000, 0x20, @rand_addr=' \x01\x00', @local, 0x20, 0x20}}) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_FLOWER_KEY_TCP_DST={0x6}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041891}, 0x24040010) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000003a40)={'lo\x00', 0xc737, 0x4}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6000}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88a2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}]}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}]}], {0x14}}, 0xe4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3m37.546423522s ago: executing program 33 (id=4094): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x6, 0x4, 0x4, 0x9, 0x8, 0x1, 0x9}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmmsg$alg(r2, &(0x7f0000000540), 0x0, 0x40800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r6, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="00008100ffffffffffffaaaaaaaaaaaa88a8110081002f0008004a0000cc4000e000062f90787f000001ac1414400101441c5f61ffffffff00000005ac1414bb00000009e0000001000000034434d733e0000001000000090000000000000003ffffffff0000007b64010101000000040a01010100000006e0000002fffffff90000a001880b0064907802000000010000000000000043d6711ac0efef1e1f74c17f85988f65f1056db60a9e01ce4431787073bbdb19328e2e0061f77511c108d27b66ea7d870480859021d635692db37c1a923903858454813e253429"], 0xe6) accept4(r1, &(0x7f0000000440)=@can, &(0x7f00000004c0)=0x80, 0x80000) 3m35.357883833s ago: executing program 34 (id=4095): socket$inet6(0xa, 0x3, 0x87) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x3, 0x3a) socket(0x18, 0x80000, 0x1) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x54, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x54, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) r7 = epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r8], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r8], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r9, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, @long={0x3, 0xfffd, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x20040814}, 0x4090) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x20) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, 0x0, 0x0) 3m34.240346951s ago: executing program 2 (id=4101): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000004000000040000000001"], 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000003c0), &(0x7f0000000500)=r3}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0xfffffffffffffee1, r7, 0xf03, 0x70bd29}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x8c0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r8, &(0x7f0000000000)=@phonet={0x23, 0x40, 0x9, 0xa}, 0x80) 3m30.885121211s ago: executing program 35 (id=4096): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff3400000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a651, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a651, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000200)=r3) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r8, 0x0, 0x32600) sendto$inet(r8, 0x0, 0x0, 0x8000, 0x0, 0x0) (async) sendto$inet(r8, 0x0, 0x0, 0x8000, 0x0, 0x0) sendto$packet(r6, &(0x7f00000004c0)="478ed4", 0x3, 0x40, &(0x7f00000005c0)={0x11, 0x18, r7, 0x1, 0x6}, 0x14) (async) sendto$packet(r6, &(0x7f00000004c0)="478ed4", 0x3, 0x40, &(0x7f00000005c0)={0x11, 0x18, r7, 0x1, 0x6}, 0x14) sendto$packet(r6, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x8100, r7, 0x1, 0x3, 0x6, @remote}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) 3m15.091273587s ago: executing program 36 (id=4101): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000004000000040000000001"], 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000003c0), &(0x7f0000000500)=r3}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0xfffffffffffffee1, r7, 0xf03, 0x70bd29}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x8c0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r8, &(0x7f0000000000)=@phonet={0x23, 0x40, 0x9, 0xa}, 0x80) 0s ago: executing program 6 (id=4099): socket(0x10, 0x803, 0x0) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) (async) shutdown(0xffffffffffffffff, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'team_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001500)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x3, 0x1, 0x2, 0x7f}}) (async, rerun: 64) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r3, 0x2) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) sendmmsg(r5, &(0x7f0000006c80)=[{{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000001880)="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", 0x7c6}, {&(0x7f0000002880)="1d2a14209b2ce5a4558a11f5ddf93ac8ccea31cb7464525f4cc9722a5ffcbc246fbd62e115d95434cc7e02ba844312", 0x2f}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}], 0x2, 0x44000) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r4, 0x4) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x7, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast2, '\x00'}}}}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) (async) r8 = socket$inet6(0xa, 0x2, 0x3a) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r3, @ANYRES64=r10, @ANYRES32=r10], 0x22c}}, 0x4000) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@remote, 0xc, r10}) (async) syz_emit_ethernet(0xfc0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0) kernel console output (not intermixed with test programs): size=2048kB [ 509.102019][T20374] 44704 total pagecache pages [ 509.102027][T20374] 0 pages in swap cache [ 509.102036][T20374] Free swap = 124996kB [ 509.102044][T20374] Total swap = 124996kB [ 509.102052][T20374] 2097051 pages RAM [ 509.102069][T20374] 0 pages HighMem/MovableOnly [ 509.102077][T20374] 428705 pages reserved [ 509.102085][T20374] 0 pages cma reserved [ 509.862914][T20386] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3426'. [ 510.041338][T20394] pim6reg: entered allmulticast mode [ 510.042903][T20394] netlink: NAT attribute has 4 unknown bytes [ 510.042925][T20394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.317338][T20403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3431'. [ 510.390425][T20408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3432'. [ 510.803474][T20416] gretap1: entered promiscuous mode [ 511.725604][T20352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 511.727515][T20374] netlink: 'syz.4.3424': attribute type 1 has an invalid length. [ 511.856669][T20422] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3436'. [ 512.014901][T20429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3438'. [ 512.174349][T20433] lo speed is unknown, defaulting to 1000 [ 512.326181][T20445] netlink: 'syz.4.3443': attribute type 2 has an invalid length. [ 512.910335][T20455] tipc: Enabling of bearer rejected, failed to enable media [ 513.175838][T20488] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 513.316320][T20495] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 514.463493][T20533] __nla_validate_parse: 5 callbacks suppressed [ 514.463515][T20533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3460'. [ 514.649914][T20541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3462'. [ 514.848595][T20552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3465'. [ 514.869396][T20549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3463'. [ 515.395201][T20559] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3466'. [ 515.933230][T20571] netlink: 3784 bytes leftover after parsing attributes in process `syz.3.3470'. [ 516.110857][T20579] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3470'. [ 516.138885][T15424] IPVS: starting estimator thread 0... [ 516.246409][T20584] IPVS: using max 28 ests per chain, 67200 per kthread [ 516.416236][T20593] netlink: 45 bytes leftover after parsing attributes in process `syz.4.3475'. [ 516.706906][T20606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3479'. [ 516.736271][T20610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3478'. [ 516.997049][T20617] netlink: 'syz.2.3480': attribute type 8 has an invalid length. [ 516.997074][T20617] sch_fq: defrate 0 ignored. [ 517.030587][T20617] openvswitch: netlink: IPv4 tunnel dst address is zero [ 517.056648][T20620] netlink: ct family unspecified [ 517.056710][T20620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.058040][T20620] netlink: 'syz.0.3484': attribute type 1 has an invalid length. [ 517.163104][T20623] batadv_slave_0: entered allmulticast mode [ 517.163263][T20623] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 517.266306][T20625] bond1: (slave geneve2): making interface the new active one [ 517.267026][T20625] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 517.267151][T15417] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 517.267197][T15417] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 517.267233][T15417] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 517.267270][T15417] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 517.614173][T20640] netlink: 'syz.3.3492': attribute type 11 has an invalid length. [ 517.703089][T20637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.959349][T20666] netlink: 'syz.1.3498': attribute type 1 has an invalid length. [ 517.959390][T20666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.419445][T20696] netlink: 'syz.0.3503': attribute type 10 has an invalid length. [ 518.468634][T20696] team0: Port device dummy0 added [ 518.489264][T20696] netlink: 'syz.0.3503': attribute type 10 has an invalid length. [ 518.690123][T20696] team0: Port device dummy0 removed [ 519.120119][T19182] udevd[19182]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 519.492553][T20740] __nla_validate_parse: 16 callbacks suppressed [ 519.492576][T20740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3513'. [ 519.525247][T20741] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 519.525361][T20741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.710559][T20726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.745085][T20726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.269263][T20733] bridge0: left allmulticast mode [ 521.304080][T20740] ip6erspan0: entered allmulticast mode [ 521.348322][T20742] bridge0: port 3(vlan2) entered blocking state [ 521.348518][T20742] bridge0: port 3(vlan2) entered disabled state [ 521.348679][T20742] vlan2: entered allmulticast mode [ 521.348696][T20742] geneve0: entered allmulticast mode [ 521.353327][T20742] vlan2: entered promiscuous mode [ 521.353347][T20742] geneve0: entered promiscuous mode [ 521.515525][T15417] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.515562][T15417] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.515586][T15417] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 521.516082][ T1168] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.516110][ T1168] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.516134][ T1168] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 521.519644][T15428] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.519672][T15428] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.519694][T15428] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 521.519731][T15428] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.519753][T15428] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.519783][T15428] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 521.729484][T20778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3520'. [ 522.224340][T20796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3523'. [ 522.502353][T20827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.723411][T20835] ip6gre2: entered promiscuous mode [ 522.723438][T20835] ip6gre2: entered allmulticast mode [ 522.736710][T15417] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 522.737000][T15417] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 522.766101][T10325] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 522.817770][T20835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3532'. [ 523.000246][T20848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.019114][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.019140][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.019329][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.019346][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.019501][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.019518][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.019675][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.019691][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.019857][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.019874][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.020078][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.020094][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.020256][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.020271][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.020431][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.020446][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.023017][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.023038][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.023200][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.023215][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.023365][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.023381][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.023540][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.023556][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.023714][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.023739][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.023919][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.023934][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.025864][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.025884][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.026026][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.026041][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.027375][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.027392][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.027535][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.027549][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.027686][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.027700][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.027848][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.027862][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.028000][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.028014][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.028179][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.028193][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.028361][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.028376][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.028515][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.028529][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.028667][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.028681][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.034016][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.034032][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.034205][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.034220][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.034366][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.034379][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.034518][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.034532][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.034671][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.034685][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.034836][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.034850][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.034989][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.035002][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.035140][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.035154][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.035393][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.035408][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.042758][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.042777][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.042921][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.042935][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.043072][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.043086][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.043231][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.043246][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.043388][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.043402][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.043572][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.043586][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.044910][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.044926][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.045080][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.045095][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.045941][T10325] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 