last executing test programs: 3.430627223s ago: executing program 2 (id=1164): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd2c, 0x0, {{@in=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)="5afb194ddebc95dcd8839fc0a5ecb47d498a28c6f1629ecdec359aee4b872cc2753b44553912fd97ad3b86df16dd3ba0465a6a68cb4fec9712bb5fe10da4f0e483728ae89dcf7127be9d57662b0c5c94756ee06aa974e31712ef08efca6679a7b4415d06f00ec4d9b6b01ad324764bd4fb736c3d60bc4e528111746972772f", 0x7f}], 0x1, 0x0, 0x0, 0xc000}], 0x1, 0x41) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TYPE={0x8}}], {0x14}}, 0x44}}, 0x0) write$tun(r1, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x24008094) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010100, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x3507, 0x2, 0x3}]}]}, 0xfc}}, 0x20000000) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x38, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x89, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [@srh]}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) 2.863138773s ago: executing program 2 (id=1173): r0 = socket$kcm(0x29, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r4, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402e78}, [@printk={@llx, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x20, 0x300}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x90ffffff}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x20}, 0x90) 2.135650877s ago: executing program 1 (id=1184): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r2, 0x400, 0x2000, 0x2, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xf01}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)={0x54, r6, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa}, @key_params=[@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}], @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8810) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 1.901792085s ago: executing program 1 (id=1187): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) (rerun: 32) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) (async, rerun: 64) shutdown(r1, 0x1) (rerun: 64) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x7fff}, &(0x7f0000000140)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 1.494959727s ago: executing program 3 (id=1188): syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', 0x0, 0x0, 0x0) 1.492715981s ago: executing program 4 (id=1189): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newrule={0x4c, 0x20, 0x400, 0x70bd2a, 0x0, {0x2, 0x80, 0x0, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x28}}, @FRA_DST={0x8, 0x1, @local}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}, @FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$sock(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000400)="c3ebdf02ccf049bcc145ba28e73853bc2beca0e03d5bd6c012e42d1428b917e255bc9e75cc701a5deacd14f062187f82e85e20e19b9ebfb6aef45d2ad0a7bc634373c630c98214899de376e8a8c2008b754001691c7b09262a9486cdd1654e717ddf0adc63e0a44f09a257aeb4827cea5c5eb652a7c34ace0d86abb34410bebcdd914d56bf83fd55d154e89e48870351e008a7462652501c07f9eabf4051243ef58362b6870778dbd820f1f674c5314c3dc2c9e671d1acc8a39f526c02fa98be", 0xc0}], 0x1}, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000034000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61141800000000001d430000000000007a0a00fe00581c1f6114750000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40840) 1.489154699s ago: executing program 2 (id=1190): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) (async) close(r0) 1.487855163s ago: executing program 3 (id=1192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x8, 0x8707, 0x9, 0x6, {{0x6, 0x4, 0x0, 0x14, 0x18, 0x64, 0x0, 0x54, 0x4, 0x0, @broadcast, @loopback, {[@end]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r1, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_AF={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4881}, 0x80000) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f000000f480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f000000f740)={&(0x7f0000000100)={0x20, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x44040) 1.414741571s ago: executing program 0 (id=1193): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003280), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f00000032c0)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) 1.411496906s ago: executing program 2 (id=1194): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1f0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x1a8, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x190, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xb8, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x89, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5e4ab0d52289fe809788321e04d9b1d9f82a03fbb49229585f49ce943"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0xa4, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0x79, 0x6, "fabf457a2783e01adba453eb6b12547e74ed3538e418b01eb76a9da3a965a965bd660b895bcde4e323c457657669f884ceb2303e38c045eabfb99180b31db5a5cedd27c3d1afe4f747fc7360d5f6b1392c380721711fe9ed4a9ad5ebc44f3515520c50cc1c0a8e07ec59e52c8a083d49257ed21038"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000200ffff00000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.410814482s ago: executing program 4 (id=1195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000600), 0x4) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, 0xfffffffffffffffe, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="15823d81914ffc2cbf9d1bf91658b522013ce1", @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x4, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x1c}}, 0x24008081) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x20000081) r4 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@initdev, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={r4, r5, r6}, 0xc) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) socket$kcm(0x10, 0x2, 0x10) 1.346204223s ago: executing program 1 (id=1196): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x2f00, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="e3ff0000000000002400128009000100626f6e64000000001400028005001b00000000000500010006"], 0x44}}, 0x0) 1.284001946s ago: executing program 3 (id=1197): r0 = socket$packet(0x11, 0x2, 0x300) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x50, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e00431b0000000000000000070000009d580730801c19e6db28749dcadb23a6736db10395ebf7c3fa32662688f3ea21129c8796a4a311ecdc35c689f875f4ffff3495ca0230dc06be0d054bd55696a4c640d44251f1dda313949bc4299680243dce7d09b5af6ae82c19905766e2ed91d25298062a4fda60eaa756bf9bcc37e9a7409b1ccf8c4e07098118a7af7497300251ada4b296b1f7dd1383d2998b8d766e16353a849e0df93621b55115fb8571d3b573f6475f0b352770a4808b58a6c411ac14735b507a9e0f064c8ca92e9824a2c9f91f02e95db7e0c8badcb0c75613c7af47c77c", @ANYRES32=0x0, @ANYBLOB="487000001972070008000a00", @ANYRES32=r3, @ANYBLOB], 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) r7 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)={0x34, r9, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x0) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r9, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4090}, 0x10) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='$@\x00\x00', @ANYRES16=r4, @ANYBLOB="0100fdfffffffcdbdf250200000008000300", @ANYRES32=r6, @ANYBLOB="080026007f170000"], 0x24}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000680)={0x0, 0x5, 0x4, 0x1}) (async, rerun: 64) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000a80)={0x10, 0x2, {0xc6a, @struct={0x1000}, 0x0, 0x2, 0x4, 0x7f, 0x4, 0x6, 0xa3, @struct={0x62b, 0x2}, 0xfff, 0x1, [0x0, 0x5, 0x600000000, 0xf, 0x8, 0x3]}, {0x8000000000000001, @struct={0x55, 0xffff}, 0x0, 0x3, 0x3, 0x8, 0x6, 0x5, 0x0, @usage=0x4, 0x60000, 0xb, [0x9, 0x7, 0x800, 0x2, 0xffffffff80000000, 0x5]}, {0xf, @usage=0x400, 0x0, 0x7, 0x0, 0x9, 0x80000000, 0x7, 0x91, @struct={0x3ff, 0x4}, 0x2, 0x6, [0x5, 0x8000000000000000, 0xf, 0x6, 0x4, 0x2ac782e4]}, {0x89, 0xff}}) (rerun: 64) ioctl$BTRFS_IOC_BALANCE_V2(r10, 0xc4009420, &(0x7f0000000e80)={0x11, 0x2, {0x6, @struct={0x83, 0x9}, r11, 0xd6, 0x318, 0xffffffffffff0cf2, 0x9, 0x9, 0x0, @usage=0x8, 0x0, 0x6, [0x8, 0x1c68, 0x0, 0x5, 0x3, 0x7fffffffffffffff]}, {0x0, @struct={0x1518, 0x2}, 0x0, 0xe5, 0x828, 0x80, 0x1c0, 0x2, 0x1, @struct={0x10000, 0x200}, 0x5c8076f1, 0x3, [0x4e1, 0x4, 0x6, 0x5, 0x7, 0x32]}, {0x7fff, @usage=0x4, r12, 0x4d1, 0x7, 0x100000001, 0xcc8f, 0x7ad7, 0x438, @usage=0x5, 0x7, 0x5, [0x5, 0x9, 0x6, 0x1, 0x4, 0x7]}, {0xffffffff, 0xe1, 0x2000000000000000}}) (async, rerun: 64) r13 = accept4(r1, 0x0, 0x0, 0x800) (async, rerun: 64) r14 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r14, &(0x7f0000000040)={0x1d, r15, 0x8000000000000003}, 0x18) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x206c}, 0x1, 0x0, 0x0, 0x4800}, 0x80) (async, rerun: 32) sendmmsg$alg(r13, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xc, 0x13012, r0, 0x0) 1.173460186s ago: executing program 2 (id=1198): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="ac87636c873d00000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fcdbdf254c0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000f00a8007365636f6e646e616d650000"], 0x44}}, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0xffffffb9, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0xffffffff, {0xa, 0x0, 0x10}}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r8, 0x0, 0x400000008000f28, 0x0) close(0x4) splice(r7, 0x0, r6, 0x0, 0x114, 0xe) socket$packet(0x11, 0x3, 0x300) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) socket$netlink(0x10, 0x3, 0xb) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd7000ffdbdf25260000000c00018008000100", @ANYRES64=r10], 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x4000080) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x200, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffffc}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0xa}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x1000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x20cc}, {0x8, 0x15, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6}, {0x8, 0x15, 0xbc4b}}]}, 0x200}, 0x1, 0x0, 0x0, 0x8050}, 0x40811) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x840}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x64e7241bf7f1103b, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 1.171714981s ago: executing program 0 (id=1199): socket(0x2a, 0x2, 0x0) (async) r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1c4}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a31000000000900010073797a300004000014000380080002400000000008000140000000003c000000180a01030000000000000000030000070900020073797a310000000008000740000000020900020073797a3100000000080007400000000220010000000a030000000000000000000a0000060c000440000000000000000408000240000000033c0006009d9dd0ca6a533e96c141303ba6d608655220c1e46ec29295b236f03fd329461589b6f028c0d785ba4c161770b9a9ff54fcc04510230152b0b90006004163d3f704f167b2950f418a60482cd9ddd5c90ca68d5c00e8f449acd1b4c8d568a65b656a1b766341c434772139623569d0c7371151c089aa6d6251abeee1c56b0363722c028c2a979a51a2a97c8433ee5760129a99552fc880151a1f077183c643ffa0b79a8a478d0cc178d60d39eda594d6b6fd60022d9da09ee7f5c6444ea53db35b3e0102b685bbd97699f6bddfd9d4f74748bc467341c68324bbedecfea82dd6032cfc4ec75921941febc94bd2b7a5184f7e000000140000001100010000000000000000000000000a"], 0x1c4}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c000000170a010200000000000040000200fffd0900010073797a30"], 0x2c}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0820fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)={0x1a, 0x25, 0x109, 0x70bd1f, 0xfffffffc, {0xe}, [@typed={0x8, 0x14e, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$ITER_CREATE(0xb, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000a40)={0x6c, r9, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x100) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r7, &(0x7f0000000740)=[{{&(0x7f0000000480)={0xa, 0x4e1f, 0x11, @remote, 0x8000002}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000004c0)="21b4e351d2ff5098965113e9b9df894a01676cf4db49901306bd44316b470aefe3d959d9b04651308e2b46876c", 0x2d}], 0x1}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)="06", 0x1}], 0x1}}], 0x2, 0x24000005) (async) sendmmsg$inet6(r7, &(0x7f0000000740)=[{{&(0x7f0000000480)={0xa, 0x4e1f, 0x11, @remote, 0x8000002}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000004c0)="21b4e351d2ff5098965113e9b9df894a01676cf4db49901306bd44316b470aefe3d959d9b04651308e2b46876c", 0x2d}], 0x1}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)="06", 0x1}], 0x1}}], 0x2, 0x24000005) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @empty}}}, 0x84) (async) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @empty}}}, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r11, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={0x0, 0x4}, &(0x7f0000000440)=0x8) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001800010000000000000000000a800000000300000000000014000700000000000000000000000000000000010800040001000000248d1d562b49ea786cc3bf7375b5e2942fa87216552b68eac42704f4edfd0536a50f4caacf744396076d75b4b0a064a7a9523203664820985186"], 0x38}}, 0x20000000) (async) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001800010000000000000000000a800000000300000000000014000700000000000000000000000000000000010800040001000000248d1d562b49ea786cc3bf7375b5e2942fa87216552b68eac42704f4edfd0536a50f4caacf744396076d75b4b0a064a7a9523203664820985186"], 0x38}}, 0x20000000) 1.108334689s ago: executing program 1 (id=1200): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x91ee, 0x9, 0x10000000, 0x1, 0x7}, 0x9, 0x8}, [{0xd6c, 0x9, 0x8, 0xff, 0x10001, 0x9}, {0x7f, 0xffff, 0x6, 0x7fffffff, 0x1, 0x7}, {0x6, 0xb37b, 0x6, 0xb38, 0x0, 0xd0cb}, {0x4, 0x3, 0x2, 0xa318, 0x80000000, 0x1}, {0x9, 0xfffffff9, 0x2, 0x4, 0x6, 0x4}, {0x8000, 0x3, 0xe, 0x4, 0xcee8000, 0x1}, {0x9, 0x8, 0xfffffffa, 0x6, 0xa0fd, 0x8}, {0xffffffff, 0xe648, 0x7c0c3ffe, 0x8, 0x0, 0x5}, {0x3, 0x3, 0x9, 0xa}, {0x9, 0x6, 0xb6, 0x7fff, 0x5, 0x7}, {0x304, 0x66, 0x3, 0x101, 0x3, 0x9}, {0xff, 0x1, 0xe, 0x800, 0x3, 0x56}, {0xca, 0x4, 0x9, 0xfffffff8, 0x7c, 0x7921bcf1}, {0x1, 0xff, 0x5, 0x80000000, 0xaae6, 0x9}, {0x4, 0x3, 0xa9, 0x8, 0x9, 0x4}, {0x5, 0x1000, 0x200, 0x2, 0x8, 0x6}, {0x3d648283, 0x2, 0x5, 0x9, 0x10000, 0x6}, {0x3, 0xa06, 0x1, 0x1, 0x9, 0x260ba674}, {0x6, 0xc5, 0x8d3, 0x9, 0x3, 0xffffffbc}, {0x3, 0x8, 0x3, 0x5, 0x0, 0xc80}, {0x3, 0xffffffff, 0xffff, 0x2, 0x9}, {0xfffffffa, 0x6, 0x77f, 0x160c, 0x3}, {0x1ff, 0x8, 0x0, 0x6, 0xb, 0x400}, {0x3ff, 0x9, 0xffff8001, 0x100, 0x3, 0x47}, {0x529, 0x4, 0x7, 0xffff, 0xc0a, 0xbad}, {0x8, 0x7, 0x884, 0x100, 0x9}, {0x8, 0x6, 0x6, 0xc, 0x3}, {0x4, 0x40, 0xcd6c, 0x71f, 0x8000, 0x6}, {0x5, 0x30a3, 0xa, 0x200, 0xfff, 0x9}, {0x3, 0x1, 0x5, 0x8, 0x2, 0x81}, {0x81, 0x0, 0x0, 0x49f11005, 0x9, 0x7fffffff}, {0x9, 0x0, 0x5c, 0x3bad, 0x8, 0x480}, {0xe, 0x58000000, 0x9, 0x3, 0x1ff, 0xaa2}, {0x800, 0xd1, 0x0, 0x3e, 0x0, 0x5}, {0x8, 0x4, 0x200, 0xfffffc00, 0x100, 0x10001}, {0x6, 0x7, 0x0, 0x101, 0x6, 0x81}, {0x8, 0x2, 0x200, 0x3, 0x4, 0x101}, {0xad, 0xa, 0x401, 0x0, 0x9, 0xff000000}, {0x8, 0x5, 0xd, 0x24, 0xc, 0x1}, {0xfffffff8, 0x9, 0x1000, 0xc, 0xea, 0x4}, {0x3, 0x0, 0x8, 0x1, 0x1, 0xffffff32}, {0x6, 0x5, 0xd7c9, 0x0, 0x5, 0x2}, {0xffff, 0x1, 0x5, 0x2, 0x7, 0x7}, {0x5, 0x2, 0x0, 0x401, 0x6, 0x1}, {0x3, 0x2, 0x4, 0x6, 0xfffffff8, 0x5}, {0x6, 0x0, 0x3, 0x5, 0x0, 0xffff8000}, {0x1, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x2, 0x6, 0x2, 0x7, 0x9}, {0x0, 0xfffffffd, 0x756183d, 0xfffff801, 0x5, 0x8}, {0x7, 0xa, 0xfffffffc, 0x80000001, 0x7b, 0x2}, {0x7, 0x9, 0xee, 0x800, 0x1000}, {0x10, 0x5, 0x57a2a808, 0x80000000, 0x7fff, 0x5}, {0x729, 0x25, 0x6, 0x6, 0x8, 0x4}, {0x2, 0x406, 0xc209, 0x8, 0x0, 0xfffffffc}, {0x1, 0x7, 0x8, 0xfffffffb, 0x80000000, 0x4}, {0x1, 0x5, 0x8, 0x8000, 0x1, 0x7f}, {0x8001, 0xf42, 0x1, 0x3, 0x5, 0x430}, {0x2, 0xfffffff4, 0x5, 0xd, 0xc8, 0x7}, {0x6, 0x7, 0x9, 0x8, 0x5, 0x5}, {0x5, 0x8000000, 0x7, 0x5, 0x401, 0x9}, {0x1, 0x6, 0x1ff, 0xa8de, 0x0, 0x7b}, {0x0, 0x80000000, 0x7fff, 0x5, 0x2, 0x7}, {0xe, 0xfffffffc, 0x7fffffff, 0x7, 0x5, 0x200}, {0x81, 0xaa, 0x1e, 0x9, 0x14fc, 0x8}, {0x9, 0xffffffff, 0x40, 0x6, 0x13b, 0xeacd}, {0x100020, 0xff, 0x6, 0x81, 0x0, 0x6}, {0x2, 0xe, 0xb, 0x0, 0x6, 0x2}, {0x8, 0x3, 0x5, 0x4, 0x4, 0x2}, {0x84, 0x3ff, 0x3d0c, 0x1, 0x8, 0x2}, {0x4, 0x4, 0xb85c, 0x1, 0x7, 0x6}, {0x3, 0xc6, 0x0, 0x1, 0x2, 0x3}, {0x7, 0x2, 0x8000, 0x2, 0x7fffffff, 0x79}, {0x6, 0x80000000, 0xfffffffe, 0x7, 0x3, 0x8}, {0xae, 0x3, 0x600, 0x9, 0xff, 0x3}, {0x1, 0xed5, 0x6de6, 0x10, 0x380000, 0x789}, {0x4, 0x7074, 0x32b, 0x3, 0xf}, {0x1ff, 0x7, 0x1, 0x96, 0x1, 0xc}, {0x9, 0x3, 0x0, 0x9, 0x1ff, 0x8}, {0x1, 0x7d, 0x8, 0x7, 0x2, 0x3}, {0xfffff001, 0x9, 0x65d, 0x3c10, 0x7, 0x53}, {0x7, 0x0, 0x7, 0x101, 0x9, 0x1}, {0x7, 0x9, 0xd, 0x6, 0xfffffff7, 0x827}, {0x113, 0xfffffffe, 0x2, 0x400, 0x28, 0x81}, {0xfff, 0x6, 0x7, 0x40, 0x6, 0x10}, {0xc, 0x9, 0x8001, 0x0, 0x9, 0x6}, {0x5, 0x11b9, 0x401, 0x4, 0x2, 0x6}, {0x9, 0x100, 0x400, 0x9497, 0x101, 0x84b7}, {0xb4, 0xb85, 0x7, 0x3, 0x51, 0x5}, {0x2, 0x4, 0x5, 0xf, 0xf, 0x1283}, {0xfffffff8, 0x1c0000, 0x2, 0x10001, 0x1, 0x6}, {0x61, 0x80, 0x1, 0x10000, 0x5, 0x8}, {0x8, 0x6, 0xc53, 0x80000000, 0x7, 0x5}, {0x0, 0x6, 0x5, 0x2, 0xdc, 0x6}, {0x0, 0xfffffffc, 0x101, 0x6cb685f2, 0x7, 0x1}, {0x0, 0xc3, 0x4, 0x5, 0x0, 0x9}, {0x8, 0xf7b5, 0x5, 0x5, 0x9, 0x7}, {0x1, 0x67f, 0x5689f935, 0x8, 0x6db, 0xff}, {0x1, 0x400, 0x3, 0x1e1, 0xa, 0x80000000}, {0xea, 0x5, 0x8, 0x5, 0x7fff, 0x1000}, {0x6, 0x5, 0x7, 0x0, 0x6, 0x80000000}, {0x9, 0x6, 0x7, 0x1, 0x9, 0x100}, {0x7202, 0x4, 0x5024, 0xf9, 0x6, 0x40}, {0x5, 0x10, 0x4, 0x5, 0xd, 0x8}, {0x1537, 0x101, 0x6, 0x1, 0x3, 0x6b}, {0x69, 0x400, 0x3, 0x81, 0xc6, 0x7fff}, {0x10001, 0x1, 0x3, 0x7fffffff, 0x7, 0x10001}, {0xcdc, 0x1, 0x7, 0x0, 0x8}, {0x1, 0x168dccf, 0x3, 0x3, 0x7fff, 0x6}, {0x3, 0x4, 0x7fff, 0x7, 0xaf68, 0x403}, {0x9, 0x0, 0x7, 0x6, 0x6, 0x80000001}, {0x5, 0x200, 0x800, 0xd00000, 0x3, 0x8}, {0x8001, 0x5d, 0xffffffff, 0x42e, 0x8, 0x55}, {0x1970, 0x89, 0x6d, 0x460ebb44, 0x2, 0x2}, {0x951, 0x9, 0x3, 0x8, 0x1, 0x2}, {0x3, 0x8, 0x627b, 0x5, 0x6, 0x4}, {0x6, 