523.048331][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.048348][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.048493][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.048507][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.048648][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.048662][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.048841][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.048855][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.048995][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.049009][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.049150][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.049164][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.051555][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.051571][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.051713][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.051736][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.051875][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.052867][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.053015][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.053029][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.053174][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.053188][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.053325][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.053339][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.053480][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.053494][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.054269][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.054286][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.054424][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.054439][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.054579][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.054593][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.054804][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.054820][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.054962][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.054976][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.055116][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.055130][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.055269][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.055421][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.055567][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.055581][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.055728][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.055742][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.057893][T20844] bond0: option min_links: invalid value (18446744073709551615) [ 523.057909][T20844] bond0: option min_links: allowed values 0 - 2147483647 [ 523.639571][T20855] netlink: 'syz.4.3538': attribute type 1 has an invalid length. [ 523.705780][T10325] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 523.988721][ T1051] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x2c [ 524.094584][T15428] tipc: Subscription rejected, illegal request [ 524.360584][T20877] netlink: 'syz.0.3544': attribute type 12 has an invalid length. [ 524.421433][T20880] tipc: Enabling of bearer rejected, already enabled [ 524.468672][T20882] tipc: Enabling of bearer rejected, already enabled [ 524.591138][T20891] netlink: 'syz.2.3548': attribute type 4 has an invalid length. [ 524.591163][T20891] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3548'. [ 525.113834][T20896] syzkaller0: entered promiscuous mode [ 525.113861][T20896] syzkaller0: entered allmulticast mode [ 525.427382][T20926] IPVS: nq: FWM 3 0x00000003 - no destination available [ 525.587164][T20932] netlink: 'syz.2.3557': attribute type 2 has an invalid length. [ 526.515383][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 532.958359][T20921] vlan0: entered promiscuous mode [ 533.274667][T20939] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3559'. [ 533.288754][T20941] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3560'. [ 533.307889][T20937] tipc: Enabling of bearer rejected, already enabled [ 533.321534][T20941] netlink: 'syz.0.3560': attribute type 29 has an invalid length. [ 533.567540][T20946] netlink: 'syz.3.3562': attribute type 1 has an invalid length. [ 533.634824][T20946] 8021q: adding VLAN 0 to HW filter on device bond2 [ 533.825772][T20954] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 533.942934][T20946] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 533.976789][ T1051] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 534.043080][T20961] Bluetooth: MGMT ver 1.23 [ 534.068407][T15428] IPVS: starting estimator thread 0... [ 534.076679][T20962] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 534.090925][T20962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3565'. [ 534.098825][T15417] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 534.165447][T20964] IPVS: using max 25 ests per chain, 60000 per kthread [ 534.185594][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 534.297573][T20968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3565'. [ 534.519288][T20975] syzkaller1: entered promiscuous mode [ 534.519313][T20975] syzkaller1: entered allmulticast mode [ 534.541955][T20975] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3569'. [ 534.543401][T20975] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3569'. [ 534.581491][T20977] netlink: 'syz.3.3568': attribute type 1 has an invalid length. [ 534.581514][T20977] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3568'. [ 535.419136][T20984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3571'. [ 535.426266][T20984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3571'. [ 535.587796][T20992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3573'. [ 535.851454][T20998] tipc: Enabling of bearer rejected, already enabled [ 535.994167][T21008] netlink: 'syz.1.3577': attribute type 4 has an invalid length. [ 536.089659][T21008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.443971][T21021] netlink: 'syz.0.3581': attribute type 1 has an invalid length. [ 536.613453][T21021] bond2: entered promiscuous mode [ 536.614698][T21021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 536.642954][T21032] netlink: 'syz.4.3582': attribute type 4 has an invalid length. [ 536.663466][T21032] .`: renamed from bond0 [ 536.880186][T21030] 8021q: adding VLAN 0 to HW filter on device bond2 [ 536.883464][T21030] bond2: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 536.883490][T21030] bond2: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 536.894035][T21030] bond2: (slave ip6gre2): making interface the new active one [ 536.894059][T21030] ip6gre2: entered promiscuous mode [ 536.904506][T21030] bond2: (slave ip6gre2): Enslaving as an active interface with an up link [ 536.965600][T21029] 8021q: adding VLAN 0 to HW filter on device .` [ 536.984415][T21029] bond0: (slave .`): making interface the new active one [ 536.998508][T21029] bond0: (slave .`): Enslaving as an active interface with an up link [ 537.228868][T21029] syz.4.3582 (21029) used greatest stack depth: 15584 bytes left [ 537.388951][T21051] bridge0: entered allmulticast mode [ 537.442579][T21062] netlink: 'syz.4.3590': attribute type 18 has an invalid length. [ 537.855899][T13757] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.855995][T13757] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.856068][T13757] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.856101][T13757] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.556458][T21101] openvswitch: netlink: Missing key (keys=40, expected=100) [ 538.582191][T21095] syzkaller0: entered promiscuous mode [ 538.582216][T21095] syzkaller0: entered allmulticast mode [ 538.636821][T21103] tipc: Enabling of bearer rejected, already enabled [ 538.822266][T21106] smc: net device vlan1 applied user defined pnetid SYZ2 [ 538.841197][T21106] __nla_validate_parse: 15 callbacks suppressed [ 538.841232][T21106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3596'. [ 539.451689][T21126] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3602'. [ 540.251563][T21144] wireguard0: entered promiscuous mode [ 540.251593][T21144] wireguard0: entered allmulticast mode [ 540.328102][T21137] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 540.330897][T21137] bond1: (slave macvlan2): making interface the new active one [ 540.333494][T21137] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 540.333688][T21145] lo: entered promiscuous mode [ 540.480978][T21145] tunl0: entered promiscuous mode [ 540.495621][T21145] gre0: entered promiscuous mode [ 540.512400][T21145] gretap0: entered promiscuous mode [ 540.536755][T21145] erspan0: entered promiscuous mode [ 540.545481][T21145] ip_vti0: entered promiscuous mode [ 540.560052][T21145] ip6_vti0: entered promiscuous mode [ 540.574266][T21145] sit0: entered promiscuous mode [ 540.596452][T21145] ip6tnl0: entered promiscuous mode [ 540.611211][T21145] ip6gre0: entered promiscuous mode [ 540.621171][T21145] syz_tun: entered promiscuous mode [ 540.644644][T21145] ip6gretap0: entered promiscuous mode [ 540.656219][T21145] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.657006][T21145] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.659652][T21145] bridge0: entered promiscuous mode [ 540.687915][T21145] vcan0: entered promiscuous mode [ 540.701694][T21145] bond0: entered promiscuous mode [ 540.701717][T21145] bond_slave_0: entered promiscuous mode [ 540.701966][T21145] bond_slave_1: entered promiscuous mode [ 540.727150][T21145] team0: entered promiscuous mode [ 540.727175][T21145] team_slave_0: entered promiscuous mode [ 540.730662][T21145] team_slave_1: entered promiscuous mode [ 540.751418][T21145] nlmon0: entered promiscuous mode [ 540.763903][T21145] batadv0: entered promiscuous mode [ 540.777310][T21145] vxcan0: entered promiscuous mode [ 540.782386][T21145] vxcan1: entered promiscuous mode [ 540.787344][T21145] veth0: entered promiscuous mode [ 540.797357][T21145] veth1: entered promiscuous mode [ 540.809500][T21145] wg0: entered promiscuous mode [ 540.821203][T21145] wg1: entered promiscuous mode [ 540.837160][T21145] wg2: entered promiscuous mode [ 540.852784][T21145] veth0_to_bridge: entered promiscuous mode [ 540.887881][T21145] veth1_to_bridge: entered promiscuous mode [ 540.944462][T21145] veth0_to_bond: entered promiscuous mode [ 540.994076][T21145] veth1_to_bond: entered promiscuous mode [ 541.029621][T21145] veth0_to_team: entered promiscuous mode [ 541.057346][T21145] veth1_to_team: entered promiscuous mode [ 541.087073][T21145] veth0_to_batadv: entered promiscuous mode [ 541.106132][T21145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.106190][T21145] batadv_slave_0: entered promiscuous mode [ 541.111985][T21145] veth1_to_batadv: entered promiscuous mode [ 541.116612][T21145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.116663][T21145] batadv_slave_1: entered promiscuous mode [ 541.120077][T21145] xfrm0: entered promiscuous mode [ 541.122835][T21145] veth0_to_hsr: entered promiscuous mode [ 541.130206][T21145] veth1_to_hsr: entered promiscuous mode [ 541.138638][T21145] hsr0: entered promiscuous mode [ 541.142016][T21145] veth1_virt_wifi: entered promiscuous mode [ 541.147489][T21145] veth0_virt_wifi: entered promiscuous mode [ 541.155120][T21145] virt_wifi0: entered promiscuous mode [ 541.182146][T21145] vlan1: entered promiscuous mode [ 541.206751][T21145] macvlan0: entered promiscuous mode [ 541.235083][T21145] macvlan1: entered promiscuous mode [ 541.271699][T21145] ipvlan0: entered promiscuous mode [ 541.271901][T21145] ipvlan1: entered promiscuous mode [ 541.297873][T21145] macvtap0: entered promiscuous mode [ 541.302693][T21145] macsec0: entered promiscuous mode [ 541.313588][T21145] geneve0: entered promiscuous mode [ 541.319006][T21145] geneve1: entered promiscuous mode [ 541.329320][T21145] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 541.348589][T21145] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 541.364845][T21145] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 541.397906][T21145] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 541.470338][T21145] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 541.492232][T21145] mac80211_hwsim hwsim53 wlan1: entered promiscuous mode [ 541.495108][T21145] bond1: entered promiscuous mode [ 541.495128][T21145] geneve2: entered promiscuous mode [ 541.497696][T21145] ip6erspan0: entered promiscuous mode [ 541.497841][T21145] ip6gre1: entered promiscuous mode [ 541.511694][T21145] bridge1: entered promiscuous mode [ 541.548036][T21145] macvlan2: entered promiscuous mode [ 541.551008][T21149] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3605'. [ 541.565359][T15429] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.565390][T15429] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 541.678294][T10981] bond_slave_0: entered promiscuous mode [ 541.678337][T10981] bond_slave_1: entered promiscuous mode [ 541.706934][ T1051] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.706969][ T1051] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 541.707641][ T1051] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.707666][ T1051] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 541.708181][ T1051] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.708203][ T1051] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 541.849638][T21157] macvtap1: entered promiscuous mode [ 541.849870][T21157] macvtap1: entered allmulticast mode [ 541.849884][T21157] vlan0: entered allmulticast mode [ 541.849897][T21157] veth0_vlan: entered allmulticast mode [ 542.093222][T21165] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3609'. [ 542.110976][T21165] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3609'. [ 542.114473][T21165] IPv6: Can't replace route, no match found [ 542.455702][T21180] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3612'. [ 542.928101][T21206] sctp: [Deprecated]: syz.3.3620 (pid 21206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 542.928101][T21206] Use struct sctp_sack_info instead [ 543.948562][T21236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3626'. [ 543.972171][T21236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.322865][T21244] xt_NFQUEUE: number of total queues is 0 [ 544.446243][T21246] netlink: 'syz.3.3632': attribute type 83 has an invalid length. [ 544.649477][T21252] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3633'. [ 544.713623][T21254] syzkaller1: entered promiscuous mode [ 544.713648][T21254] syzkaller1: entered allmulticast mode [ 545.301360][T21277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3638'. [ 546.023562][T21296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3645'. [ 546.023598][T21296] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3645'. [ 546.139188][T21299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3644'. [ 546.681197][T21314] IPVS: Unknown mcast interface: pimreg0 [ 546.719013][ T31] audit: type=1107 audit(1790187596.861:13): pid=21313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 546.895812][T21321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3651'. [ 547.417791][T21328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3652'. [ 547.739324][T21330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3653'. [ 547.741254][T21330] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3653'. [ 547.994365][T21347] tipc: Enabled bearer , priority 0 [ 548.021115][T21338] syzkaller0: MTU too low for tipc bearer [ 548.021137][T21338] tipc: Disabling bearer [ 548.076277][T21348] netlink: 'syz.2.3657': attribute type 1 has an invalid length. [ 548.128806][T21351] vlan2: entered allmulticast mode [ 548.128830][T21351] bond0: entered allmulticast mode [ 548.128843][T21351] bond_slave_0: entered allmulticast mode [ 548.128859][T21351] bond_slave_1: entered allmulticast mode [ 548.255425][T21357] ip_tables: iptables: counters copy to user failed while replacing table [ 548.873431][T21363] bond0: (slave bond_slave_0): Releasing backup interface [ 548.924316][T21366] bridge0: port 3(veth0) entered blocking state [ 548.924498][T21366] bridge0: port 3(veth0) entered disabled state [ 548.924722][T21366] veth0: entered allmulticast mode [ 548.954470][ T31] audit: type=1804 audit(1790187599.091:14): pid=21365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3662" name="/newroot/96/cgroup.controllers" dev="tmpfs" ino=511 res=1 errno=0 [ 548.954789][ T31] audit: type=1800 audit(1790187599.091:15): pid=21365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3662" name="cgroup.controllers" dev="tmpfs" ino=511 res=0 errno=0 [ 548.963378][T21371] tipc: Can't bind to reserved service type 1 [ 549.019531][T21374] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 549.174667][ T59] IPVS: starting estimator thread 0... [ 549.265660][T21378] IPVS: using max 24 ests per chain, 57600 per kthread [ 549.545514][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 549.800884][T21407] __nla_validate_parse: 4 callbacks suppressed [ 549.800907][T21407] netlink: 67 bytes leftover after parsing attributes in process `syz.4.3673'. [ 549.938309][T21407] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.006228][T21407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.470522][T21425] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 550.802396][T21407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.816155][T21407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.838949][T21407] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 550.838992][T21407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 550.869646][T21407] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 551.009321][ T1051] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.009443][ T1051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.032121][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.032237][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.345746][T21428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.869635][T21442] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3682'. [ 551.951568][T21446] netlink: 'syz.2.3679': attribute type 16 has an invalid length. [ 551.951595][T21446] netlink: 'syz.2.3679': attribute type 17 has an invalid length. [ 552.256804][T21446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.281234][T21446] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.311163][T21446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.387641][T21446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.393721][T21446] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 552.393747][T21446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 552.438696][T21438] netlink: 'syz.2.3679': attribute type 21 has an invalid length. [ 552.438722][T21438] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3679'. [ 552.442758][T21446] veth1_vlan: left promiscuous mode [ 552.444115][T21446] veth0_vlan: left promiscuous mode [ 552.484246][T21446] veth0_vlan: entered promiscuous mode [ 552.494182][T21446] veth1_vlan: entered promiscuous mode [ 552.511676][T21446] veth1_macvtap: left promiscuous mode [ 552.513053][T21446] veth0_macvtap: left promiscuous mode [ 552.514375][T21446] veth0_macvtap: entered promiscuous mode [ 552.533324][T21446] veth1_macvtap: entered promiscuous mode [ 552.551865][T21446] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 552.553048][T21446] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 552.554688][T21446] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 552.581020][T21446] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 552.584705][T21446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 552.602586][T21446] 8021q: adding VLAN 0 to HW filter on device bond2 [ 552.654615][T21446] bond3: left promiscuous mode [ 552.654640][T21446] geneve2: left promiscuous mode [ 552.667892][T21446] 8021q: adding VLAN 0 to HW filter on device bond3 [ 552.699417][T15428] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.699570][T15428] bridge0: port 1(bridge_slave_0) entered listening state [ 552.701896][T15428] bridge0: port 2() entered blocking state [ 552.702025][T15428] bridge0: port 2() entered listening state [ 552.888666][T21438] netlink: 'syz.2.3679': attribute type 5 has an invalid length. [ 552.888691][T21438] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3679'. [ 552.894526][T21459] syzkaller1: entered promiscuous mode [ 552.894555][T21459] syzkaller1: entered allmulticast mode [ 553.166723][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.166759][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.166784][ T49] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 553.167357][ T1051] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.167384][ T1051] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.167407][ T1051] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 553.167440][ T1051] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.167463][ T1051] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.167485][ T1051] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 553.167515][ T1051] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.167547][ T1051] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.167570][ T1051] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 553.191426][ T1051] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 553.262770][ T1051] bond2: (slave veth3): making interface the new active one [ 553.311794][ T1051] bond2: active interface up! [ 553.748986][T21493] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 554.003696][T21497] netlink: 'syz.1.3692': attribute type 26 has an invalid length. [ 554.044500][T21501] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3696'. [ 554.044526][T21501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3696'. [ 554.226164][T21504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3697'. [ 554.311576][T21504] 8021q: adding VLAN 0 to HW filter on device bond4 [ 554.332077][T21510] netlink: 'syz.4.3699': attribute type 4 has an invalid length. [ 554.374916][T21504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3697'. [ 554.408804][T21509] 8021q: adding VLAN 0 to HW filter on device bond4 [ 554.412472][T21509] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 554.415720][T21509] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 554.763519][T21519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.875235][T21523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3705'. [ 554.898420][T21523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3705'. [ 555.240536][T21541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3707'. [ 555.242038][T21546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3707'. [ 555.242654][T21546] syz.1.3707: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 555.242722][T21546] CPU: 1 UID: 0 PID: 21546 Comm: syz.1.3707 Not tainted syzkaller #0 PREEMPT(full) [ 555.242744][T21546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 555.242757][T21546] Call Trace: [ 555.242765][T21546] [ 555.242775][T21546] dump_stack_lvl+0xe8/0x150 [ 555.242811][T21546] warn_alloc+0x24d/0x270 [ 555.242838][T21546] ? kasan_save_track+0x4f/0x80 [ 555.242859][T21546] ? kasan_save_track+0x3e/0x80 [ 555.242883][T21546] ? __pfx_warn_alloc+0x10/0x10 [ 555.242901][T21546] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 555.242927][T21546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.242971][T21546] __vmalloc_node_range_noprof+0x127/0x1540 [ 555.243027][T21546] ? rcu_is_watching+0x16/0xb0 [ 555.243058][T21546] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 555.243087][T21546] ? __kmalloc_cache_noprof+0x321/0x600 [ 555.243109][T21546] ? __kmalloc_cache_noprof+0x14d/0x600 [ 555.243128][T21546] ? xskq_create+0x56/0x220 [ 555.243157][T21546] xskq_create+0x148/0x220 [ 555.243180][T21546] ? xsk_init_queue+0x8a/0xe0 [ 555.243205][T21546] xsk_init_queue+0x8a/0xe0 [ 555.243230][T21546] xsk_setsockopt+0x5e0/0x960 [ 555.243256][T21546] ? __pfx_xsk_setsockopt+0x10/0x10 [ 555.243277][T21546] ? __pfx_aa_sk_perm+0x10/0x10 [ 555.243305][T21546] ? aa_sock_opt_perm+0x142/0x1e0 [ 555.243336][T21546] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 555.243361][T21546] ? __pfx_xsk_setsockopt+0x10/0x10 [ 555.243394][T21546] do_sock_setsockopt+0x17c/0x1b0 [ 555.243423][T21546] __x64_sys_setsockopt+0x13d/0x1b0 [ 555.243456][T21546] do_syscall_64+0x166/0x520 [ 555.243478][T21546] ? trace_irq_disable+0x3b/0x140 [ 555.243498][T21546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.243516][T21546] ? clear_bhb_loop+0x70/0xc0 [ 555.243541][T21546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.243560][T21546] RIP: 0033:0x7f1158b9e159 [ 555.243579][T21546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.243597][T21546] RSP: 002b:00007f1159ad9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 555.243617][T21546] RAX: ffffffffffffffda RBX: 00007f1158e26090 RCX: 00007f1158b9e159 [ 555.243632][T21546] RDX: 0000000000000003 RSI: 000000000000011b RDI: 000000000000000d [ 555.243644][T21546] RBP: 00007f1158c3506b R08: 0000000000000004 R09: 0000000000000000 [ 555.243656][T21546] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.243669][T21546] R13: 00007f1158e26128 R14: 00007f1158e26090 R15: 00007ffc76624cd8 [ 555.243711][T21546] [ 555.243745][T21546] Mem-Info: [ 555.243755][T21546] active_anon:6396 inactive_anon:0 isolated_anon:0 [ 555.243755][T21546] active_file:16 inactive_file:43365 isolated_file:0 [ 555.243755][T21546] unevictable:0 dirty:172 writeback:0 [ 555.243755][T21546] slab_reclaimable:11966 slab_unreclaimable:115187 [ 555.243755][T21546] mapped:29607 shmem:522 pagetables:4321 [ 555.243755][T21546] sec_pagetables:0 bounce:0 [ 555.243755][T21546] kernel_misc_reclaimable:0 [ 555.243755][T21546] free:1057112 free_pcp:19214 free_cma:0 [ 555.243805][T21546] Node 0 active_anon:25276kB inactive_anon:0kB active_file:64kB inactive_file:173264kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118428kB dirty:688kB writeback:0kB shmem:2088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15944kB pagetables:15848kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 555.243858][T21546] Node 1 active_anon:308kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:1436kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 555.243907][T21546] Node 0 DMA free:12908kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:168kB local_pcp:124kB free_cma:0kB [ 555.243964][T21546] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 555.244005][T21546] Node 0 DMA32 free:647804kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25276kB inactive_anon:0kB active_file:64kB inactive_file:173264kB unevictable:0kB writepending:688kB zspages:0kB present:3129332kB managed:2546920kB mlocked:0kB bounce:0kB free_pcp:38796kB local_pcp:18340kB free_cma:0kB [ 555.244063][T21546] lowmem_reserve[]: 0 0 0 0 0 [ 555.244101][T21546] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 555.253188][T21546] lowmem_reserve[]: 0 0 0 0 0 [ 555.253228][T21546] Node 1 Normal free:3567736kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:308kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:37892kB local_pcp:9272kB free_cma:0kB [ 555.253281][T21546] lowmem_reserve[]: 0 0 0 0 0 [ 555.253313][T21546] Node 0 DMA: 3*4kB (U) 22*8kB (U) 13*16kB (U) 9*32kB (U) 11*64kB (U) 2*128kB (U) 4*256kB (U) 2*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 12908kB [ 555.253466][T21546] Node 0 DMA32: 4715*4kB (UM) 2738*8kB (UME) 1916*16kB (UME) 1873*32kB (UME) 1242*64kB (UME) 822*128kB (UME) 496*256kB (UM) 230*512kB (UM) 75*1024kB (UME) 5*2048kB (M) 0*4096kB = 647836kB [ 555.253606][T21546] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 555.253696][T21546] Node 1 Normal: 236*4kB (UM) 175*8kB (UM) 207*16kB (UM) 173*32kB (U) 173*64kB (U) 157*128kB (U) 161*256kB (UM) 149*512kB (UM) 118*1024kB (U) 1*2048kB (U) 802*4096kB (UM) = 3567736kB [ 555.253843][T21546] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 555.253857][T21546] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 555.253872][T21546] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 555.253885][T21546] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 555.253899][T21546] 43899 total pagecache pages [ 555.253906][T21546] 0 pages in swap cache [ 555.253913][T21546] Free swap = 124996kB [ 555.253920][T21546] Total swap = 124996kB [ 555.253927][T21546] 2097051 pages RAM [ 555.253934][T21546] 0 pages HighMem/MovableOnly [ 555.253941][T21546] 428705 pages reserved [ 555.253947][T21546] 0 pages cma reserved [ 555.265161][T21541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3707'. [ 555.735674][T21553] netlink: 'syz.4.3711': attribute type 21 has an invalid length. [ 556.458871][T21569] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3715'. [ 556.684067][T21578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3718'. [ 556.788049][T10983] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 556.789506][T21578] macsec1: entered allmulticast mode [ 556.789532][T21578] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 556.831775][T21578] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 557.303144][ T31] audit: type=1804 audit(1790187607.441:16): pid=21602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3724" name="/newroot/76/cgroup.controllers" dev="tmpfs" ino=408 res=1 errno=0 [ 557.303306][ T31] audit: type=1800 audit(1790187607.441:17): pid=21602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3724" name="cgroup.controllers" dev="tmpfs" ino=408 res=0 errno=0 [ 557.314607][T21602] No such timeout policy "syz0" [ 557.487587][T21607] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3723'. [ 558.038283][T21619] pimreg: tun_chr_ioctl cmd 1074025681 [ 558.092861][T21616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3728'. [ 558.093251][T21625] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3729'. [ 558.151312][T21625] xfrm0: entered allmulticast mode [ 558.179854][T21625] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 558.355777][T21631] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 558.597804][T21637] tipc: Enabled bearer , priority 0 [ 558.833122][T21636] tipc: Disabling bearer [ 559.301141][T21667] vlan2 (unregistering): left allmulticast mode [ 559.301167][T21667] geneve0 (unregistering): left allmulticast mode [ 559.301188][T21667] vlan2 (unregistering): left promiscuous mode [ 559.301201][T21667] geneve0 (unregistering): left promiscuous mode [ 559.301307][T21667] bridge0: port 3(vlan2) entered disabled state [ 559.593406][T21682] netlink: 'syz.0.3738': attribute type 2 has an invalid length. [ 559.593432][T21682] netlink: 'syz.0.3738': attribute type 11 has an invalid length. [ 559.664813][T21683] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 560.524245][T21698] __nla_validate_parse: 6 callbacks suppressed [ 560.524268][T21698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3743'. [ 560.686097][T21706] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3743'. [ 561.136071][T21716] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3742'. [ 561.226762][ T5628] Bluetooth: hci2: command 0x0405 tx timeout [ 561.417233][ T1051] bond2: (slave dummy0): link status up again after 0 ms [ 561.422917][T21703] bond_slave_0: entered promiscuous mode [ 561.440578][ T49] bond2: (slave dummy0): link status up again after 0 ms [ 561.455457][ T1051] bond2: (slave dummy0): link status up again after 0 ms [ 561.476217][T13757] bond2: (slave dummy0): link status up again after 0 ms [ 561.498836][ T147] bond2: (slave dummy0): link status up again after 0 ms [ 561.517468][ T147] bond2: (slave dummy0): link status up again after 0 ms [ 561.535457][T15429] bond2: (slave dummy0): link status up again after 0 ms [ 561.555586][T15429] bond2: (slave dummy0): link status up again after 0 ms [ 561.576100][ T1051] bond2: (slave dummy0): link status up again after 0 ms [ 561.601784][ T49] bond2: (slave dummy0): link status up again after 0 ms [ 561.651242][T21703] 8021q: adding VLAN 0 to HW filter on device bond1 [ 561.663001][T21703] ip6gre1: left promiscuous mode [ 561.664229][T21703] gretap1: left promiscuous mode [ 561.716407][T21724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3747'. [ 561.788819][T15429] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 561.842138][T15429] bond2: active interface up! [ 561.954345][T21732] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 561.971571][T21732] bond2 (unregistering): Released all slaves [ 563.889984][T21768] netlink: 'syz.4.3753': attribute type 23 has an invalid length. [ 564.254090][T21772] netlink: 'syz.2.3755': attribute type 5 has an invalid length. [ 564.254113][T21772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3755'. [ 564.626936][T21775] netlink: 'syz.3.3756': attribute type 1 has an invalid length. [ 565.002129][T21782] netlink: 'syz.2.3757': attribute type 1 has an invalid length. [ 565.003365][T21784] netlink: 'syz.2.3757': attribute type 1 has an invalid length. [ 565.126959][T21784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3757'. [ 565.349486][T21777] veth5: entered allmulticast mode [ 565.423907][T21793] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3760'. [ 565.449877][T21777] bond3: (slave veth5): Enslaving as an active interface with a down link [ 565.497531][T21778] bond3: (slave veth0_to_bond): making interface the new active one [ 565.500406][T21778] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 565.613842][T21775] macvlan2: entered promiscuous mode [ 565.613866][T21775] macvlan2: entered allmulticast mode [ 565.628853][T21775] bond3: entered promiscuous mode [ 565.628876][T21775] veth0_to_bond: entered promiscuous mode [ 565.635055][T21775] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 565.699872][T21803] netlink: 4912 bytes leftover after parsing attributes in process `syz.4.3758'. [ 565.979024][T21775] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth5 [ 566.199445][T21775] bond3: left promiscuous mode [ 566.199472][T21775] veth0_to_bond: left promiscuous mode [ 566.495168][T21813] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3764'. [ 566.526291][ T1051] net_ratelimit: 24 callbacks suppressed [ 566.526315][ T1051] bond2: (slave dummy0): failed to get link speed/duplex [ 566.560491][T21813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3764'. [ 566.637046][T15428] bond2: (slave dummy0): failed to get link speed/duplex [ 566.683325][T21819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3766'. [ 566.704888][T21819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3766'. [ 566.704914][T21819] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3766'. [ 566.796039][T15428] bond2: (slave dummy0): failed to get link speed/duplex [ 566.912004][T15428] bond2: (slave dummy0): failed to get link speed/duplex [ 567.015827][T15428] bond2: (slave dummy0): failed to get link speed/duplex [ 567.125820][ T147] bond2: (slave dummy0): failed to get link speed/duplex [ 567.235801][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 567.345967][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 567.458567][ T1051] bond2: (slave dummy0): failed to get link speed/duplex [ 567.567583][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 568.218913][T21842] netlink: 'syz.0.3774': attribute type 1 has an invalid length. [ 568.808810][T21848] bond3: (slave veth3): Enslaving as an active interface with a down link [ 568.910340][T21844] bond3: (slave veth5): Enslaving as an active interface with a down link [ 569.070620][T21849] veth7: entered allmulticast mode [ 569.086029][T21849] bond3: (slave veth7): Enslaving as an active interface with a down link [ 569.313793][T21864] netlink: 'syz.4.3779': attribute type 1 has an invalid length. [ 569.571395][T21864] 8021q: adding VLAN 0 to HW filter on device bond2 [ 569.714264][T21877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3781'. [ 569.820882][T21866] bond2: (slave gretap2): making interface the new active one [ 569.916886][T21883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3781'. [ 569.929402][T21866] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 570.520300][T21893] netlink: 'syz.1.3783': attribute type 2 has an invalid length. [ 570.732734][T21893] : entered promiscuous mode [ 571.421557][T21917] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3790'. [ 571.587059][T13757] net_ratelimit: 15 callbacks suppressed [ 571.587081][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 571.695548][ T1168] bond2: (slave dummy0): failed to get link speed/duplex [ 571.845638][T15417] bond2: (slave dummy0): failed to get link speed/duplex [ 571.863601][T21915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3789'. [ 571.956371][ T59] bond2: (slave dummy0): failed to get link speed/duplex [ 572.013384][T21922] tipc: Enabling of bearer rejected, already enabled [ 572.065535][ T1168] bond2: (slave dummy0): failed to get link speed/duplex [ 572.185948][T15418] bond2: (slave dummy0): failed to get link speed/duplex [ 572.298497][T21939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3795'. [ 572.600271][T21949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3798'. [ 572.631725][T21950] netlink: 'syz.0.3797': attribute type 1 has an invalid length. [ 572.631749][T21950] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3797'. [ 572.835886][ T151] bond2: (slave dummy0): failed to get link speed/duplex [ 572.947702][ T151] bond2: (slave dummy0): failed to get link speed/duplex [ 573.055558][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 573.166656][ T13] bond2: (slave dummy0): failed to get link speed/duplex [ 573.487105][T21965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3800'. [ 573.783612][T21970] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3803'. [ 574.505211][T21975] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3806'. [ 576.558939][T22001] ovs-s!: entered promiscuous mode [ 576.559924][T22014] tipc: Enabling of bearer rejected, already enabled [ 576.686488][T13750] net_ratelimit: 14 callbacks suppressed [ 576.686511][T13750] bond2: (slave dummy0): failed to get link speed/duplex [ 576.795558][T15431] bond2: (slave dummy0): failed to get link speed/duplex [ 576.907093][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 577.015529][T13578] bond2: (slave dummy0): failed to get link speed/duplex [ 577.126472][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 577.235567][ T13] bond2: (slave dummy0): failed to get link speed/duplex [ 577.278885][T22028] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3815'. [ 577.278914][T22028] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3815'. [ 577.278930][T22028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3815'. [ 577.346525][ T13] bond2: (slave dummy0): failed to get link speed/duplex [ 577.486383][T15417] bond2: (slave dummy0): failed to get link speed/duplex [ 577.601462][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 577.769712][T15419] bond2: (slave dummy0): failed to get link speed/duplex [ 577.906541][T22028] lo speed is unknown, defaulting to 1000 [ 578.329565][T22040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3818'. [ 578.349359][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 578.542956][T22035] lo speed is unknown, defaulting to 1000 [ 579.007822][T22056] tipc: Enabling of bearer rejected, already enabled [ 579.168852][T22059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3823'. [ 579.286024][T22060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3823'. [ 580.898071][T22112] bridge0: port 1(ip6gretap0) entered blocking state [ 580.903371][T22112] bridge0: port 1(ip6gretap0) entered disabled state [ 580.903577][T22112] ip6gretap0: entered allmulticast mode [ 580.951413][T22112] ip6gretap0: entered promiscuous mode [ 580.952609][T22112] bridge0: port 1(ip6gretap0) entered blocking state [ 580.952743][T22112] bridge0: port 1(ip6gretap0) entered forwarding state [ 581.728799][ T49] net_ratelimit: 21 callbacks suppressed [ 581.728822][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 581.814218][T22130] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 581.835708][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 581.949542][T15431] bond2: (slave dummy0): failed to get link speed/duplex [ 582.056518][T13578] bond2: (slave dummy0): failed to get link speed/duplex [ 582.173353][ T151] bond2: (slave dummy0): failed to get link speed/duplex [ 582.276624][T13578] bond2: (slave dummy0): failed to get link speed/duplex [ 582.386398][T15431] bond2: (slave dummy0): failed to get link speed/duplex [ 582.496022][T15419] bond2: (slave dummy0): failed to get link speed/duplex [ 582.607690][ T59] bond2: (slave dummy0): failed to get link speed/duplex [ 582.775573][T22161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3839'. [ 582.830710][ C1] bridge0: port 2() entered learning state [ 582.831460][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 582.984262][T22161] debugfs: 'hsr1' already exists in 'hsr' [ 582.984289][T22161] Cannot create hsr debugfs directory [ 582.984307][T22161] hsr1: entered promiscuous mode [ 583.397829][T22169] netlink: 'syz.2.3841': attribute type 3 has an invalid length. [ 583.397853][T22169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3841'. [ 584.475021][T22153] netlink: 'syz.4.3838': attribute type 1 has an invalid length. [ 585.254874][T22196] xt_cluster: node mask cannot exceed total number of nodes [ 585.282848][T22196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3847'. [ 585.310260][T22196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3847'. [ 585.488919][T22201] block nbd3: server does not support multiple connections per device. [ 585.489278][T22201] block nbd3: shutting down sockets [ 586.047159][T22210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3851'. [ 586.141961][T22210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3851'. [ 586.888642][T22224] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3855'. [ 587.057003][T22211] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 587.152918][T22211] 8021q: adding VLAN 0 to HW filter on device bond1 [ 587.201459][T22215] bond0: invalid NS target ff00:0:0:f9:: specified for addition [ 587.201490][T22215] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 587.206082][T13757] net_ratelimit: 23 callbacks suppressed [ 587.206099][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 587.504307][ T13] bond2: (slave dummy0): failed to get link speed/duplex [ 587.646663][T13750] bond2: (slave dummy0): failed to get link speed/duplex [ 587.756796][T13578] bond2: (slave dummy0): failed to get link speed/duplex [ 587.869633][ T151] bond2: (slave dummy0): failed to get link speed/duplex [ 587.976784][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 588.085986][ T13] bond2: (slave dummy0): failed to get link speed/duplex [ 588.195831][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 588.309165][T13578] bond2: (slave dummy0): failed to get link speed/duplex [ 588.421075][ T151] bond2: (slave dummy0): failed to get link speed/duplex [ 590.564581][T22284] netlink: 'syz.3.3869': attribute type 1 has an invalid length. [ 590.672053][ T4934] Bluetooth: hci2: command 0x0405 tx timeout [ 590.754084][T22284] 8021q: adding VLAN 0 to HW filter on device bond4 [ 591.141702][T22292] pimreg: entered allmulticast mode [ 591.580445][T22299] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3876'. [ 591.891348][T22303] vlan3: entered promiscuous mode [ 591.891372][T22303] bridge0: entered promiscuous mode [ 592.235528][ T59] net_ratelimit: 16 callbacks suppressed [ 592.235551][ T59] bond2: (slave dummy0): failed to get link speed/duplex [ 592.407407][T13750] bond2: (slave dummy0): failed to get link speed/duplex [ 592.516219][T15419] bond2: (slave dummy0): failed to get link speed/duplex [ 592.632221][T22322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3882'. [ 592.705673][T13750] bond2: (slave dummy0): failed to get link speed/duplex [ 592.762599][T22320] netlink: 'syz.1.3881': attribute type 1 has an invalid length. [ 593.187012][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 593.352342][T22327] bond2: (slave geneve2): making interface the new active one [ 593.394449][T22327] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 593.404856][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 593.414187][ T151] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 593.414532][ T151] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 593.414569][ T151] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 593.414600][ T151] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 593.513208][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 593.615518][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 593.686837][T22342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3886'. [ 593.760042][T22347] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3887'. [ 593.844854][T22350] IPv6: NLM_F_REPLACE set, but no existing node found! [ 593.845184][T22348] IPv6: NLM_F_REPLACE set, but no existing node found! [ 593.891346][T13578] bond2: (slave dummy0): failed to get link speed/duplex [ 594.076210][T15417] bond2: (slave dummy0): failed to get link speed/duplex [ 595.657377][T22386] bond6: option lacp_rate: invalid value (3) [ 595.761058][T22386] bond6 (unregistering): Released all slaves [ 596.120285][T22396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3897'. [ 596.479246][T22403] geneve3: entered promiscuous mode [ 596.479269][T22403] geneve3: entered allmulticast mode [ 597.251361][T22423] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3902'. [ 597.287677][T13750] net_ratelimit: 21 callbacks suppressed [ 597.287697][T13750] bond2: (slave dummy0): failed to get link speed/duplex [ 597.631914][T22428] IPVS: Error connecting to the multicast addr [ 597.665588][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 597.936572][T15431] bond2: (slave dummy0): failed to get link speed/duplex [ 598.046719][T15417] bond2: (slave dummy0): failed to get link speed/duplex [ 598.155471][T13578] bond2: (slave dummy0): failed to get link speed/duplex [ 598.269198][ T151] bond2: (slave dummy0): failed to get link speed/duplex [ 598.375901][ T59] bond2: (slave dummy0): failed to get link speed/duplex [ 598.607186][T22463] netlink: 'syz.0.3909': attribute type 1 has an invalid length. [ 598.607617][T13578] bond2: (slave dummy0): failed to get link speed/duplex [ 598.716168][ T13] bond2: (slave dummy0): failed to get link speed/duplex [ 598.841350][T13578] bond2: (slave dummy0): failed to get link speed/duplex [ 599.016729][T22463] IPVS: Error connecting to the multicast addr [ 599.408715][T22471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3910'. [ 599.639556][T22474] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 599.998696][T22478] bridge0: left promiscuous mode [ 600.175449][T22478] veth0: left allmulticast mode [ 600.175706][T22478] bridge0: port 3(veth0) entered disabled state [ 600.250911][T22478] bridge_slave_1: left allmulticast mode [ 600.251197][T22478] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.330355][T22478] bridge_slave_0: left allmulticast mode [ 600.330383][T22478] bridge_slave_0: left promiscuous mode [ 600.330607][T22478] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.950212][T22487] netlink: 'syz.2.3916': attribute type 11 has an invalid length. [ 601.331533][T22494] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3919'. [ 601.500236][T22499] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3920'. [ 603.063963][T22521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3925'. [ 603.366314][T15417] net_ratelimit: 19 callbacks suppressed [ 603.366338][T15417] bond2: (slave dummy0): failed to get link speed/duplex [ 603.479250][T15419] bond2: (slave dummy0): failed to get link speed/duplex [ 603.586166][ T59] bond2: (slave dummy0): failed to get link speed/duplex [ 603.817169][ T59] bond2: (slave dummy0): failed to get link speed/duplex [ 604.005641][ T13] bond2: (slave dummy0): failed to get link speed/duplex [ 604.123229][ T59] bond2: (slave dummy0): failed to get link speed/duplex [ 604.158289][T22535] netlink: 'syz.2.3928': attribute type 3 has an invalid length. [ 604.158371][T22535] netlink: 'syz.2.3928': attribute type 3 has an invalid length. [ 604.158418][T22535] netlink: 'syz.2.3928': attribute type 3 has an invalid length. [ 604.158464][T22535] netlink: 'syz.2.3928': attribute type 3 has an invalid length. [ 604.158510][T22535] netlink: 'syz.2.3928': attribute type 3 has an invalid length. [ 604.158587][T22535] netlink: 'syz.2.3928': attribute type 3 has an invalid length. [ 604.158657][T22535] netlink: 'syz.2.3928': attribute type 3 has an invalid length. [ 604.158701][T22535] netlink: 'syz.2.3928': attribute type 3 has an invalid length. [ 604.158746][T22535] netlink: 'syz.2.3928': attribute type 3 has an invalid length. [ 604.158791][T22535] netlink: 'syz.2.3928': attribute type 3 has an invalid length. [ 604.325539][ T151] bond2: (slave dummy0): failed to get link speed/duplex [ 604.344445][T22533] xt_hashlimit: size too large, truncated to 1048576 [ 604.438129][T15431] bond2: (slave dummy0): failed to get link speed/duplex [ 604.547381][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 604.655617][T15419] bond2: (slave dummy0): failed to get link speed/duplex [ 604.659517][ T13] IPVS: starting estimator thread 0... [ 604.702706][T22545] sysfs: cannot create duplicate filename '/class/ieee80211/.PÑè'óG!DEÒSˆ' [ 604.702728][T22545] CPU: 1 UID: 0 PID: 22545 Comm: syz.3.3929 Not tainted syzkaller #0 PREEMPT(full) [ 604.702751][T22545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 604.702762][T22545] Call Trace: [ 604.702770][T22545] [ 604.702779][T22545] dump_stack_lvl+0xe8/0x150 [ 604.702825][T22545] sysfs_warn_dup+0x8e/0xa0 [ 604.702857][T22545] sysfs_do_create_link_sd+0xc0/0x110 [ 604.702888][T22545] device_add_class_symlinks+0x1cf/0x240 [ 604.703034][T22545] device_add+0x467/0xb80 [ 604.703060][T22545] wiphy_register+0x1fc8/0x2ff0 [ 604.703158][T22545] ? __pfx_wiphy_register+0x10/0x10 [ 604.703181][T22545] ? __pfx_netdev_run_todo+0x10/0x10 [ 604.703261][T22545] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 604.703349][T22545] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 604.703403][T22545] ieee80211_register_hw+0x3d7c/0x4b40 [ 604.703467][T22545] ? ieee80211_register_hw+0x1991/0x4b40 [ 604.703522][T22545] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 604.703552][T22545] ? __asan_memset+0x22/0x50 [ 604.703584][T22545] ? __hrtimer_setup+0x1b7/0x260 [ 604.703619][T22545] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 604.703700][T22545] mac80211_hwsim_new_radio+0x3264/0x5720 [ 604.703761][T22545] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 604.703785][T22545] ? kstrndup+0xbd/0x160 [ 604.703821][T22545] ? kstrndup+0xbd/0x160 [ 604.703847][T22545] hwsim_new_radio_nl+0xd8b/0xf90 [ 604.703890][T22545] genl_family_rcv_msg_doit+0x233/0x340 [ 604.703925][T22545] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 604.703967][T22545] ? bpf_lsm_capable+0x9/0x20 [ 604.703988][T22545] ? security_capable+0x7e/0x2c0 [ 604.704044][T22545] genl_rcv_msg+0x614/0x7a0 [ 604.704077][T22545] ? __pfx_genl_rcv_msg+0x10/0x10 [ 604.704101][T22545] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 604.704143][T22545] netlink_rcv_skb+0x226/0x4a0 [ 604.704237][T22545] ? __pfx_genl_rcv_msg+0x10/0x10 [ 604.704264][T22545] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 604.704312][T22545] ? down_read+0x2be/0x330 [ 604.704349][T22545] genl_rcv+0x28/0x40 [ 604.704371][T22545] netlink_unicast+0x7bd/0x940 [ 604.704427][T22545] netlink_sendmsg+0x813/0xb40 [ 604.704460][T22545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.704490][T22545] ? apparmor_socket_sendmsg+0x98/0x360 [ 604.704517][T22545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.704537][T22545] sock_sendmsg_nosec+0x13a/0x180 [ 604.704563][T22545] ____sys_sendmsg+0x54e/0x850 [ 604.704598][T22545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 604.704637][T22545] ? import_iovec+0x73/0xa0 [ 604.704689][T22545] ___sys_sendmsg+0x2a5/0x360 [ 604.704715][T22545] ? __lock_acquire+0x747/0x2de0 [ 604.704745][T22545] ? __pfx____sys_sendmsg+0x10/0x10 [ 604.704777][T22545] ? futex_wait+0x2a2/0x390 [ 604.704851][T22545] ? __fget_files+0x2a/0x420 [ 604.704878][T22545] ? __fget_files+0x3a2/0x420 [ 604.704919][T22545] __x64_sys_sendmsg+0x1b1/0x290 [ 604.704950][T22545] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 604.705005][T22545] do_syscall_64+0x166/0x520 [ 604.705029][T22545] ? trace_irq_disable+0x3b/0x140 [ 604.705051][T22545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.705073][T22545] ? clear_bhb_loop+0x70/0xc0 [ 604.705100][T22545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.705120][T22545] RIP: 0033:0x7f9924d9e159 [ 604.705141][T22545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.705158][T22545] RSP: 002b:00007f9925cb3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 604.705182][T22545] RAX: ffffffffffffffda RBX: 00007f9925025fa0 RCX: 00007f9924d9e159 [ 604.705197][T22545] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 604.705210][T22545] RBP: 00007f9924e3506b R08: 0000000000000000 R09: 0000000000000000 [ 604.705222][T22545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.705235][T22545] R13: 00007f9925026038 R14: 00007f9925025fa0 R15: 00007ffcdf165a48 [ 604.705273][T22545] [ 604.796647][T22550] IPVS: using max 27 ests per chain, 64800 per kthread [ 605.574565][T22556] netlink: 712 bytes leftover after parsing attributes in process `syz.0.3934'. [ 605.574590][T22556] netlink: 5504 bytes leftover after parsing attributes in process `syz.0.3934'. [ 605.574604][T22556] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3934'. [ 605.704881][T22558] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3935'. [ 606.374989][T22568] vti0: entered promiscuous mode [ 606.936666][T22588] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3944'. [ 607.048121][T22588] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3944'. [ 607.368020][T22599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3947'. [ 607.438867][T22591] syzkaller0: entered promiscuous mode [ 607.438891][T22591] syzkaller0: entered allmulticast mode [ 607.443187][T22592] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3946'. [ 607.443211][T22592] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3946'. [ 608.385742][T22625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3952'. [ 608.481839][T22631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3955'. [ 608.498139][T15429] net_ratelimit: 24 callbacks suppressed [ 608.498163][T15429] bond2: (slave dummy0): failed to get link speed/duplex [ 608.605778][T15429] bond2: (slave dummy0): failed to get link speed/duplex [ 608.858958][ T151] bond2: (slave dummy0): failed to get link speed/duplex [ 608.967040][T15429] bond2: (slave dummy0): failed to get link speed/duplex [ 609.075546][T15429] bond2: (slave dummy0): failed to get link speed/duplex [ 609.185557][T15418] bond2: (slave dummy0): failed to get link speed/duplex [ 609.297835][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 609.470255][T13750] bond2: (slave dummy0): failed to get link speed/duplex [ 609.578221][T15431] bond2: (slave dummy0): failed to get link speed/duplex [ 609.755497][T15418] bond2: (slave dummy0): failed to get link speed/duplex [ 609.796051][T22656] validate_nla: 43 callbacks suppressed [ 609.796073][T22656] netlink: 'syz.2.3960': attribute type 1 has an invalid length. [ 609.796088][T22656] netlink: 1368 bytes leftover after parsing attributes in process `syz.2.3960'. [ 610.161372][T22660] xfrm1: entered allmulticast mode [ 610.369330][T22669] netlink: 15 bytes leftover after parsing attributes in process `syz.1.3964'. [ 610.635490][T22677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3967'. [ 610.636230][T22678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3967'. [ 610.638872][T22674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3966'. [ 611.035036][T22686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3968'. [ 611.049523][T22687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3968'. [ 611.049850][T22677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3967'. [ 612.303257][T22698] geneve3: entered promiscuous mode [ 612.905878][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.905903][ C1] bridge0: topology change detected, propagating [ 612.906372][ C1] bridge0: port 2() entered forwarding state [ 612.906388][ C1] bridge0: topology change detected, propagating [ 613.458284][T22727] __nla_validate_parse: 2 callbacks suppressed [ 613.458304][T22727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3975'. [ 613.503259][T22727] FAULT_INJECTION: forcing a failure. [ 613.503259][T22727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 613.503291][T22727] CPU: 1 UID: 0 PID: 22727 Comm: syz.2.3975 Not tainted syzkaller #0 PREEMPT(full) [ 613.503314][T22727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 613.503325][T22727] Call Trace: [ 613.503333][T22727] [ 613.503341][T22727] dump_stack_lvl+0xe8/0x150 [ 613.503375][T22727] should_fail_ex+0x410/0x560 [ 613.503405][T22727] _copy_from_user+0x2d/0xb0 [ 613.503430][T22727] ___sys_sendmsg+0x1c6/0x360 [ 