0x3, 0x9fbc, 0x4, 0x1, 0x2}, {0x401, 0x6, 0x32d84255, 0xfa, 0x27f, 0x8000}, {0x0, 0x6, 0x3, 0xc, 0x8000, 0x40}, {0x5, 0x4, 0x1, 0x3, 0x0, 0x5}, {0x7f, 0x4, 0x7f, 0x10001, 0xff, 0x8}, {0x7, 0x96a3, 0x2, 0xd7, 0x6, 0x200}, {0x1, 0x5, 0x5, 0x37a3, 0x7, 0x8}, {0x81, 0x4, 0xd, 0xffffffff, 0x200, 0x4}, {0x4, 0x3ff, 0x7, 0x4, 0x4, 0x4}, {0x1, 0xffffffa4, 0x9, 0x2, 0x3}, {0xd, 0x0, 0x3ff, 0x9, 0x8, 0x48}, {0x2, 0x10001, 0x9, 0x2, 0x8, 0x9}, {0xf, 0x1, 0xe, 0x101, 0x2, 0xc88}], [{}, {0x5}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x8cd778652b20be70, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0xa4f33433e7b7e23d, 0x1}, {0x4}, {0x0, 0x1}, {0x6}, {0x2, 0xa5b0c5c50171756a}, {0x3}, {}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x2}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000180)={0x1, 0x3, 0x1000, 0xdb, &(0x7f0000000000)="7e26bbf70df65fe391b8167a647a06d10a1c9253693b48eeed3b39a6c86d460c3b52fc4cb267cf793836b7eaea615b0685498e88eb93bd2402c4bd46ea47441d2904234246f81dab717e5b8ea5ecaee0e12b11fca20138d0f77487222991fa65fd18f4de9aed1e96ff373da51aec00521fcc1cc1fafbdf37aa56df95cbd90113679d125d7972a29cd2a602b1763b0e464f55a07e02dd8fe1994cd0aaba5374656ee750f7dac176f49ade0f2af610f094418ff8d9b432bac91a6a9c3af320040cb1498189edbb8693b661542c002c14ee7fb672e919ffeb915d9419", 0x79, 0x0, &(0x7f0000000100)="b2c3e3c714f2807d139ea1f75cb860ca100072e5afe34b67f6370937141da6fa7d7fa7d561acb96d8b8493f9f3f7e8aa0f2df348f6d63c99c6e24cb55c60e5148dfd35572038ad888bd290effac075dcfc3f497a16b85488f964ee0d58e1fc77f75e26ceb62e123103ddc81d94d1dca133e025c3ee25ab00ae"}) sendto$inet(r0, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={r0, 0x694, 0x7, 0x2}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x5, 0x2, 0x5, 0xf55}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0xc0, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x42}, @void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "db98c94c93e1ef606097eca26f6c23d0192cf0f1c94e73f3"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "98b4517934ddbc8b2b6d58ed77ceafe7ba9c8d47eb30ed47"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "94bb7a00fa6cbf9938aeba9cc4f3c85814b830a941a05e3c"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) 1.012217306s ago: executing program 4 (id=1201): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 902.351738ms ago: executing program 1 (id=1202): sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) recvmmsg(r3, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r4, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c0003800800010002"], 0x6c}, 0x1, 0x0, 0x0, 0x20040814}, 0x4880) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2f, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x52, 0x2, {0x2, 0x8cb}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc850}, 0x0) r8 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r8, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)={0x1c, 0xd, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 870.545757ms ago: executing program 3 (id=1203): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) accept4$tipc(0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000000100)=0x10, 0x800) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x11}, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @exit, @map_fd={0x18, 0x6}, @call={0x85, 0x0, 0x0, 0x7e}, @alu={0x7, 0x0, 0x9, 0x4, 0x4, 0x18, 0x8}]}, &(0x7f0000000200)='syzkaller\x00', 0x101, 0xcc, &(0x7f0000000240)=""/204, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x0, 0x55ad, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x1, 0xffffffffffffffff], &(0x7f0000000400)=[{0x0, 0x4, 0x1, 0xc}]}, 0x94) (async) pipe(&(0x7f0000000500)={0xffffffffffffffff}) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000540)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000580)='GPL\x00', 0x4, 0x67, &(0x7f00000005c0)=""/103, 0x41100, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x10, 0x2, 0xf1}, 0x10, 0x5b76, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], 0x0, 0x10, 0x4}, 0x94) (async) r5 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r6}, 0xc) (async) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f00000000c0)={@mcast2, r6}, 0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newlink={0x4c, 0x10, 0x8, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x51792e7248df3904}, [@IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FD={0x8, 0x1, r4}]}]}, 0x4c}}, 0x0) 748.433996ms ago: executing program 4 (id=1204): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x0, 0x4}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r4, 0x25, 0x18, @val=@uprobe_multi={&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=[0x81a, 0x9b], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x5, 0x4], 0x35cd, 0x2}}, 0x40) 694.394733ms ago: executing program 0 (id=1205): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r1, &(0x7f0000000000)=0x8, 0x12) close(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710421000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) splice(r0, 0x0, r1, 0x0, 0x6, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6(0xa, 0x805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f00000001c0)=r5, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @empty}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r3, 0x84, 0x72, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28000000131481"], 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x3d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) close(0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SET_PARAMS(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x412525ac144faef6}, 0x44880) 565.157529ms ago: executing program 0 (id=1206): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e60, 0x22, @empty, 0xd}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sendto$inet6(r0, &(0x7f00000001c0)="805ef154", 0x4, 0x3b00, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000620188000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 425.089976ms ago: executing program 0 (id=1207): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'ip6tnl0\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x200}, [@tmpl={0x104, 0x5, [{{@in=@multicast1, 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x8001, 0x4, 0x7}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0x3506, 0x2, 0x3, 0x7, 0x5, 0x3, 0x7}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x1bc}}, 0x0) (async) getsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xba}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 290.093132ms ago: executing program 3 (id=1208): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0xd, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x11, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x24, r3, 0x1, 0x4, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r5}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd206"], 0xdd12}], 0x1, 0x0, 0x0, 0x40101}, 0x40004) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r6, 0x112, 0x9, 0x0, &(0x7f0000000e40)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x11, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe80c}, {}, {}, [@map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x10, 0x7, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000380)=[{0x0, 0x2, 0xc, 0x8}, {0x0, 0x3, 0x0, 0xb}, {0x4, 0x1, 0x2, 0x9}]}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='xen_mmu_release_ptpage\x00', r7, 0x0, 0xfffffffffffffff8}, 0x18) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r4) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000600)={0x4c, r8, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'erspan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x1) 286.948848ms ago: executing program 4 (id=1209): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r1, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x2f}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2d}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1d}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4d}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000005}, 0x4000004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000005c0)) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000001705000300030000000900010073797a30000000000900020073797a32"], 0x84}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x40, &(0x7f0000000200)=""/64, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x24b40, r7}, 0x90) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000000206010100000200000000000000ffff05000100070000000900020073797a3000000000050005000a000000050004000000000016000300686173683a6e65742c706f72742c6e65740000001400078008000840000000000500150002"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4a9c4b67}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x4) 286.363885ms ago: executing program 1 (id=1210): r0 = socket(0x11, 0x800000003, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e21, @empty}, 0x4, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x7ffffffe, 0x278, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0x80}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x2d}]}}]}, 