613.503456][T22727] ? __lock_acquire+0x747/0x2de0 [ 613.503482][T22727] ? __pfx____sys_sendmsg+0x10/0x10 [ 613.503545][T22727] ? __fget_files+0x2a/0x420 [ 613.503571][T22727] ? __fget_files+0x3a2/0x420 [ 613.503608][T22727] __x64_sys_sendmsg+0x1b1/0x290 [ 613.503636][T22727] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 613.503683][T22727] do_syscall_64+0x166/0x520 [ 613.503707][T22727] ? trace_irq_disable+0x3b/0x140 [ 613.503726][T22727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.503745][T22727] ? clear_bhb_loop+0x70/0xc0 [ 613.503769][T22727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.503796][T22727] RIP: 0033:0x7fcd5ad9e159 [ 613.503815][T22727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.503831][T22727] RSP: 002b:00007fcd5bce0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 613.503853][T22727] RAX: ffffffffffffffda RBX: 00007fcd5b026090 RCX: 00007fcd5ad9e159 [ 613.503867][T22727] RDX: 000000002004207f RSI: 00002000000001c0 RDI: 0000000000000006 [ 613.503879][T22727] RBP: 00007fcd5bce0090 R08: 0000000000000000 R09: 0000000000000000 [ 613.503891][T22727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.503903][T22727] R13: 00007fcd5b026128 R14: 00007fcd5b026090 R15: 00007ffd168a6f08 [ 613.503935][T22727] [ 613.570270][ T151] net_ratelimit: 22 callbacks suppressed [ 613.570292][ T151] bond2: (slave dummy0): failed to get link speed/duplex [ 613.769237][T15431] bond2: (slave dummy0): failed to get link speed/duplex [ 613.880554][ T151] bond2: (slave dummy0): failed to get link speed/duplex [ 613.987436][ T13] bond2: (slave dummy0): failed to get link speed/duplex [ 614.096839][T13578] bond2: (slave dummy0): failed to get link speed/duplex [ 614.208389][ T151] bond2: (slave dummy0): failed to get link speed/duplex [ 614.316398][T15417] bond2: (slave dummy0): failed to get link speed/duplex [ 614.426366][T15417] bond2: (slave dummy0): failed to get link speed/duplex [ 614.539480][ T59] bond2: (slave dummy0): failed to get link speed/duplex [ 614.646265][ T59] bond2: (slave dummy0): failed to get link speed/duplex [ 614.788664][T22742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3979'. [ 614.788700][T22742] netlink: 'syz.4.3979': attribute type 30 has an invalid length. [ 614.788714][T22742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3979'. [ 614.790561][T22742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3979'. [ 614.790586][T22742] netlink: 'syz.4.3979': attribute type 30 has an invalid length. [ 614.790600][T22742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3979'. [ 615.165124][T22753] netlink: 'syz.1.3983': attribute type 10 has an invalid length. [ 615.904022][T22782] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3988'. [ 615.923899][T22778] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3986'. [ 616.416192][T22793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3990'. [ 616.445822][T22793] FAULT_INJECTION: forcing a failure. [ 616.445822][T22793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.445854][T22793] CPU: 1 UID: 0 PID: 22793 Comm: syz.4.3990 Not tainted syzkaller #0 PREEMPT(full) [ 616.445877][T22793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 616.445889][T22793] Call Trace: [ 616.445896][T22793] [ 616.445905][T22793] dump_stack_lvl+0xe8/0x150 [ 616.445938][T22793] should_fail_ex+0x410/0x560 [ 616.445966][T22793] _copy_from_user+0x2d/0xb0 [ 616.445992][T22793] __copy_msghdr+0x390/0x590 [ 616.446023][T22793] ___sys_sendmsg+0x213/0x360 [ 616.446047][T22793] ? __lock_acquire+0x747/0x2de0 [ 616.446073][T22793] ? __pfx____sys_sendmsg+0x10/0x10 [ 616.446135][T22793] ? __fget_files+0x2a/0x420 [ 616.446165][T22793] ? __fget_files+0x3a2/0x420 [ 616.446209][T22793] __x64_sys_sendmsg+0x1b1/0x290 [ 616.446238][T22793] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 616.446286][T22793] do_syscall_64+0x166/0x520 [ 616.446309][T22793] ? trace_irq_disable+0x3b/0x140 [ 616.446328][T22793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.446347][T22793] ? clear_bhb_loop+0x70/0xc0 [ 616.446371][T22793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.446390][T22793] RIP: 0033:0x7f460b39e159 [ 616.446409][T22793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.446426][T22793] RSP: 002b:00007f46095d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 616.446448][T22793] RAX: ffffffffffffffda RBX: 00007f460b626090 RCX: 00007f460b39e159 [ 616.446463][T22793] RDX: 000000002004207f RSI: 00002000000001c0 RDI: 0000000000000006 [ 616.446476][T22793] RBP: 00007f46095d5090 R08: 0000000000000000 R09: 0000000000000000 [ 616.446487][T22793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.446499][T22793] R13: 00007f460b626128 R14: 00007f460b626090 R15: 00007ffe51cc8f38 [ 616.446532][T22793] [ 617.401575][T22811] Cannot find del_set index 3 as target [ 617.538454][T22814] netlink: 'syz.4.3996': attribute type 2 has an invalid length. [ 617.570031][T22814] þ: entered promiscuous mode [ 617.571944][T22814] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3996'. [ 618.241652][T22818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3997'. [ 618.676327][T15429] net_ratelimit: 31 callbacks suppressed [ 618.676351][T15429] bond2: (slave dummy0): failed to get link speed/duplex [ 618.786491][ T151] bond2: (slave dummy0): failed to get link speed/duplex [ 618.896424][ T13] bond2: (slave dummy0): failed to get link speed/duplex [ 619.005904][T13750] bond2: (slave dummy0): failed to get link speed/duplex [ 619.117335][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 619.226776][T15419] bond2: (slave dummy0): failed to get link speed/duplex [ 619.395356][T22838] ip_tables: iptables: counters copy to user failed while replacing table [ 619.425616][T15417] bond2: (slave dummy0): failed to get link speed/duplex [ 619.562427][T22842] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 619.564074][T22842] bond4 (unregistering): Released all slaves [ 619.767871][ T151] bond2: (slave dummy0): failed to get link speed/duplex [ 619.812710][T22847] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 620.566848][T22854] x_tables: duplicate underflow at hook 1 [ 620.677040][T22863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4008'. [ 620.796511][T22871] netlink: 'syz.3.4009': attribute type 1 has an invalid length. [ 621.108511][T22871] 8021q: adding VLAN 0 to HW filter on device bond5 [ 621.664369][T22882] netdevsim netdevsim0 €Â: renamed from netdevsim0 [ 622.166453][T22888] bond6 (unregistering): Released all slaves [ 623.405123][T22930] tipc: Enabling of bearer rejected, already enabled [ 623.425789][T22920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.486851][T22932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4023'. [ 623.732260][T22932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4023'. [ 623.769645][T13750] net_ratelimit: 23 callbacks suppressed [ 623.769666][T13750] bond2: (slave dummy0): failed to get link speed/duplex [ 623.875492][ T13] bond2: (slave dummy0): failed to get link speed/duplex [ 623.985556][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 624.095469][T15431] bond2: (slave dummy0): failed to get link speed/duplex [ 624.205525][ T13] bond2: (slave dummy0): failed to get link speed/duplex [ 624.315631][T15431] bond2: (slave dummy0): failed to get link speed/duplex [ 624.434720][T15419] bond2: (slave dummy0): failed to get link speed/duplex [ 624.461508][T22947] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4027'. [ 624.535468][T15431] bond2: (slave dummy0): failed to get link speed/duplex [ 624.646745][T15419] bond2: (slave dummy0): failed to get link speed/duplex [ 624.814214][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 626.077480][T22983] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4031'. [ 626.143754][T22983] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4031'. [ 626.177527][T22983] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4031'. [ 626.467301][T22988] netlink: 'syz.4.4033': attribute type 21 has an invalid length. [ 626.694012][T22993] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4034'. [ 627.005788][T22992] bridge3: entered allmulticast mode [ 627.247828][T22999] netlink: 'syz.3.4036': attribute type 1 has an invalid length. [ 627.366455][T23002] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4036'. [ 627.680417][T23009] bond3: option ad_user_port_key: invalid value (65535) [ 627.680444][T23009] bond3: option ad_user_port_key: allowed values 0 - 1023 [ 627.718987][T23009] bond3 (unregistering): Released all slaves [ 627.849853][T23015] netlink: 'syz.2.4038': attribute type 1 has an invalid length. [ 627.849877][T23015] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4038'. [ 628.836230][ T147] net_ratelimit: 24 callbacks suppressed [ 628.836253][ T147] bond2: (slave dummy0): failed to get link speed/duplex [ 628.947409][T13750] bond2: (slave dummy0): failed to get link speed/duplex [ 629.056617][T15429] bond2: (slave dummy0): failed to get link speed/duplex [ 629.165622][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 629.275469][T15429] bond2: (slave dummy0): failed to get link speed/duplex [ 629.393002][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 629.496334][ T59] bond2: (slave dummy0): failed to get link speed/duplex [ 629.806070][T15417] bond2: (slave dummy0): failed to get link speed/duplex [ 629.917594][T15429] bond2: (slave dummy0): failed to get link speed/duplex [ 630.056783][T15418] bond2: (slave dummy0): failed to get link speed/duplex [ 630.102293][T23056] lo speed is unknown, defaulting to 1000 [ 630.342880][T23077] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4049'. [ 631.260863][T23098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4053'. [ 631.279990][T23094] x_tables: duplicate entry at hook 2 [ 631.451442][T23102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4054'. [ 631.451472][T23102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4054'. [ 631.451541][T23102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4054'. [ 631.540408][T23098] bond6: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 631.542605][T23098] bond6 (unregistering): Released all slaves [ 631.645931][T23113] netlink: 'syz.1.4056': attribute type 1 has an invalid length. [ 632.690205][T23131] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4062'. [ 633.129966][T23141] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4062'. [ 633.631797][T23145] siw: device registration error -23 [ 633.931736][ T59] net_ratelimit: 24 callbacks suppressed [ 633.931761][ T59] bond2: (slave dummy0): failed to get link speed/duplex [ 634.036313][T15415] bond2: (slave dummy0): failed to get link speed/duplex [ 634.145611][T15420] bond2: (slave dummy0): failed to get link speed/duplex [ 634.147783][T23146] netlink: 'syz.2.4064': attribute type 9 has an invalid length. [ 634.258758][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 634.665445][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 635.221076][T23173] netlink: Invalid conntrack helper [ 635.221110][T23173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 635.483459][T23179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4069'. [ 635.574473][T23184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4070'. [ 635.630774][T23181] xt_CT: No such helper "snmp" [ 635.822820][T15415] bond2: (slave dummy0): failed to get link speed/duplex [ 635.925664][T15418] bond2: (slave dummy0): failed to get link speed/duplex [ 635.949336][T23168] tipc: New replicast peer: 255.255.255.255 [ 635.958137][T23168] tipc: Enabled bearer , priority 10 [ 636.084924][T23187] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 636.241333][T23189] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 636.257469][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 636.367502][T23081] bond2: (slave dummy0): failed to get link speed/duplex [ 636.641781][T23198] xt_hashlimit: size too large, truncated to 1048576 [ 636.941128][T23219] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4079'. [ 636.941165][T23219] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4079'. [ 637.029762][T23224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4079'. [ 637.029844][T23224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4079'. [ 637.410680][T23199] syzkaller0: entered promiscuous mode [ 637.410707][T23199] syzkaller0: entered allmulticast mode [ 637.457733][T10982] tipc: Node number set to 3381167318 [ 643.131160][T23234] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4082'. [ 643.131243][T23241] tc_dump_action: action bad kind [ 643.154614][T15430] net_ratelimit: 5 callbacks suppressed [ 643.154632][T15430] bond2: (slave dummy0): failed to get link speed/duplex [ 643.262089][T15430] bond2: (slave dummy0): failed to get link speed/duplex [ 643.375769][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 643.487008][ T147] bond2: (slave dummy0): failed to get link speed/duplex [ 643.597060][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 643.619345][T23260] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4086'. [ 643.709628][T15418] bond2: (slave dummy0): failed to get link speed/duplex [ 643.939936][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 644.166620][T15418] bond2: (slave dummy0): failed to get link speed/duplex [ 644.278822][T23081] bond2: (slave dummy0): failed to get link speed/duplex [ 644.300816][T23282] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4090'. [ 644.387138][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 648.236461][T15434] net_ratelimit: 11 callbacks suppressed [ 648.236485][T15434] bond2: (slave dummy0): failed to get link speed/duplex [ 648.465497][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 648.654399][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 648.907943][T15434] bond2: (slave dummy0): failed to get link speed/duplex [ 649.155628][T15434] bond2: (slave dummy0): failed to get link speed/duplex [ 649.566766][T15434] bond2: (slave dummy0): failed to get link speed/duplex [ 649.923531][T15422] bond2: (slave dummy0): failed to get link speed/duplex [ 650.109035][ T13] bond2: (slave dummy0): failed to get link speed/duplex [ 650.230886][T15428] bond2: (slave dummy0): failed to get link speed/duplex [ 650.380636][ T59] bond2: (slave dummy0): failed to get link speed/duplex [ 653.265880][T15422] net_ratelimit: 10 callbacks suppressed [ 653.265906][T15422] bond2: (slave dummy0): failed to get link speed/duplex [ 653.440064][T15420] bond2: (slave dummy0): failed to get link speed/duplex [ 653.901743][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 654.203925][T15435] bond2: (slave dummy0): failed to get link speed/duplex [ 654.546930][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 654.700523][T15422] bond2: (slave dummy0): failed to get link speed/duplex [ 654.826283][T15435] bond2: (slave dummy0): failed to get link speed/duplex [ 654.987680][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 655.324200][ T13] bond2: (slave dummy0): failed to get link speed/duplex [ 655.535727][T15422] bond2: (slave dummy0): failed to get link speed/duplex [ 658.455259][ C1] sched: DL replenish lagged too much [ 661.248541][ T49] net_ratelimit: 11 callbacks suppressed [ 661.248567][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 661.703677][T15420] bond2: (slave dummy0): failed to get link speed/duplex [ 661.806297][ T59] bond2: (slave dummy0): failed to get link speed/duplex [ 661.920294][T15420] bond2: (slave dummy0): failed to get link speed/duplex [ 662.037177][T15417] bond2: (slave dummy0): failed to get link speed/duplex [ 662.154261][T15417] bond2: (slave dummy0): failed to get link speed/duplex [ 662.265967][T15434] bond2: (slave dummy0): failed to get link speed/duplex [ 662.669116][T15434] bond2: (slave dummy0): failed to get link speed/duplex [ 663.397924][T15434] bond2: (slave dummy0): failed to get link speed/duplex [ 663.547836][ T147] bond2: (slave dummy0): failed to get link speed/duplex [ 666.476587][T15415] net_ratelimit: 9 callbacks suppressed [ 666.476612][T15415] bond2: (slave dummy0): failed to get link speed/duplex [ 666.698055][ T59] bond2: (slave dummy0): failed to get link speed/duplex [ 666.823490][T15430] bond2: (slave dummy0): failed to get link speed/duplex [ 666.930412][ T13] bond2: (slave dummy0): failed to get link speed/duplex [ 667.272484][ T151] bond2: (slave dummy0): failed to get link speed/duplex [ 667.376210][ T151] bond2: (slave dummy0): failed to get link speed/duplex [ 667.583281][ T13] bond2: (slave dummy0): failed to get link speed/duplex [ 667.828740][T15428] bond2: (slave dummy0): failed to get link speed/duplex [ 667.948034][T15430] bond2: (slave dummy0): failed to get link speed/duplex [ 668.461804][T15435] bond2: (slave dummy0): failed to get link speed/duplex [ 677.155965][ T4934] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 677.535932][ T4934] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 677.961800][ T4934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 678.286509][ T4934] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 678.287993][ T4934] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 680.859379][ T4934] Bluetooth: hci3: command tx timeout [ 682.626784][ T5628] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 682.906172][ T5628] Bluetooth: hci3: command tx timeout [ 683.136312][ T5628] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 683.226571][ T5628] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 683.825340][ T5628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 684.766495][ T5628] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 684.985719][ T4934] Bluetooth: hci3: command tx timeout [ 687.096075][T21663] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 687.100199][T21663] Bluetooth: hci3: command tx timeout [ 688.160431][T23328] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 688.174820][T23328] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 688.191261][T23328] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 688.405784][T23328] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 688.595436][ T4934] Bluetooth: hci6: command tx timeout [ 688.815616][ T49] net_ratelimit: 2 callbacks suppressed [ 688.815641][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 689.109986][T13755] bond2: (slave dummy0): failed to get link speed/duplex [ 689.234809][ T151] bond2: (slave dummy0): failed to get link speed/duplex [ 690.687283][T23328] Bluetooth: hci6: command tx timeout [ 691.625624][T23328] Bluetooth: hci7: command tx timeout [ 692.125812][T15420] bond2: (slave dummy0): failed to get link speed/duplex [ 692.825485][T23328] Bluetooth: hci6: command tx timeout [ 692.875635][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 693.253699][T15414] bond2: (slave dummy0): failed to get link speed/duplex [ 693.544429][T15419] bond2: (slave dummy0): failed to get link speed/duplex [ 693.678966][ T4934] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 693.802586][ T4934] Bluetooth: hci7: command tx timeout [ 693.828163][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 694.033366][T15414] bond2: (slave dummy0): failed to get link speed/duplex [ 694.049232][ T4934] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 694.109480][ T4934] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 694.112324][ T4934] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 694.113805][ T4934] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 694.185905][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 694.535041][T15420] bond2: (slave dummy0): failed to get link speed/duplex [ 694.780033][ T59] bond2: (slave dummy0): failed to get link speed/duplex [ 694.906569][T23328] Bluetooth: hci6: command tx timeout [ 695.169709][T15419] bond2: (slave dummy0): failed to get link speed/duplex [ 695.414533][T13755] bond2: (slave dummy0): failed to get link speed/duplex [ 695.642301][T15417] bond2: (slave dummy0): failed to get link speed/duplex [ 695.853738][T15428] bond2: (slave dummy0): failed to get link speed/duplex [ 695.871833][T23328] Bluetooth: hci7: command tx timeout [ 695.956403][T15428] bond2: (slave dummy0): failed to get link speed/duplex [ 697.955332][ T4934] Bluetooth: hci7: command tx timeout [ 697.955406][ T4934] Bluetooth: hci8: command tx timeout [ 698.906276][T15415] net_ratelimit: 6 callbacks suppressed [ 698.906301][T15415] bond2: (slave dummy0): failed to get link speed/duplex [ 699.154748][ T13] bond2: (slave dummy0): failed to get link speed/duplex [ 699.274195][T13755] bond2: (slave dummy0): failed to get link speed/duplex [ 699.396702][ T59] bond2: (slave dummy0): failed to get link speed/duplex [ 699.525530][T13754] bond2: (slave dummy0): failed to get link speed/duplex [ 699.685660][ T13] bond2: (slave dummy0): failed to get link speed/duplex [ 699.858340][T15419] bond2: (slave dummy0): failed to get link speed/duplex [ 700.235627][ T4934] Bluetooth: hci8: command tx timeout [ 700.479341][T15417] bond2: (slave dummy0): failed to get link speed/duplex [ 700.686527][T13754] bond2: (slave dummy0): failed to get link speed/duplex [ 700.902739][T15430] bond2: (slave dummy0): failed to get link speed/duplex [ 701.414649][T23328] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 701.581833][T23328] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 702.355291][T23328] Bluetooth: hci8: command tx timeout [ 703.675287][ T4934] Bluetooth: hci9: Opcode 0x1001 failed: -110 [ 704.525285][T23328] Bluetooth: hci8: command tx timeout [ 705.622870][T23328] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 705.746505][T23328] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 705.796152][T23328] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 705.798431][T23328] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 705.799922][T23328] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 708.426218][ T4934] Bluetooth: hci9: command tx timeout [ 710.587940][ T4934] Bluetooth: hci9: command tx timeout [ 712.681962][ T4934] Bluetooth: hci9: command tx timeout [ 713.548840][T15422] net_ratelimit: 3 callbacks suppressed [ 713.548863][T15422] bond2: (slave dummy0): failed to get link speed/duplex [ 713.844746][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 713.948187][ T147] bond2: (slave dummy0): failed to get link speed/duplex [ 714.165767][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 714.487238][T15420] bond2: (slave dummy0): failed to get link speed/duplex [ 714.715712][T15420] bond2: (slave dummy0): failed to get link speed/duplex [ 714.769911][ T4934] Bluetooth: hci9: command tx timeout [ 714.832791][ T13] bond2: (slave dummy0): failed to get link speed/duplex [ 714.946014][ T13] bond2: (slave dummy0): failed to get link speed/duplex [ 715.496170][ T13] bond2: (slave dummy0): failed to get link speed/duplex [ 716.147969][ T147] bond2: (slave dummy0): failed to get link speed/duplex [ 718.716107][T15417] net_ratelimit: 8 callbacks suppressed [ 718.716132][T15417] bond2: (slave dummy0): failed to get link speed/duplex [ 718.834544][T15417] bond2: (slave dummy0): failed to get link speed/duplex [ 719.105855][T13755] bond2: (slave dummy0): failed to get link speed/duplex [ 719.577903][T15420] bond2: (slave dummy0): failed to get link speed/duplex [ 720.074785][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 720.631315][T15435] bond2: (slave dummy0): failed to get link speed/duplex [ 720.880813][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 721.005252][T15418] bond2: (slave dummy0): failed to get link speed/duplex [ 721.176034][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 721.296279][T15434] bond2: (slave dummy0): failed to get link speed/duplex [ 742.247778][T15419] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.247827][T15419] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.198135][T15434] net_ratelimit: 2 callbacks suppressed [ 746.198157][T15434] bond2: (slave dummy0): failed to get link speed/duplex [ 746.325879][T15415] bond2: (slave dummy0): failed to get link speed/duplex [ 746.487895][T13755] bond2: (slave dummy0): failed to get link speed/duplex [ 746.786329][T13754] bond2: (slave dummy0): failed to get link speed/duplex [ 746.963391][T13755] bond2: (slave dummy0): failed to get link speed/duplex [ 747.094924][T15434] bond2: (slave dummy0): failed to get link speed/duplex [ 747.198816][T13755] bond2: (slave dummy0): failed to get link speed/duplex [ 747.305396][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 747.311348][T15415] bond2: (slave dummy0): failed to get link speed/duplex [ 747.446062][T15430] bond2: (slave dummy0): failed to get link speed/duplex [ 748.235588][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 748.510693][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 748.748963][T21663] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 748.762732][T21663] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 748.765175][T21663] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 749.065369][T21663] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 749.735858][ T4934] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 750.265878][ T4934] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 751.170089][ T4934] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 751.176513][ T4934] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 751.786636][ T4934] Bluetooth: hci0: command tx timeout [ 752.658085][T23328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 752.867153][T23328] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 752.872931][T23328] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 752.948170][T23328] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 752.949705][T23328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 753.786383][T21663] Bluetooth: hci1: command tx timeout [ 753.868077][T21663] Bluetooth: hci0: command tx timeout [ 755.865503][T23328] Bluetooth: hci1: command tx timeout [ 755.985363][T23328] Bluetooth: hci0: command tx timeout [ 756.563167][T21663] Bluetooth: hci2: command tx timeout [ 756.566243][T21663] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 756.579602][T21663] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 756.580906][T21663] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 756.593507][T21663] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 756.598213][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 758.005350][T23328] Bluetooth: hci1: command tx timeout [ 758.050360][T23328] Bluetooth: hci0: command tx timeout [ 758.647877][ T5628] Bluetooth: hci2: command tx timeout [ 760.031742][ T5628] Bluetooth: hci1: command tx timeout [ 760.275257][ T5628] Bluetooth: hci4: command tx timeout [ 760.668367][ T5628] Bluetooth: hci2: command tx timeout [ 762.345286][ T5628] Bluetooth: hci4: command tx timeout [ 762.759022][ T5628] Bluetooth: hci2: command tx timeout [ 764.675361][ T5628] Bluetooth: hci4: command tx timeout [ 766.810798][T23328] Bluetooth: hci4: command tx timeout [ 768.866578][T15435] bond2: (slave dummy0): failed to get link speed/duplex [ 769.577565][ T151] bond2: (slave dummy0): failed to get link speed/duplex [ 769.766085][ T147] bond2: (slave dummy0): failed to get link speed/duplex [ 769.914640][T15430] bond2: (slave dummy0): failed to get link speed/duplex [ 770.145747][T15435] bond2: (slave dummy0): failed to get link speed/duplex [ 770.268159][T15415] bond2: (slave dummy0): failed to get link speed/duplex [ 770.485630][T15435] bond2: (slave dummy0): failed to get link speed/duplex [ 770.736042][T15430] bond2: (slave dummy0): failed to get link speed/duplex [ 771.777640][T15417] bond2: (slave dummy0): failed to get link speed/duplex [ 772.649964][T13754] bond2: (slave dummy0): failed to get link speed/duplex [ 772.683257][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 773.511899][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 773.675786][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 774.345779][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 774.455930][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 777.365791][T23328] Bluetooth: hci5: command tx timeout [ 779.388276][T23328] Bluetooth: hci5: command tx timeout [ 781.608918][T23328] Bluetooth: hci5: command tx timeout [ 783.645350][T23328] Bluetooth: hci5: command tx timeout [ 794.408801][T15419] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.408841][T15419] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.574174][T15430] net_ratelimit: 1 callbacks suppressed [ 797.574205][T15430] bond2: (slave dummy0): failed to get link speed/duplex [ 798.421130][T15417] bond2: (slave dummy0): failed to get link speed/duplex [ 798.796671][T15418] bond2: (slave dummy0): failed to get link speed/duplex [ 799.515906][T15415] bond2: (slave dummy0): failed to get link speed/duplex [ 799.797454][T15418] bond2: (slave dummy0): failed to get link speed/duplex [ 800.869824][T15417] bond2: (slave dummy0): failed to get link speed/duplex [ 801.126055][T15415] bond2: (slave dummy0): failed to get link speed/duplex [ 801.255793][T23081] bond2: (slave dummy0): failed to get link speed/duplex [ 801.699884][T15417] bond2: (slave dummy0): failed to get link speed/duplex [ 801.921754][T15434] bond2: (slave dummy0): failed to get link speed/duplex [ 809.796833][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 809.800754][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 809.802054][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 809.804337][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 809.814157][ T5628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 811.946163][T23328] Bluetooth: hci3: command tx timeout [ 812.986028][ T5628] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 813.005874][ T5628] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 813.015792][ T5628] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 813.947836][T21663] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 814.167779][T21663] Bluetooth: hci3: command tx timeout [ 814.245934][ T4934] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 814.247468][ T4934] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 814.901835][ T4934] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 815.125826][ T4934] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 815.237628][ T4934] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 815.239183][ T4934] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 816.185252][ T5628] Bluetooth: hci3: command tx timeout [ 818.296655][T23328] Bluetooth: hci3: command tx timeout [ 819.385629][T21663] Bluetooth: hci7: command tx timeout [ 819.746079][T21663] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 819.785694][T21663] Bluetooth: hci6: command tx timeout [ 820.236643][T15419] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.236682][T15419] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.241435][T21663] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 820.455310][T21663] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 820.695271][T21663] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 820.696899][T21663] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 821.610190][T21663] Bluetooth: hci7: command tx timeout [ 821.925201][ T5628] Bluetooth: hci6: command tx timeout [ 823.626042][T21663] Bluetooth: hci7: command tx timeout [ 823.947061][T21663] Bluetooth: hci6: command tx timeout [ 825.015236][T21663] Bluetooth: hci8: command tx timeout [ 825.909534][T21663] Bluetooth: hci7: command tx timeout [ 826.045249][T21663] Bluetooth: hci6: command tx timeout [ 827.125204][T21663] Bluetooth: hci8: command tx timeout [ 829.302056][T21663] Bluetooth: hci8: command tx timeout [ 830.505676][T15420] net_ratelimit: 3 callbacks suppressed [ 830.505702][T15420] bond2: (slave dummy0): failed to get link speed/duplex [ 830.772614][T15417] bond2: (slave dummy0): failed to get link speed/duplex [ 830.995807][T23081] bond2: (slave dummy0): failed to get link speed/duplex [ 831.194795][T15417] bond2: (slave dummy0): failed to get link speed/duplex [ 831.305377][T21663] Bluetooth: hci8: command tx timeout [ 831.937012][T23328] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 831.943167][T23328] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 831.944457][T23328] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 832.155672][T23328] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 832.160099][ T151] bond2: (slave dummy0): failed to get link speed/duplex [ 832.465715][T23328] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 832.652762][T13755] bond2: (slave dummy0): failed to get link speed/duplex [ 833.010789][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 833.237973][T13754] bond2: (slave dummy0): failed to get link speed/duplex [ 834.146013][T15430] bond2: (slave dummy0): failed to get link speed/duplex [ 834.273304][T13754] bond2: (slave dummy0): failed to get link speed/duplex [ 835.525312][T23328] Bluetooth: hci9: command tx timeout [ 837.602978][T23328] Bluetooth: hci9: command tx timeout [ 839.651519][T23328] Bluetooth: hci9: command tx timeout [ 841.805383][T23328] Bluetooth: hci9: command tx timeout [ 848.196960][T15419] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 848.196999][T15419] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.186834][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 849.916266][ T1051] bond2: (slave dummy0): failed to get link speed/duplex [ 850.134370][T15420] bond2: (slave dummy0): failed to get link speed/duplex [ 850.368389][T13751] bond2: (slave dummy0): failed to get link speed/duplex [ 851.327934][ T1051] bond2: (slave dummy0): failed to get link speed/duplex [ 852.044248][T15420] bond2: (slave dummy0): failed to get link speed/duplex [ 852.189571][ T59] bond2: (slave dummy0): failed to get link speed/duplex [ 852.313080][T13755] bond2: (slave dummy0): failed to get link speed/duplex [ 853.162049][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 853.286679][ T59] bond2: (slave dummy0): failed to get link speed/duplex [ 854.516243][T15414] net_ratelimit: 2 callbacks suppressed [ 854.516265][T15414] bond2: (slave dummy0): failed to get link speed/duplex [ 854.652474][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 854.910101][T15414] bond2: (slave dummy0): failed to get link speed/duplex [ 855.995823][T13751] bond2: (slave dummy0): failed to get link speed/duplex [ 856.116157][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 856.305642][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 856.520046][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 856.775629][T15414] bond2: (slave dummy0): failed to get link speed/duplex [ 856.928281][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 858.007057][T15418] bond2: (slave dummy0): failed to get link speed/duplex [ 859.562899][T13747] net_ratelimit: 8 callbacks suppressed [ 859.562924][T13747] bond2: (slave dummy0): failed to get link speed/duplex [ 859.835803][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 859.982380][T15426] bond2: (slave dummy0): failed to get link speed/duplex [ 860.086776][T15418] bond2: (slave dummy0): failed to get link speed/duplex [ 860.255597][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 860.502357][T15422] bond2: (slave dummy0): failed to get link speed/duplex [ 860.993694][T15435] bond2: (slave dummy0): failed to get link speed/duplex [ 861.188639][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 861.392945][ T49] bond2: (slave dummy0): failed to get link speed/duplex [ 870.459364][T15428] bond2: (slave dummy0): failed to get link speed/duplex [ 870.950317][T15428] bond2: (slave dummy0): failed to get link speed/duplex [ 871.128225][ T1051] bond2: (slave dummy0): failed to get link speed/duplex [ 871.358033][ T1051] bond2: (slave dummy0): failed to get link speed/duplex [ 871.486788][T15428] bond2: (slave dummy0): failed to get link speed/duplex [ 873.345685][T21663] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 873.349067][T21663] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 873.350384][T21663] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 873.352637][T21663] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 873.354157][T21663] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 875.584965][T15414] bond2: (slave dummy0): failed to get link speed/duplex [ 875.932810][T15430] bond2: (slave dummy0): failed to get link speed/duplex [ 876.905219][T21663] Bluetooth: hci0: command tx timeout [ 877.813601][T15434] bond2: (slave dummy0): failed to get link speed/duplex [ 878.083553][T15414] bond2: (slave dummy0): failed to get link speed/duplex [ 878.196739][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 878.327141][T13757] bond2: (slave dummy0): failed to get link speed/duplex [ 878.825623][T15414] bond2: (slave dummy0): failed to get link speed/duplex [ 878.946822][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 878.952132][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 879.115396][ T5628] Bluetooth: hci0: command tx timeout [ 879.188288][ T1051] bond2: (slave dummy0): failed to get link speed/duplex [ 879.581740][T15434] bond2: (slave dummy0): failed to get link speed/duplex [ 879.609189][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 879.625725][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 879.807707][T23081] bond2: (slave dummy0): failed to get link speed/duplex [ 879.975373][ T4934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 880.188869][T21663] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 881.145818][T21663] Bluetooth: hci0: command tx timeout [ 882.069258][T21663] Bluetooth: hci2: command tx timeout [ 883.243991][T21663] Bluetooth: hci0: command tx timeout [ 884.105377][T21663] Bluetooth: hci2: command tx timeout [ 885.356936][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 885.709193][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 885.725755][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 886.326505][ T5628] Bluetooth: hci2: command tx timeout [ 886.327340][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 886.328859][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 887.121710][T15419] ip6gretap0: left allmulticast mode [ 887.122167][T15419] ip6gretap0: left promiscuous mode [ 887.123886][T15419] bridge0: port 1(ip6gretap0) entered disabled state [ 888.345451][T21663] Bluetooth: hci2: command tx timeout [ 888.599382][T21663] Bluetooth: hci1: command tx timeout [ 891.055367][T21663] Bluetooth: hci1: command tx timeout [ 893.065806][T21663] Bluetooth: hci1: command tx timeout [ 894.297525][T15419] pim6reg: left allmulticast mode [ 894.822535][T15419] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 895.146740][ T4934] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 895.151310][ T4934] Bluetooth: hci1: command tx timeout [ 895.506489][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 895.514717][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 896.633007][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 896.687778][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 898.747441][T21663] Bluetooth: hci4: command tx timeout [ 900.925232][T21663] Bluetooth: hci4: command tx timeout [ 902.985890][T21663] Bluetooth: hci4: command tx timeout [ 905.075465][T21663] Bluetooth: hci4: command tx timeout [ 924.554795][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 925.246767][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 925.248724][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 925.250987][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 925.252656][ T5628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 927.713916][ T5628] Bluetooth: hci3: command tx timeout [ 929.785267][ T5628] Bluetooth: hci3: command tx timeout [ 931.885174][ T5628] Bluetooth: hci3: command tx timeout [ 933.981271][ T5628] Bluetooth: hci3: command tx timeout [ 940.995288][ T5628] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 941.535939][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 941.675675][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 941.678221][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 942.845248][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 942.992572][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 945.155287][ T5628] Bluetooth: hci5: command tx timeout [ 947.147298][ T4934] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 947.301407][ T4934] Bluetooth: hci5: command tx timeout [ 947.302863][ T4934] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 947.809051][T23328] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 948.112512][T23328] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 948.435871][T23328] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 948.455973][T23328] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 948.530948][T23328] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 948.645581][T23328] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 948.797755][T21663] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 948.995720][T21663] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 949.305335][T21663] Bluetooth: hci5: command tx timeout [ 951.065563][T23328] Bluetooth: hci6: command 0x0c39 tx timeout [ 951.065577][ T5628] Bluetooth: hci6: Opcode 0x0c39 failed: -110 [ 951.100102][ T5628] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 951.100882][ T5628] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 951.112169][ T5628] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 951.114459][ T5628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 951.116093][ T5628] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 951.385424][T21663] Bluetooth: hci5: command tx timeout [ 951.785527][T21663] Bluetooth: hci7: command tx timeout [ 953.225241][T21663] Bluetooth: hci6: command tx timeout [ 953.865587][T21663] Bluetooth: hci7: command tx timeout [ 955.311145][T21663] Bluetooth: hci6: command tx timeout [ 955.946992][T21663] Bluetooth: hci7: command tx timeout [ 957.387034][ T5628] Bluetooth: hci6: command tx timeout [ 958.033802][ T5628] Bluetooth: hci7: command tx timeout [ 959.465510][ T5628] Bluetooth: hci6: command tx timeout [ 966.916659][T21663] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 967.465862][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 968.013999][T21663] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 968.095611][T21663] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 968.172114][T21663] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 968.180890][T21663] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 972.995381][ T5628] Bluetooth: hci8: command tx timeout [ 975.075028][ T5628] Bluetooth: hci8: command tx timeout [ 977.265201][ T5628] Bluetooth: hci8: command tx timeout [ 979.425460][ T5628] Bluetooth: hci8: command tx timeout [ 985.806554][T21663] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 986.545649][T21663] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 986.547736][T21663] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 986.549968][T21663] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 986.551423][T21663] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 988.600352][T15419] batman_adv: batadv0: Removing interface: ip6gretap1 [ 988.835527][T21663] Bluetooth: hci9: command tx timeout [ 990.905496][T21663] Bluetooth: hci9: command tx timeout [ 993.015218][T21663] Bluetooth: hci9: command tx timeout [ 995.065400][T21663] Bluetooth: hci9: command tx timeout [ 1000.445162][T23328] Bluetooth: hci0: command 0x0406 tx timeout [ 1003.294377][T23328] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1003.785647][ T5628] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1003.787765][ T5628] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1003.789992][ T5628] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1003.791466][ T5628] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1005.403327][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 1005.716553][T21663] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1005.836194][T21663] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1006.026425][T21663] Bluetooth: hci10: command tx timeout [ 1006.027419][ T4934] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1006.029706][ T4934] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1006.031207][ T4934] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1008.195276][ T4934] Bluetooth: hci10: command tx timeout [ 1010.268550][T23328] Bluetooth: hci10: command tx timeout [ 1010.665194][T23328] Bluetooth: hci1: command 0x0406 tx timeout [ 1011.259412][T23328] Bluetooth: hci11: command tx timeout [ 1012.455134][T23328] Bluetooth: hci10: command tx timeout [ 1013.329796][T23328] Bluetooth: hci11: command tx timeout [ 1015.385512][ T4934] Bluetooth: hci11: command tx timeout [ 1015.597555][T23328] Bluetooth: hci12: Opcode 0x0c03 failed: -110 [ 1017.136080][T23328] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1017.139412][T23328] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1017.140787][T23328] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1017.445792][T23328] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1017.447379][ T4934] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1017.542017][ T4934] Bluetooth: hci11: command tx timeout [ 1019.628689][ T4934] Bluetooth: hci12: command tx timeout [ 1020.749183][ T4934] Bluetooth: hci4: command 0x0406 tx timeout [ 1022.115152][ T4934] Bluetooth: hci12: command tx timeout [ 1024.185235][T23545] Bluetooth: hci12: command tx timeout [ 1026.375267][T23545] Bluetooth: hci12: command tx timeout [ 1030.856674][T23545] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1031.002947][T23545] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1031.032497][T23545] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1031.068749][T23545] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1031.070240][T23545] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1033.305251][T23545] Bluetooth: hci13: command tx timeout [ 1035.442698][T23545] Bluetooth: hci13: command tx timeout [ 1037.515481][T23545] Bluetooth: hci13: command tx timeout [ 1037.865959][ T32] INFO: task dhcpcd:5278 blocked for more than 143 seconds. [ 1037.866048][ T32] Not tainted syzkaller #0 [ 1037.866061][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1037.866072][ T32] task:dhcpcd state:D stack:25288 pid:5278 tgid:5278 ppid:1 task_flags:0x400140 flags:0x00080000 [ 1037.866132][ T32] Call Trace: [ 1037.866140][ T32] [ 1037.866156][ T32] __schedule+0x17db/0x58f0 [ 1037.866227][ T32] ? __pfx___schedule+0x10/0x10 [ 1037.866264][ T32] ? schedule+0x90/0x2b0 [ 1037.866292][ T32] schedule+0x164/0x2b0 [ 1037.866319][ T32] schedule_preempt_disabled+0x13/0x30 [ 1037.866343][ T32] __mutex_lock+0x7c1/0x1550 [ 1037.866376][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1037.866407][ T32] ? vlan_ioctl_handler+0xf0/0x630 [ 1037.866500][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1037.866549][ T32] vlan_ioctl_handler+0xf0/0x630 [ 1037.866575][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1037.866602][ T32] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1037.866625][ T32] ? hook_file_ioctl+0x1f2/0x600 [ 1037.866670][ T32] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1037.866694][ T32] sock_ioctl+0x612/0x7e0 [ 1037.866729][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 1037.866770][ T32] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1037.866801][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 1037.866829][ T32] __se_sys_ioctl+0xfc/0x170 [ 1037.866858][ T32] do_syscall_64+0x166/0x520 [ 1037.866884][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.866908][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1037.866935][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.866956][ T32] RIP: 0033:0x7f94504c2378 [ 1037.866977][ T32] RSP: 002b:00007ffd9c66dd18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1037.867000][ T32] RAX: ffffffffffffffda RBX: 000055cf7adc01b0 RCX: 00007f94504c2378 [ 1037.867024][ T32] RDX: 00007ffd9c66dd20 RSI: 0000000000008982 RDI: 000000000000000f [ 1037.867038][ T32] RBP: 00007ffd9c66dd20 R08: 0000000000000000 R09: 0000000000000000 [ 1037.867052][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1037.867066][ T32] R13: 000055cf7acf2420 R14: 00007ffd9c67e130 R15: 000055cf7adc01b0 [ 1037.867102][ T32] [ 1037.867137][ T32] INFO: task kworker/1:19:13870 blocked for more than 143 seconds. [ 1037.867152][ T32] Not tainted syzkaller #0 [ 1037.867163][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1037.867173][ T32] task:kworker/1:19 state:D stack:23688 pid:13870 tgid:13870 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1037.867228][ T32] Workqueue: events switchdev_deferred_process_work [ 1037.867258][ T32] Call Trace: [ 1037.867265][ T32] [ 1037.867279][ T32] __schedule+0x17db/0x58f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1037.867320][ T32] ? __pfx___schedule+0x10/0x10 [ 1037.867345][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 1037.867383][ T32] ? __pfx___schedule+0x10/0x10 [ 1037.867417][ T32] ? schedule+0x90/0x2b0 [ 1037.867444][ T32] schedule+0x164/0x2b0 [ 1037.867471][ T32] schedule_preempt_disabled+0x13/0x30 [ 1037.867494][ T32] __mutex_lock+0x7c1/0x1550 [ 1037.867524][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1037.867555][ T32] ? switchdev_deferred_process_work+0xe/0x20 [ 1037.867584][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1037.867611][ T32] ? lock_acquire+0x115/0x350 [ 1037.867643][ T32] ? rcu_is_watching+0x16/0xb0 [ 1037.867671][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1037.867718][ T32] switchdev_deferred_process_work+0xe/0x20 [ 1037.867745][ T32] process_scheduled_works+0xc3d/0x1630 [ 1037.867807][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1037.867842][ T32] ? assign_work+0x3cf/0x5d0 [ 1037.867876][ T32] worker_thread+0xa47/0xfb0 [ 1037.867919][ T32] ? __kthread_parkme+0x71/0x1f0 [ 1037.867959][ T32] kthread+0x38b/0x480 [ 1037.867981][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1037.868006][ T32] ? __pfx_kthread+0x10/0x10 [ 1037.868037][ T32] ret_from_fork+0x514/0xb70 [ 1037.868075][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1037.868096][ T32] ? __switch_to+0xc89/0x1420 [ 1037.868140][ T32] ? __pfx_kthread+0x10/0x10 [ 1037.868164][ T32] ret_from_fork_asm+0x1a/0x30 [ 1037.868213][ T32] [ 1037.868230][ T32] INFO: task kworker/u8:37:15434 blocked for more than 143 seconds. [ 1037.868245][ T32] Not tainted syzkaller #0 [ 1037.868255][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1037.868265][ T32] task:kworker/u8:37 state:D stack:22784 pid:15434 tgid:15434 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1037.868317][ T32] Workqueue: events_unbound linkwatch_event [ 1037.868389][ T32] Call Trace: [ 1037.868397][ T32] [ 1037.868410][ T32] __schedule+0x17db/0x58f0 [ 1037.868466][ T32] ? __pfx___schedule+0x10/0x10 [ 1037.868500][ T32] ? schedule+0x90/0x2b0 [ 1037.868526][ T32] schedule+0x164/0x2b0 [ 1037.868551][ T32] schedule_preempt_disabled+0x13/0x30 [ 1037.868574][ T32] __mutex_lock+0x7c1/0x1550 [ 1037.868604][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1037.868633][ T32] ? linkwatch_event+0xe/0x60 [ 1037.868664][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1037.868689][ T32] ? lock_acquire+0x115/0x350 [ 1037.868721][ T32] ? rcu_is_watching+0x16/0xb0 [ 1037.868747][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1037.868773][ T32] linkwatch_event+0xe/0x60 [ 1037.868800][ T32] process_scheduled_works+0xc3d/0x1630 [ 1037.868860][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1037.868894][ T32] ? assign_work+0x3cf/0x5d0 [ 1037.868927][ T32] worker_thread+0xa47/0xfb0 [ 1037.868984][ T32] kthread+0x38b/0x480 [ 1037.869005][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1037.869036][ T32] ? __pfx_kthread+0x10/0x10 [ 1037.869059][ T32] ret_from_fork+0x514/0xb70 [ 1037.869082][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1037.869103][ T32] ? __switch_to+0xc89/0x1420 [ 1037.869133][ T32] ? __pfx_kthread+0x10/0x10 [ 1037.869156][ T32] ret_from_fork_asm+0x1a/0x30 [ 1037.869203][ T32] [ 1037.869246][ T32] INFO: task syz-executor:23468 blocked for more than 143 seconds. [ 1037.869261][ T32] Not tainted syzkaller #0 [ 1037.869271][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1037.869280][ T32] task:syz-executor state:D stack:26616 pid:23468 tgid:23468 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1037.869335][ T32] Call Trace: [ 1037.869342][ T32] [ 1037.869356][ T32] __schedule+0x17db/0x58f0 [ 1037.869410][ T32] ? __pfx___schedule+0x10/0x10 [ 1037.869444][ T32] ? schedule+0x90/0x2b0 [ 1037.869471][ T32] schedule+0x164/0x2b0 [ 1037.869496][ T32] schedule_preempt_disabled+0x13/0x30 [ 1037.869518][ T32] __mutex_lock+0x7c1/0x1550 [ 1037.869549][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1037.869578][ T32] ? inet_rtm_newaddr+0x470/0x19f0 [ 1037.869669][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1037.869708][ T32] ? __nla_parse+0x40/0x60 [ 1037.869767][ T32] inet_rtm_newaddr+0x470/0x19f0 [ 1037.869796][ T32] ? __kernel_text_address+0xd/0x30 [ 1037.869820][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1037.869849][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1037.869902][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1037.869929][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 1037.869952][ T32] ? netlink_sendmsg+0x5d4/0xb40 [ 1037.869977][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1037.870001][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1037.870035][ T32] ? __lock_acquire+0x747/0x2de0 [ 1037.870071][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1037.870102][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1037.870129][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1037.870174][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1037.870202][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1037.870237][ T32] netlink_unicast+0x7bd/0x940 [ 1037.870278][ T32] netlink_sendmsg+0x813/0xb40 [ 1037.870309][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1037.870339][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1037.870366][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1037.870384][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 1037.870409][ T32] __sys_sendto+0x408/0x5a0 [ 1037.870440][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 1037.870498][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 1037.870524][ T32] __x64_sys_sendto+0xde/0x100 [ 1037.870547][ T32] do_syscall_64+0x166/0x520 [ 1037.870571][ T32] ? trace_irq_disable+0x3b/0x140 [ 1037.870592][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.870613][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1037.870639][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.870660][ T32] RIP: 0033:0x7f8f1b35e98e [ 1037.870678][ T32] RSP: 002b:00007ffc913cfee8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1037.870698][ T32] RAX: ffffffffffffffda RBX: 000055558b501500 RCX: 00007f8f1b35e98e [ 1037.870714][ T32] RDX: 0000000000000028 RSI: 00007f8f1c154670 RDI: 0000000000000003 [ 1037.870727][ T32] RBP: 0000000000000001 R08: 00007ffc913cff64 R09: 000000000000000c [ 1037.870741][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1037.870754][ T32] R13: 0000000000000000 R14: 00007f8f1c154670 R15: 0000000000000000 [ 1037.870787][ T32] [ 1037.870796][ T32] INFO: task syz-executor:23474 blocked for more than 143 seconds. [ 1037.870811][ T32] Not tainted syzkaller #0 [ 1037.870820][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1037.870829][ T32] task:syz-executor state:D stack:26616 pid:23474 tgid:23474 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1037.870884][ T32] Call Trace: [ 1037.870891][ T32] [ 1037.870904][ T32] __schedule+0x17db/0x58f0 [ 1037.870958][ T32] ? __pfx___schedule+0x10/0x10 [ 1037.870992][ T32] ? schedule+0x90/0x2b0 [ 1037.871028][ T32] schedule+0x164/0x2b0 [ 1037.871054][ T32] schedule_preempt_disabled+0x13/0x30 [ 1037.871076][ T32] __mutex_lock+0x7c1/0x1550 [ 1037.871107][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1037.871136][ T32] ? inet_rtm_newaddr+0x470/0x19f0 [ 1037.871167][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1037.871205][ T32] ? __nla_parse+0x40/0x60 [ 1037.871237][ T32] inet_rtm_newaddr+0x470/0x19f0 [ 1037.871265][ T32] ? __kernel_text_address+0xd/0x30 [ 1037.871289][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1037.871318][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1037.871371][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1037.871398][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 1037.871420][ T32] ? netlink_sendmsg+0x5d4/0xb40 [ 1037.871443][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1037.871467][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1037.871493][ T32] ? __lock_acquire+0x747/0x2de0 [ 1037.871529][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1037.871560][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1037.871586][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1037.871630][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1037.871659][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1037.871695][ T32] netlink_unicast+0x7bd/0x940 [ 1037.871736][ T32] netlink_sendmsg+0x813/0xb40 [ 1037.871766][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1037.871796][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1037.871821][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1037.871840][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 1037.871864][ T32] __sys_sendto+0x408/0x5a0 [ 1037.871895][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 1037.871953][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 1037.871979][ T32] __x64_sys_sendto+0xde/0x100 [ 1037.872007][ T32] do_syscall_64+0x166/0x520 [ 1037.872038][ T32] ? trace_irq_disable+0x3b/0x140 [ 1037.872058][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.872079][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1037.872104][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.872124][ T32] RIP: 0033:0x7f890335e98e [ 1037.872142][ T32] RSP: 002b:00007fffbd214ff8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1037.872162][ T32] RAX: ffffffffffffffda RBX: 000055556b424500 RCX: 00007f890335e98e [ 1037.872177][ T32] RDX: 0000000000000028 RSI: 00007f8904154670 RDI: 0000000000000003 [ 1037.872190][ T32] RBP: 0000000000000001 R08: 00007fffbd215074 R09: 000000000000000c [ 1037.872204][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1037.872218][ T32] R13: 0000000000000000 R14: 00007f8904154670 R15: 0000000000000000 [ 1037.872251][ T32] [ 1037.872269][ T32] [ 1037.872269][ T32] Showing all locks held in the system: [ 1037.872307][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1037.872369][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1037.872495][ T32] locks held by kworker/u8:4/59: 3, last CPU#1: [ 1037.872509][ T32] #0: ffff88805262c940 ((wq_completion)krds_cp_wq#16/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1037.872564][ T32] #1: ffffc9000200fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1037.872618][ T32] #2: ffff888058e47680 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1037.872718][ T32] locks held by dhcpcd/5278: 2, on CPU#1: [ 1037.872733][ T32] #0: ffffffff90234780 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5eb/0x7e0 [ 1037.872788][ T32] #1: ffffffff90253760 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xf0/0x630 [ 1037.872838][ T32] locks held by getty/5375: 2, on CPU#1: [ 1037.872853][ T32] #0: ffff888035b640a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1037.872975][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1037.873040][ T32] locks held by kworker/1:12/10985: 3, on CPU#1: [ 1037.873054][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1037.873108][ T32] #1: ffffc90003877c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1037.873160][ T32] #2: ffffffff90253760 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x209/0x780 [ 1037.873262][ T32] locks held by kworker/u8:13/13751: 2, on CPU#0: [ 1037.873276][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1037.873329][ T32] #1: ffffc9000577fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1037.873383][ T32] locks held by kworker/u8:14/13754: 2, last CPU#1: [ 1037.873398][ T32] #0: ffff8880323e2140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1037.873451][ T32] #1: ffffc9000576fc40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1037.873505][ T32] locks held by kworker/u8:15/13755: 4, last CPU#1: [ 1037.873519][ T32] #0: ffff888078fc9140 ((wq_completion)krds_cp_wq#16/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1037.873572][ T32] #1: ffffc9000d327c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1037.873626][ T32] #2: ffff888058e46180 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1037.873680][ T32] #3: ffff888053c00260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1037.873737][ T32] locks held by kworker/1:19/13870: 3, on CPU#1: [ 1037.873751][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1037.873804][ T32] #1: ffffc90006c4fc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1037.873857][ T32] #2: ffffffff90253760 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1037.873912][ T32] locks held by kworker/u8:20/15414: 4, last CPU#1: [ 1037.873927][ T32] #0: ffff888078fca140 ((wq_completion)krds_cp_wq#16/5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1037.873980][ T32] #1: ffffc90024877c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1037.874040][ T32] #2: ffff888058e46780 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1037.874095][ T32] #3: ffff8880461b6e60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1037.874150][ T32] locks held by kworker/u8:23/15417: 3, on CPU#0: [ 1037.874164][ T32] #0: ffff888032218140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1037.874218][ T32] #1: ffffc90024897c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1037.874272][ T32] #2: ffffffff90253760 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1037.874347][ T32] locks held by kworker/u8:24/15418: 3, last CPU#1: [ 1037.874361][ T32] #0: ffff888078f3e940 ((wq_completion)krds_cp_wq#7/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1037.874414][ T32] #1: ffffc900248a7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1037.874468][ T32] #2: ffff88805868b980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1037.874522][ T32] locks held by kworker/u8:25/15419: 4, last CPU#1: [ 1037.874536][ T32] #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1037.874589][ T32] #1: ffffc900248b7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1037.874642][ T32] #2: ffffffff90244f08 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1037.874714][ T32] #3: ffffffff90253760 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 1037.874765][ T32] locks held by kworker/u8:26/15420: 4, last CPU#0: [ 1037.874780][ T32] #0: ffff88802a624140 ((wq_completion)krds_cp_wq#9/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1037.874833][ T32] #1: ffffc900248c7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1037.874886][ T32] #2: ffff88805868a180 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1037.874940][ T32] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __inet_dev_addr_type+0x159/0x560 [ 1037.874997][ T32] locks held by kworker/u8:28/15422: 4, last CPU#1: [ 1037.875010][ T32] #0: ffff88805262c140 ((wq_completion)krds_cp_wq#16/3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1039.017586][ T32] #1: ffffc900248e7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1039.017667][ T32] #2: ffff888058e46d80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1039.017726][ T32] #3: ffff8880b863bb20 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 1039.017783][ T32] locks held by kworker/u8:31/15426: 4, last CPU#1: [ 1039.017799][ T32] #0: ffff888078fca940 ((wq_completion)krds_cp_wq#16/4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1039.017852][ T32] #1: ffffc90024917c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1039.017905][ T32] #2: ffff888058e46a80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1039.017960][ T32] #3: ffff88807b245360 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1039.018016][ T32] locks held by kworker/u8:32/15428: 3, last CPU#0: [ 1039.018031][ T32] #0: ffff88805262d140 ((wq_completion)krds_cp_wq#16/1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1039.018083][ T32] #1: ffffc90024937c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1039.018135][ T32] #2: ffff888058e47380 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1039.018189][ T32] locks held by kworker/u8:34/15430: 4, last CPU#1: [ 1039.018204][ T32] #0: ffff88805262b940 ((wq_completion)krds_cp_wq#16/2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1039.018254][ T32] #1: ffffc90024957c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1039.018307][ T32] #2: ffff888058e47080 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1039.018362][ T32] #3: ffff8880b8728298 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_run_softirq+0x71/0x2e0 [ 1039.018418][ T32] locks held by kworker/u8:37/15434: 3, on CPU#0: [ 1039.018432][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1039.018483][ T32] #1: ffffc900249cfc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1039.018543][ T32] #2: ffffffff90253760 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1039.018611][ T32] locks held by kworker/u8:39/23081: 3, last CPU#1: [ 1039.018625][ T32] #0: ffff888078fc9940 ((wq_completion)krds_cp_wq#16/6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1039.018696][ T32] #1: ffffc90005007c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1039.018748][ T32] #2: ffff888058e46480 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1039.018803][ T32] locks held by syz-executor/23468: 1, on CPU#1: [ 1039.018817][ T32] #0: ffffffff90253760 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1039.018872][ T32] locks held by syz-executor/23474: 1, on CPU#0: [ 1039.018886][ T32] #0: ffffffff90253760 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1039.018941][ T32] locks held by syz-executor/23482: 1, on CPU#1: [ 1039.018954][ T32] #0: ffffffff90253760 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1039.019009][ T32] locks held by syz-executor/23487: 1, on CPU#1: [ 1039.019023][ T32] #0: ffffffff90253760 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1039.019076][ T32] locks held by syz-executor/23496: 1, on CPU#1: [ 1039.019089][ T32] #0: ffffffff90253760 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1039.019143][ T32] locks held by syz-executor/23502: 1, on CPU#1: [ 1039.019157][ T32] #0: ffffffff90253760 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1039.019210][ T32] locks held by syz-executor/23508: 1, on CPU#0: [ 1039.019224][ T32] #0: ffffffff90253760 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1039.019278][ T32] locks held by syz-executor/23509: 1, on CPU#1: [ 1039.019292][ T32] #0: ffffffff90253760 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1039.019345][ T32] locks held by syz-executor/23517: 1, on CPU#0: [ 1039.019359][ T32] #0: ffffffff90253760 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1039.019414][ T32] locks held by syz-executor/23525: 1, on CPU#0: [ 1039.019428][ T32] #0: ffffffff90253760 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1039.019483][ T32] locks held by syz-executor/23534: 1, on CPU#0: [ 1039.019497][ T32] #0: ffffffff90253760 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1039.019551][ T32] locks held by syz-executor/23540: 1, on CPU#0: [ 1039.019565][ T32] #0: ffffffff90253760 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1039.019620][ T32] locks held by syz-executor/23548: 1, on CPU#0: [ 1039.019634][ T32] #0: ffffffff90253760 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1039.019697][ T32] locks held by syz-executor/23557: 1, last CPU#1: [ 1039.019711][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x6c/0x430 [ 1039.019763][ T32] locks held by udevd/23558: 2, last CPU#1: [ 1039.019778][ T32] #0: ffff888034751078 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 1039.019833][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1039.019883][ T32] locks held by modprobe/23559: 2, last CPU#1: [ 1039.019897][ T32] #0: ffff888047019078 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 1039.019946][ T32] #1: ffff8880239d3378 (&mapping->i_mmap_rwsem){++++}-{4:4}, at: vma_prepare+0x12e/0x470 [ 1039.019997][ T32] [ 1039.020004][ T32] ============================================= [ 1039.020004][ T32] [ 1039.020013][ T32] NMI backtrace for cpu 0 [ 1039.020027][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1039.020049][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1039.020060][ T32] Call Trace: [ 1039.020068][ T32] [ 1039.020079][ T32] dump_stack_lvl+0xe8/0x150 [ 1039.020108][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1039.020220][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1039.020252][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1039.020275][ T32] sys_info+0x135/0x170 [ 1039.020302][ T32] watchdog+0xfd7/0x1030 [ 1039.020330][ T32] ? watchdog+0x1c7/0x1030 [ 1039.020358][ T32] kthread+0x38b/0x480 [ 1039.020378][ T32] ? __pfx_watchdog+0x10/0x10 [ 1039.020397][ T32] ? __pfx_kthread+0x10/0x10 [ 1039.020418][ T32] ret_from_fork+0x514/0xb70 [ 1039.020441][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1039.020461][ T32] ? __switch_to+0xc89/0x1420 [ 1039.020490][ T32] ? __pfx_kthread+0x10/0x10 [ 1039.020511][ T32] ret_from_fork_asm+0x1a/0x30 [ 1039.020554][ T32] [ 1039.020563][ T32] Sending NMI from CPU 0 to CPUs 1: [ 1039.020589][ C1] NMI backtrace for cpu 1 [ 1039.020605][ C1] CPU: 1 UID: 0 PID: 15430 Comm: kworker/u8:34 Not tainted syzkaller #0 PREEMPT(full) [ 1039.020625][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1039.020637][ C1] Workqueue: krds_cp_wq#16/2 rds_connect_worker [ 1039.020691][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 1039.020717][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc 89 f6 31 d2 e9 a6 ba a6 03 66 0f 1f 44 00 [ 1039.020733][ C1] RSP: 0018:ffffc90000a18d30 EFLAGS: 00000046 [ 1039.020749][ C1] RAX: 0000000000044536 RBX: ffff8880b8723c80 RCX: 0000000000000838 [ 1039.020763][ C1] RDX: 0000000000000000 RSI: 0000000000044536 RDI: 0000000000000838 [ 1039.020775][ C1] RBP: ffffc90000a18df0 R08: 0000000000000100 R09: 0000000000000001 [ 1039.020788][ C1] R10: 0000000000000003 R11: ffffffff81754510 R12: 0000000000044536 [ 1039.020800][ C1] R13: dffffc0000000000 R14: 00000000100006b5 R15: 0000000000000020 [ 1039.020814][ C1] FS: 0000000000000000(0000) GS:ffff888124dca000(0000) knlGS:0000000000000000 [ 1039.020830][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1039.020854][ C1] CR2: 00007ffe6cbfdcbc CR3: 000000000eb48000 CR4: 00000000003526f0 [ 1039.020872][ C1] Call Trace: [ 1039.020879][ C1] [ 1039.020886][ C1] lapic_next_event+0x11/0x20 [ 1039.020906][ C1] clockevents_program_event+0x385/0x630 [ 1039.020933][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 1039.020959][ C1] ? tick_program_event+0x8f/0x120 [ 1039.020980][ C1] __hrtimer_rearm_deferred+0x36c/0x4b0 [ 1039.021007][ C1] irqentry_exit+0x8d3/0x910 [ 1039.021033][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1039.021053][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1039.021074][ C1] Code: f7 e8 2d d8 ba f5 f7 c3 00 02 00 00 74 05 e8 90 22 e7 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 94 e5 ab f5 65 48 8b 05 0c 61 ac 07 48 85 c0 74 18 5b 41 5e e9 [ 1039.021089][ C1] RSP: 0018:ffffc90000a18f40 EFLAGS: 00000206 [ 1039.021104][ C1] RAX: 0000000000000006 RBX: 0000000000000283 RCX: 8000000000000102 [ 1039.021116][ C1] RDX: 0000000000000002 RSI: ffffffff8e4158c3 RDI: 0000000000000001 [ 1039.021129][ C1] RBP: 0000000000000007 R08: ffffffff907a4a7f R09: 1ffffffff20f494f [ 1039.021142][ C1] R10: dffffc0000000000 R11: fffffbfff20f4950 R12: 0000000000000009 [ 1039.021155][ C1] R13: 0000000000000008 R14: ffff8880b8728280 R15: 0000000000000100 [ 1039.021186][ C1] handle_softirqs+0x226/0x860 [ 1039.021221][ C1] ? do_softirq+0x77/0xd0 [ 1039.021245][ C1] ? __inet6_bind+0x386/0xf30 [ 1039.021270][ C1] do_softirq+0x77/0xd0 [ 1039.021291][ C1] [ 1039.021298][ C1] [ 1039.021305][ C1] __local_bh_enable_ip+0x100/0x140 [ 1039.021328][ C1] __inet6_bind+0x386/0xf30 [ 1039.021359][ C1] kernel_bind+0x13e/0x1c0 [ 1039.021386][ C1] ? __pfx_kernel_bind+0x10/0x10 [ 1039.021418][ C1] ? rds_tcp_conn_path_connect+0x336/0x920 [ 1039.021446][ C1] rds_tcp_conn_path_connect+0x53b/0x920 [ 1039.021478][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1039.021507][ C1] ? lock_acquire+0x115/0x350 [ 1039.021531][ C1] rds_connect_worker+0x1d8/0x290 [ 1039.021552][ C1] ? process_scheduled_works+0x97a/0x1630 [ 1039.021575][ C1] process_scheduled_works+0xc3d/0x1630 [ 1039.021614][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1039.021640][ C1] ? assign_work+0x3cf/0x5d0 [ 1039.021665][ C1] worker_thread+0xa47/0xfb0 [ 1039.021702][ C1] kthread+0x38b/0x480 [ 1039.021720][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1039.021742][ C1] ? __pfx_kthread+0x10/0x10 [ 1039.021760][ C1] ret_from_fork+0x514/0xb70 [ 1039.021779][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1039.021796][ C1] ? __switch_to+0xc89/0x1420 [ 1039.021821][ C1] ? __pfx_kthread+0x10/0x10 [ 1039.021839][ C1] ret_from_fork_asm+0x1a/0x30 [ 1039.021872][ C1] [ 1039.022587][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1041.441668][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1041.450799][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1041.460887][ T32] Call Trace: [ 1041.464185][ T32] [ 1041.467135][ T32] vpanic+0x56d/0xa60 [ 1041.471155][ T32] ? __pfx_vpanic+0x10/0x10 [ 1041.475689][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 1041.481263][ T32] panic+0xc5/0xd0 [ 1041.485018][ T32] ? __pfx_panic+0x10/0x10 [ 1041.489466][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 1041.494523][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1041.500705][ T32] watchdog+0x1030/0x1030 [ 1041.505075][ T32] ? watchdog+0x1c7/0x1030 [ 1041.509523][ T32] kthread+0x38b/0x480 [ 1041.513620][ T32] ? __pfx_watchdog+0x10/0x10 [ 1041.518315][ T32] ? __pfx_kthread+0x10/0x10 [ 1041.522929][ T32] ret_from_fork+0x514/0xb70 [ 1041.527538][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1041.532670][ T32] ? __switch_to+0xc89/0x1420 [ 1041.537382][ T32] ? __pfx_kthread+0x10/0x10 [ 1041.542007][ T32] ret_from_fork_asm+0x1a/0x30 [ 1041.546817][ T32] [ 1041.550124][ T32] Kernel Offset: disabled [ 1041.554445][ T32] Rebooting in 86400 seconds..