0xb0}}, 0x0) 226.936477ms ago: executing program 2 (id=1211): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r2, 0x80646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000690}, 0x20048040) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) syz_emit_ethernet(0x46, &(0x7f00000005c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local}, "a815a23da43974ff"}}}}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) 205.752067ms ago: executing program 0 (id=1212): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) 2.262375ms ago: executing program 4 (id=1213): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000bb"], 0xf8}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000000800000000000000"], &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x3, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x2, 0x0, 0x0, {[@fastopen={0x22, 0x6, "269042f6"}]}}}}}}}}, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x400000000000c2f9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2040, 0x0) write$tun(r3, &(0x7f0000000100)={@void, @val={0x6, 0x1, 0x0, 0x0, 0x4a, 0xfff9}, @mpls={[{0x6, 0x0, 0x1}, {0x7}, {0x100}], @generic="bb67bac68f434870f95476da7729cf304084b4542decd9af42f8d63285"}}, 0x33) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f0000000000)) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000040)={r2}) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800010001000000040004800800020001000000080108802c0007800800ffeac3bc0000080006001c0000000800060000000000080005"], 0x130}}, 0x0) 0s ago: executing program 3 (id=1214): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c4000001a00fbbe00000000000000000a00000000000000000000004947ee29c853495c38b05458f51d1edd6b0b4174dfcada22896121e58c384614294ea4af831613d51c08c872c424b83845ee582c51b4899a4e15fe86401a48ca0900000000000000aba6a109c47f85258ea00a2d47def9c78a99b1ceb7b90a5c7f7c0923a93a7b9d0a8cc552"], 0x1c}}, 0x0) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e0001000200"], 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) (async) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0xfffffffffffffffd, &(0x7f00000002c0)=0x4) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010f080201c0b25bd20af3068ea8d0549800"], 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.16' (ED25519) to the list of known hosts. [ 110.894435][ T5814] cgroup: Unknown subsys name 'net' [ 111.076806][ T5814] cgroup: Unknown subsys name 'cpuset' [ 111.090034][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 113.240190][ T9] cfg80211: failed to load regulatory.db [ 113.301577][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 116.186217][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.203453][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.213293][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.227344][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.238402][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.271652][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 116.292506][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 116.302999][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 116.314347][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 116.326085][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 116.339188][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.348872][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.361234][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.369505][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 116.385131][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 116.396371][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 116.405865][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.419486][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 116.429771][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 116.440164][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.440164][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.461302][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 116.465423][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 116.489542][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 116.493386][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 117.274468][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 117.543156][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 117.646997][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 117.696134][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 117.743312][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 117.921930][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.932605][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.942528][ T5830] bridge_slave_0: entered allmulticast mode [ 117.951738][ T5830] bridge_slave_0: entered promiscuous mode [ 118.015535][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.025825][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.038148][ T5830] bridge_slave_1: entered allmulticast mode [ 118.046326][ T5830] bridge_slave_1: entered promiscuous mode [ 118.136586][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.148285][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.163484][ T5829] bridge_slave_0: entered allmulticast mode [ 118.174035][ T5829] bridge_slave_0: entered promiscuous mode [ 118.257178][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.267249][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.276972][ T5829] bridge_slave_1: entered allmulticast mode [ 118.286411][ T5829] bridge_slave_1: entered promiscuous mode [ 118.302094][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.312579][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.322805][ T5831] bridge_slave_0: entered allmulticast mode [ 118.334229][ T5831] bridge_slave_0: entered promiscuous mode [ 118.350651][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.367389][ T5841] Bluetooth: hci0: command tx timeout [ 118.376733][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.388949][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.397847][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.408457][ T5825] bridge_slave_0: entered allmulticast mode [ 118.419173][ T5825] bridge_slave_0: entered promiscuous mode [ 118.464350][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.475117][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.485853][ T5831] bridge_slave_1: entered allmulticast mode [ 118.495109][ T5831] bridge_slave_1: entered promiscuous mode [ 118.517841][ T5841] Bluetooth: hci1: command tx timeout [ 118.517884][ T5833] Bluetooth: hci2: command tx timeout [ 118.531917][ T5827] Bluetooth: hci4: command tx timeout [ 118.533195][ T5837] Bluetooth: hci3: command tx timeout [ 118.565896][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.574536][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.586252][ T5825] bridge_slave_1: entered allmulticast mode [ 118.596385][ T5825] bridge_slave_1: entered promiscuous mode [ 118.673530][ T5830] team0: Port device team_slave_0 added [ 118.700810][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.712664][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.721861][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.733677][ T5828] bridge_slave_0: entered allmulticast mode [ 118.744580][ T5828] bridge_slave_0: entered promiscuous mode [ 118.773356][ T5830] team0: Port device team_slave_1 added [ 118.784748][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.802153][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.816629][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.827818][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.841685][ T5828] bridge_slave_1: entered allmulticast mode [ 118.852348][ T5828] bridge_slave_1: entered promiscuous mode [ 118.866244][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.894894][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.944775][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.070151][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.080154][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.117964][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.162396][ T5829] team0: Port device team_slave_0 added [ 119.174939][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.202932][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.214168][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.250940][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.270316][ T5825] team0: Port device team_slave_0 added [ 119.283718][ T5829] team0: Port device team_slave_1 added [ 119.293493][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.309784][ T5831] team0: Port device team_slave_0 added [ 119.345461][ T5825] team0: Port device team_slave_1 added [ 119.389025][ T5831] team0: Port device team_slave_1 added [ 119.516639][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.529872][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.563971][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.581737][ T5828] team0: Port device team_slave_0 added [ 119.612592][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.621823][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.671263][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.690494][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.702565][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.738099][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.752939][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.764207][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.804776][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.826517][ T5828] team0: Port device team_slave_1 added [ 119.862089][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.874316][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.918100][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.935510][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.950580][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.997796][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.052638][ T5830] hsr_slave_0: entered promiscuous mode [ 120.063685][ T5830] hsr_slave_1: entered promiscuous mode [ 120.173849][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.182903][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.216003][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.296824][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.306091][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.341846][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.401372][ T5829] hsr_slave_0: entered promiscuous mode [ 120.410275][ T5829] hsr_slave_1: entered promiscuous mode [ 120.417749][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 120.426326][ T5829] Cannot create hsr debugfs directory [ 120.437980][ T5837] Bluetooth: hci0: command tx timeout [ 120.461247][ T5831] hsr_slave_0: entered promiscuous mode [ 120.469931][ T5831] hsr_slave_1: entered promiscuous mode [ 120.479610][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 120.487178][ T5831] Cannot create hsr debugfs directory [ 120.509629][ T5825] hsr_slave_0: entered promiscuous mode [ 120.521880][ T5825] hsr_slave_1: entered promiscuous mode [ 120.535015][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 120.545670][ T5825] Cannot create hsr debugfs directory [ 120.597812][ T5837] Bluetooth: hci2: command tx timeout [ 120.597894][ T5833] Bluetooth: hci4: command tx timeout [ 120.608249][ T5837] Bluetooth: hci3: command tx timeout [ 120.617875][ T5827] Bluetooth: hci1: command tx timeout [ 120.818060][ T5828] hsr_slave_0: entered promiscuous mode [ 120.831512][ T5828] hsr_slave_1: entered promiscuous mode [ 120.841717][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 120.850568][ T5828] Cannot create hsr debugfs directory [ 121.495768][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 121.519692][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 121.536208][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 121.567927][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 121.661049][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 121.680883][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 121.702978][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 121.717188][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 121.844748][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 121.869369][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 121.890451][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 121.921430][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 122.039865][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 122.063065][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 122.103021][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 122.120562][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 122.216318][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 122.242680][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.251508][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 122.274177][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 122.293751][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 122.392532][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.426658][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.443945][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.452244][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.484248][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.492582][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.518715][ T5827] Bluetooth: hci0: command tx timeout [ 122.575511][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.636419][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.644858][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.673426][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.683183][ T5833] Bluetooth: hci4: command tx timeout [ 122.685130][ T5841] Bluetooth: hci2: command tx timeout [ 122.689848][ T5827] Bluetooth: hci1: command tx timeout [ 122.705341][ T5837] Bluetooth: hci3: command tx timeout [ 122.723888][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.734010][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.831547][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.890805][ T3521] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.899028][ T3521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.945331][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.954097][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.979957][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.001730][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.111405][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.132139][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.179313][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.188119][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.231589][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.240239][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.271238][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.281418][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.307009][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.315885][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.356252][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.789785][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.926283][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.070551][ T5828] veth0_vlan: entered promiscuous mode [ 124.121990][ T5828] veth1_vlan: entered promiscuous mode [ 124.164399][ T5831] veth0_vlan: entered promiscuous mode [ 124.231513][ T5831] veth1_vlan: entered promiscuous mode [ 124.313508][ T5828] veth0_macvtap: entered promiscuous mode [ 124.343374][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.360726][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.379045][ T5828] veth1_macvtap: entered promiscuous mode [ 124.396149][ T5831] veth0_macvtap: entered promiscuous mode [ 124.425039][ T5831] veth1_macvtap: entered promiscuous mode [ 124.482955][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.515853][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.551598][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.571182][ T5830] veth0_vlan: entered promiscuous mode [ 124.592087][ T44] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.605710][ T5841] Bluetooth: hci0: command tx timeout [ 124.623551][ T44] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.633898][ T44] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.651754][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.670961][ T44] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.694302][ T5829] veth0_vlan: entered promiscuous mode [ 124.730176][ T5830] veth1_vlan: entered promiscuous mode [ 124.739736][ T44] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.755849][ T5825] veth0_vlan: entered promiscuous mode [ 124.763106][ T5837] Bluetooth: hci4: command tx timeout [ 124.770086][ T5837] Bluetooth: hci3: command tx timeout [ 124.777255][ T5841] Bluetooth: hci1: command tx timeout [ 124.779690][ T5827] Bluetooth: hci2: command tx timeout [ 124.799908][ T44] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.813301][ T44] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.835502][ T44] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.873212][ T5829] veth1_vlan: entered promiscuous mode [ 124.904788][ T5825] veth1_vlan: entered promiscuous mode [ 124.976890][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.996029][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.046392][ T5830] veth0_macvtap: entered promiscuous mode [ 125.080052][ T5830] veth1_macvtap: entered promiscuous mode [ 125.139103][ T3422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.157778][ T3422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.188414][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.200690][ T5825] veth0_macvtap: entered promiscuous mode [ 125.217489][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.233231][ T5829] veth0_macvtap: entered promiscuous mode [ 125.275319][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.289983][ T5825] veth1_macvtap: entered promiscuous mode [ 125.308649][ T5829] veth1_macvtap: entered promiscuous mode [ 125.334423][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 125.370415][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.387814][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.403128][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.469613][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.511741][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.533902][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.548774][ T44] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.572461][ T44] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.586319][ T5943] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.605510][ T44] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.641317][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.726067][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.774386][ T3435] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.835330][ T3435] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.847978][ T3435] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.871738][ T3435] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.912682][ T3435] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.982018][ T3435] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.020744][ T3435] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.096534][ T3435] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.270729][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.293235][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.355037][ T5957] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET) [ 126.414513][ T3422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.446698][ T3422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.470299][ T5960] syzkaller1: entered promiscuous mode [ 126.484264][ T5960] syzkaller1: entered allmulticast mode [ 126.520378][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.549717][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.664245][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.688503][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.756924][ T3435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.810625][ T3435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.865436][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'. [ 126.910024][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.932739][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.460126][ T5984] netlink: 15 bytes leftover after parsing attributes in process `syz.1.14'. [ 127.558583][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 127.943430][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 128.084338][ T1034] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.126403][ T1034] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.289325][ T1034] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.525688][ T6007] : entered promiscuous mode [ 128.567984][ T6027] Zero length message leads to an empty skb [ 128.634041][ T4554] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.301892][ T6048] netlink: 108 bytes leftover after parsing attributes in process `syz.3.28'. [ 129.346853][ T6048] netlink: 108 bytes leftover after parsing attributes in process `syz.3.28'. [ 129.390771][ T6048] netlink: 108 bytes leftover after parsing attributes in process `syz.3.28'. [ 129.663549][ T6057] trusted_key: syz.4.30 sent an empty control message without MSG_MORE. [ 129.820641][ T6065] warning: `syz.2.33' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 130.600852][ T6090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.40'. [ 130.889551][ T6092] tipc: Started in network mode [ 130.897009][ T6092] tipc: Node identity 368f41748b99, cluster identity 4711 [ 130.912958][ T6092] tipc: Enabled bearer , priority 0 [ 130.926951][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 130.970801][ T6092] syzkaller0: entered promiscuous mode [ 131.014428][ T6094] netlink: 248 bytes leftover after parsing attributes in process `syz.2.42'. [ 131.042871][ T6092] syzkaller0: entered allmulticast mode [ 131.103583][ T6098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.112482][ T6100] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 131.166405][ T6099] netlink: 'syz.0.43': attribute type 1 has an invalid length. [ 131.259431][ T6107] netlink: 'syz.0.43': attribute type 1 has an invalid length. [ 131.288178][ T6092] tipc: Resetting bearer [ 131.581170][ T6091] tipc: Resetting bearer [ 131.639431][ T6091] tipc: Disabling bearer [ 131.724593][ T6122] batadv_slave_1: entered promiscuous mode [ 131.751543][ T6121] batadv_slave_1: left promiscuous mode [ 131.958505][ T6125] __nla_validate_parse: 5 callbacks suppressed [ 131.958527][ T6125] netlink: 60 bytes leftover after parsing attributes in process `syz.0.51'. [ 132.115748][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.55'. [ 132.157970][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.55'. [ 132.188754][ T6133] netlink: 52 bytes leftover after parsing attributes in process `syz.1.53'. [ 132.264640][ T6136] netlink: 52 bytes leftover after parsing attributes in process `syz.1.53'. [ 132.344826][ T6129] veth3: entered allmulticast mode [ 132.389896][ T6133] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.403635][ T6133] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.476716][ T6141] netlink: 'syz.2.56': attribute type 1 has an invalid length. [ 132.683350][ T6148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.58'. [ 132.733849][ T6148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.58'. [ 133.324103][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.64'. [ 133.351313][ T6172] xt_l2tp: invalid flags combination: 0 [ 133.363703][ T6175] xt_l2tp: invalid flags combination: 0 [ 133.988897][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 134.102035][ T6194] netlink: 100 bytes leftover after parsing attributes in process `syz.3.70'. [ 134.832549][ T6223] IPVS: length: 188 != 8 [ 135.172774][ T6229] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.315393][ T6229] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.325447][ T6240] netlink: 'syz.1.86': attribute type 14 has an invalid length. [ 135.363466][ T6242] tunl0: entered promiscuous mode [ 135.370878][ T6235] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 135.380341][ T6235] IPv6: NLM_F_CREATE should be set when creating new route [ 135.400853][ T6242] netlink: 'syz.3.87': attribute type 3 has an invalid length. [ 135.412194][ T6236] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 135.462411][ T4554] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.487955][ T6240] netlink: 'syz.1.86': attribute type 14 has an invalid length. [ 135.513572][ T4554] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.576669][ T4554] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.667716][ T4554] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.064661][ T6265] FAULT_INJECTION: forcing a failure. [ 136.064661][ T6265] name failslab, interval 1, probability 0, space 0, times 1 [ 136.080959][ T6265] CPU: 0 UID: 0 PID: 6265 Comm: syz.4.92 Not tainted syzkaller #0 PREEMPT(full) [ 136.080990][ T6265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 136.081013][ T6265] Call Trace: [ 136.081025][ T6265] [ 136.081037][ T6265] dump_stack_lvl+0x189/0x250 [ 136.081077][ T6265] ? __pfx____ratelimit+0x10/0x10 [ 136.081100][ T6265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.081127][ T6265] ? __pfx__printk+0x10/0x10 [ 136.081160][ T6265] ? rcu_is_watching+0x15/0xb0 [ 136.081190][ T6265] ? trace_kmalloc+0x1f/0xb0 [ 136.081219][ T6265] should_fail_ex+0x414/0x560 [ 136.081261][ T6265] should_failslab+0xa8/0x100 [ 136.081291][ T6265] kmem_cache_alloc_noprof+0x88/0x710 [ 136.081327][ T6265] ? skb_clone+0x212/0x3a0 [ 136.081362][ T6265] skb_clone+0x212/0x3a0 [ 136.081396][ T6265] bpf_clone_redirect+0x16a/0x4b0 [ 136.081431][ T6265] ? bpf_test_run+0x192/0x7d0 [ 136.081459][ T6265] bpf_prog_885767c90d177146+0x62/0x6b [ 136.081510][ T6265] ? __pfx_do_softirq+0x10/0x10 [ 136.081532][ T6265] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 136.081568][ T6265] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 136.081620][ T6265] ? __local_bh_disable_ip+0xf1/0x190 [ 136.081645][ T6265] ? __pfx___cant_migrate+0x10/0x10 [ 136.081668][ T6265] ? __local_bh_enable_ip+0x12d/0x1c0 [ 136.081692][ T6265] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 136.081730][ T6265] ? bpf_test_timer_continue+0x10d/0x320 [ 136.081765][ T6265] bpf_test_run+0x313/0x7d0 [ 136.081820][ T6265] ? __pfx_bpf_test_run+0x10/0x10 [ 136.081865][ T6265] ? __kasan_krealloc+0xeb/0x110 [ 136.081892][ T6265] ? eth_type_trans+0x35e/0x6d0 [ 136.081931][ T6265] ? convert___skb_to_skb+0x3d/0x5b0 [ 136.081962][ T6265] bpf_prog_test_run_skb+0xd67/0x1d50 [ 136.082007][ T6265] ? __fget_files+0x2a/0x420 [ 136.082034][ T6265] ? __fget_files+0x3a0/0x420 [ 136.082060][ T6265] ? __fget_files+0x2a/0x420 [ 136.082094][ T6265] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 136.082123][ T6265] bpf_prog_test_run+0x2c7/0x340 [ 136.082161][ T6265] __sys_bpf+0x562/0x860 [ 136.082194][ T6265] ? __pfx___sys_bpf+0x10/0x10 [ 136.082245][ T6265] ? ksys_write+0x22a/0x250 [ 136.082268][ T6265] ? __pfx_ksys_write+0x10/0x10 [ 136.082297][ T6265] __x64_sys_bpf+0x7c/0x90 [ 136.082327][ T6265] do_syscall_64+0xfa/0xf80 [ 136.082352][ T6265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.082374][ T6265] ? clear_bhb_loop+0x60/0xb0 [ 136.082402][ T6265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.082424][ T6265] RIP: 0033:0x7f5ed7b8f749 [ 136.082444][ T6265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.082462][ T6265] RSP: 002b:00007f5ed8b02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 136.082486][ T6265] RAX: ffffffffffffffda RBX: 00007f5ed7de5fa0 RCX: 00007f5ed7b8f749 [ 136.082502][ T6265] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 136.082515][ T6265] RBP: 00007f5ed8b02090 R08: 0000000000000000 R09: 0000000000000000 [ 136.082528][ T6265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 136.082540][ T6265] R13: 00007f5ed7de6038 R14: 00007f5ed7de5fa0 R15: 00007ffc8eacd488 [ 136.082576][ T6265] [ 136.762981][ T6270] netlink: 'syz.3.94': attribute type 1 has an invalid length. [ 137.036091][ T6275] bond1: option min_links: invalid value (18446744073709551614) [ 137.060689][ T6275] bond1: option min_links: allowed values 0 - 2147483647 [ 137.146703][ T6275] bond1 (unregistering): Released all slaves [ 137.211048][ T6282] __nla_validate_parse: 16 callbacks suppressed [ 137.211072][ T6282] netlink: 56 bytes leftover after parsing attributes in process `syz.1.97'. [ 137.317780][ T5827] Bluetooth: hci0: command 0x0c20 tx timeout [ 137.371889][ T6282] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 137.538099][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.98'. [ 138.014478][ T6308] netlink: 68 bytes leftover after parsing attributes in process `syz.2.103'. [ 138.095848][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.105'. [ 138.472618][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'. [ 138.847047][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.856270][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.897519][ T6334] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 138.984053][ T6334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.111'. [ 139.615938][ T6355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.119'. [ 139.717874][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.120'. [ 139.803161][ T6361] FAULT_INJECTION: forcing a failure. [ 139.803161][ T6361] name failslab, interval 1, probability 0, space 0, times 0 [ 139.818866][ T6361] CPU: 0 UID: 0 PID: 6361 Comm: syz.4.120 Not tainted syzkaller #0 PREEMPT(full) [ 139.818897][ T6361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.818912][ T6361] Call Trace: [ 139.818921][ T6361] [ 139.818931][ T6361] dump_stack_lvl+0x189/0x250 [ 139.818966][ T6361] ? __pfx____ratelimit+0x10/0x10 [ 139.818990][ T6361] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.819017][ T6361] ? __pfx__printk+0x10/0x10 [ 139.819052][ T6361] ? rcu_is_watching+0x15/0xb0 [ 139.819081][ T6361] ? trace_kmalloc+0x1f/0xb0 [ 139.819109][ T6361] should_fail_ex+0x414/0x560 [ 139.819151][ T6361] should_failslab+0xa8/0x100 [ 139.819180][ T6361] kmem_cache_alloc_noprof+0x88/0x710 [ 139.819216][ T6361] ? skb_clone+0x212/0x3a0 [ 139.819250][ T6361] skb_clone+0x212/0x3a0 [ 139.819285][ T6361] bpf_clone_redirect+0x16a/0x4b0 [ 139.819321][ T6361] ? bpf_test_run+0x192/0x7d0 [ 139.819356][ T6361] bpf_prog_885767c90d177146+0x62/0x6b [ 139.819403][ T6361] ? __pfx_do_softirq+0x10/0x10 [ 139.819426][ T6361] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 139.819462][ T6361] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 139.819508][ T6361] ? __local_bh_disable_ip+0xf1/0x190 [ 139.819540][ T6361] ? __pfx___cant_migrate+0x10/0x10 [ 139.819563][ T6361] ? __local_bh_enable_ip+0x12d/0x1c0 [ 139.819587][ T6361] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 139.819617][ T6361] ? bpf_test_timer_continue+0x10d/0x320 [ 139.819653][ T6361] bpf_test_run+0x313/0x7d0 [ 139.819710][ T6361] ? __pfx_bpf_test_run+0x10/0x10 [ 139.819758][ T6361] ? __kasan_krealloc+0xeb/0x110 [ 139.819785][ T6361] ? eth_type_trans+0x35e/0x6d0 [ 139.819825][ T6361] ? convert___skb_to_skb+0x3d/0x5b0 [ 139.819857][ T6361] bpf_prog_test_run_skb+0xd67/0x1d50 [ 139.819903][ T6361] ? __fget_files+0x2a/0x420 [ 139.819932][ T6361] ? __fget_files+0x3a0/0x420 [ 139.819959][ T6361] ? __fget_files+0x2a/0x420 [ 139.819995][ T6361] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 139.820025][ T6361] bpf_prog_test_run+0x2c7/0x340 [ 139.820071][ T6361] __sys_bpf+0x562/0x860 [ 139.820107][ T6361] ? __pfx___sys_bpf+0x10/0x10 [ 139.820160][ T6361] ? ksys_write+0x22a/0x250 [ 139.820186][ T6361] ? __pfx_ksys_write+0x10/0x10 [ 139.820217][ T6361] __x64_sys_bpf+0x7c/0x90 [ 139.820248][ T6361] do_syscall_64+0xfa/0xf80 [ 139.820273][ T6361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.820297][ T6361] ? clear_bhb_loop+0x60/0xb0 [ 139.820325][ T6361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.820347][ T6361] RIP: 0033:0x7f5ed7b8f749 [ 139.820367][ T6361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.820386][ T6361] RSP: 002b:00007f5ed8b02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 139.820409][ T6361] RAX: ffffffffffffffda RBX: 00007f5ed7de5fa0 RCX: 00007f5ed7b8f749 [ 139.820425][ T6361] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 139.820438][ T6361] RBP: 00007f5ed8b02090 R08: 0000000000000000 R09: 0000000000000000 [ 139.820451][ T6361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.820462][ T6361] R13: 00007f5ed7de6038 R14: 00007f5ed7de5fa0 R15: 00007ffc8eacd488 [ 139.820500][ T6361] [ 139.824618][ T6355] af_packet: tpacket_rcv: packet too big, clamped from 3948 to 3944. macoff=96 [ 140.250872][ T6368] netlink: 'syz.1.122': attribute type 12 has an invalid length. [ 140.280721][ T6365] nbd: socks must be embedded in a SOCK_ITEM attr [ 140.522555][ T6372] openvswitch: netlink: IPv6 tunnel dst address is zero [ 140.887004][ T6380] bond1: ARP target 1.0.0.0 is already present [ 140.907426][ T6389] netlink: 24 bytes leftover after parsing attributes in process `syz.4.130'. [ 140.944567][ T6380] bond1: option arp_ip_target: invalid value (1) [ 140.972564][ T6380] bond1 (unregistering): Released all slaves [ 141.088707][ T6399] netlink: 68 bytes leftover after parsing attributes in process `syz.1.133'. [ 141.812162][ T6414] netlink: 'syz.2.139': attribute type 5 has an invalid length. [ 141.989248][ T6420] nbd: device at index 4 is going down [ 142.213957][ T6427] netlink: 'syz.0.143': attribute type 8 has an invalid length. [ 142.385938][ T6433] __nla_validate_parse: 1 callbacks suppressed [ 142.385959][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'. [ 142.475784][ T5876] udevd[5876]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 142.524388][ T6433] gtp0: entered promiscuous mode [ 142.594423][ T6433] gtp0: entered allmulticast mode [ 142.844013][ T6452] netlink: 'syz.2.149': attribute type 4 has an invalid length. [ 143.820683][ T6499] ip6t_REJECT: ECHOREPLY is not supported [ 143.831365][ T6499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.160'. [ 144.017367][ T6503] netlink: 32 bytes leftover after parsing attributes in process `syz.2.161'. [ 144.124982][ T130] IPVS: starting estimator thread 0... [ 144.228030][ T6507] IPVS: using max 31 ests per chain, 74400 per kthread [ 144.393388][ T6509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.161'. [ 144.753870][ T6533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.166'. [ 144.809370][ T6521] tipc: Enabled bearer , priority 10 [ 145.005172][ T6540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168'. [ 145.088379][ T6542] netlink: 'syz.2.169': attribute type 1 has an invalid length. [ 145.107339][ T6542] netlink: 'syz.2.169': attribute type 1 has an invalid length. [ 145.472070][ T6560] netlink: 32 bytes leftover after parsing attributes in process `syz.4.176'. [ 145.774276][ T6572] netlink: 'syz.4.179': attribute type 1 has an invalid length. [ 145.898940][ T6580] netlink: 32 bytes leftover after parsing attributes in process `syz.0.181'. [ 145.913249][ T6577] bond1: (slave geneve2): making interface the new active one [ 145.935446][ T6577] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 145.968962][ T6576] bridge: RTM_NEWNEIGH with invalid ether address [ 145.988255][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 146.037829][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 146.077357][ T10] tipc: Node number set to 3172352372 [ 146.350098][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 146.381801][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 146.742459][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 146.787835][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 147.067889][ T6620] xt_policy: output policy not valid in PREROUTING and INPUT [ 147.081264][ T6620] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 147.612166][ T6641] netlink: 'syz.4.198': attribute type 3 has an invalid length. [ 147.620292][ T6642] netlink: 'syz.4.198': attribute type 3 has an invalid length. [ 147.704569][ T6644] x_tables: duplicate underflow at hook 1 [ 148.272469][ T6668] __nla_validate_parse: 1 callbacks suppressed [ 148.272490][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 148.469783][ T6673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'. [ 148.530549][ T6672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.207'. [ 148.573238][ T6672] netlink: 48 bytes leftover after parsing attributes in process `syz.2.207'. [ 148.597394][ T6675] netlink: 'syz.0.209': attribute type 12 has an invalid length. [ 149.046452][ T6694] netlink: 'syz.0.214': attribute type 2 has an invalid length. [ 149.049838][ T6692] netlink: 232 bytes leftover after parsing attributes in process `syz.3.213'. [ 149.100471][ T6694] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 149.134917][ T6696] x_tables: duplicate underflow at hook 2 [ 149.351375][ T6704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.589761][ T6709] netlink: 'syz.3.220': attribute type 1 has an invalid length. [ 149.787977][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'. [ 149.847957][ T6711] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 149.948882][ T6726] sock: sock_timestamping_bind_phc: sock not bind to device [ 149.986414][ T6726] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.222'. [ 150.085751][ T6730] Bluetooth: MGMT ver 1.23 [ 150.522640][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 150.544864][ T6744] syzkaller0: entered promiscuous mode [ 150.567837][ T6744] syzkaller0: entered allmulticast mode [ 150.610576][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 150.928299][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'. [ 151.236226][ T6769] ip6gre0: Master is either lo or non-ether device [ 151.927246][ T6793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.090396][ T6793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.197874][ T5841] Bluetooth: hci2: command 0x0401 tx timeout [ 152.205539][ T5827] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 152.497043][ T6817] netlink: 'syz.4.249': attribute type 1 has an invalid length. [ 153.018363][ T6826] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 153.048146][ T6826] syzkaller1: linktype set to 823 [ 153.225720][ T6832] tipc: Started in network mode [ 153.259198][ T6832] tipc: Node identity 5a08a0207fbf, cluster identity 4711 [ 153.301055][ T6832] tipc: Enabled bearer , priority 0 [ 153.329890][ T6832] syzkaller0: entered promiscuous mode [ 153.342846][ T6832] syzkaller0: entered allmulticast mode [ 153.377249][ T6832] netlink: 'syz.0.254': attribute type 10 has an invalid length. [ 153.391429][ T6832] __nla_validate_parse: 5 callbacks suppressed [ 153.391451][ T6832] netlink: 224 bytes leftover after parsing attributes in process `syz.0.254'. [ 153.427336][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.256'. [ 153.466382][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.256'. [ 153.508355][ T6838] tipc: Started in network mode [ 153.530264][ T6838] tipc: Node identity 1, cluster identity 4711 [ 153.540997][ T6838] tipc: Node number set to 1 [ 153.556629][ T6845] netlink: 181328 bytes leftover after parsing attributes in process `syz.4.256'. [ 153.572828][ T6840] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 153.608983][ T6832] tipc: Resetting bearer [ 153.834406][ T6831] tipc: Resetting bearer [ 153.969520][ T6831] tipc: Disabling bearer [ 154.327914][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.258'. [ 154.808282][ T6874] lo: entered promiscuous mode [ 154.880325][ T6874] tunl0: entered promiscuous mode [ 154.946601][ T6874] gre0: entered promiscuous mode [ 154.990531][ T6874] gretap0: entered promiscuous mode [ 155.035357][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 155.254286][ T6874] erspan0: entered promiscuous mode [ 155.353885][ T6874] ip_vti0: entered promiscuous mode [ 155.450554][ T6884] tipc: Enabled bearer , priority 0 [ 155.474994][ T6886] syzkaller0: entered promiscuous mode [ 155.544493][ T6886] syzkaller0: entered allmulticast mode [ 155.734520][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'. [ 155.996655][ T6886] tipc: Resetting bearer [ 156.149767][ T6886] tipc: Disabling bearer [ 156.947403][ T6940] netlink: 52 bytes leftover after parsing attributes in process `syz.0.279'. [ 156.990416][ T6939] dvmrp0: entered allmulticast mode [ 157.015781][ T6939] dvmrp0: left allmulticast mode [ 157.157529][ T6943] sctp: [Deprecated]: syz.0.281 (pid 6943) Use of int in max_burst socket option. [ 157.157529][ T6943] Use struct sctp_assoc_value instead [ 157.309670][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.283'. [ 157.749791][ T6959] netlink: 'syz.0.286': attribute type 1 has an invalid length. [ 157.907175][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.286'. [ 158.057068][ T6963] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 158.127320][ T6963] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 158.147140][ T6963] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 158.471907][ T6987] netlink: 'syz.4.294': attribute type 2 has an invalid length. [ 158.503619][ T6987] __nla_validate_parse: 2 callbacks suppressed [ 158.503638][ T6987] netlink: 244 bytes leftover after parsing attributes in process `syz.4.294'. [ 158.609034][ T6987] netlink: 'syz.4.294': attribute type 10 has an invalid length. [ 158.647886][ T6994] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 158.671926][ T6994] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 158.738275][ T6987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.848256][ T6987] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 158.984103][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.298'. [ 159.009845][ T6987] syz.4.294 (6987) used greatest stack depth: 18304 bytes left [ 159.039657][ T6998] netlink: 64 bytes leftover after parsing attributes in process `syz.0.297'. [ 159.094623][ T6998] block nbd0: not configured, cannot reconfigure [ 159.249236][ T7006] syzkaller0: entered promiscuous mode [ 159.283455][ T7006] syzkaller0: entered allmulticast mode [ 159.517450][ T7022] netlink: 40 bytes leftover after parsing attributes in process `syz.4.301'. [ 159.781315][ T7032] Bluetooth: MGMT ver 1.23 [ 159.805904][ T7032] netlink: 24 bytes leftover after parsing attributes in process `syz.3.304'. [ 159.965897][ T7033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.034890][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.304'. [ 160.379719][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'. [ 160.553220][ T7067] netlink: 244 bytes leftover after parsing attributes in process `syz.3.313'. [ 160.785074][ T7070] x_tables: duplicate underflow at hook 2 [ 160.822289][ T7070] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20001 [ 160.928351][ T7073] openvswitch: netlink: IPv4 tunnel dst address is zero [ 161.151328][ T7084] netlink: 'syz.1.319': attribute type 6 has an invalid length. [ 161.556024][ T7103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.322'. [ 162.107345][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'. [ 162.136723][ T7113] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 162.328805][ T7124] Bluetooth: MGMT ver 1.23 [ 163.466711][ T7164] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 163.739735][ T7178] syzkaller0: refused to change device tx_queue_len [ 163.950426][ T7188] __nla_validate_parse: 5 callbacks suppressed [ 163.950446][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'. [ 164.378997][ T7204] team0: Cannot enslave team device to itself [ 164.534558][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.356'. [ 164.631193][ T7210] netlink: 'syz.2.357': attribute type 1 has an invalid length. [ 164.693467][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.357'. [ 165.005727][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'. [ 165.144389][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.363'. [ 165.405903][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'. [ 165.657425][ T7244] IPv6: sit1: Disabled Multicast RS [ 165.689192][ T7244] sit1: entered allmulticast mode [ 165.922007][ T7251] delete_channel: no stack [ 165.929306][ T7246] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 166.381014][ T7267] netlink: 'syz.3.376': attribute type 1 has an invalid length. [ 166.469229][ T7267] bond0: entered promiscuous mode [ 166.488999][ T7267] bond_slave_0: entered promiscuous mode [ 166.509697][ T7270] netlink: 24 bytes leftover after parsing attributes in process `syz.1.377'. [ 166.536812][ T7267] bond_slave_1: entered promiscuous mode [ 166.550979][ T7267] batadv0: entered promiscuous mode [ 166.564106][ T7267] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 166.602868][ T7267] bond0: left promiscuous mode [ 166.658924][ T7267] bond_slave_0: left promiscuous mode [ 166.665760][ T7267] bond_slave_1: left promiscuous mode [ 166.735139][ T7267] batadv0: left promiscuous mode [ 166.845806][ T7274] netlink: 'syz.1.378': attribute type 21 has an invalid length. [ 166.861271][ T7274] netlink: 156 bytes leftover after parsing attributes in process `syz.1.378'. [ 166.949329][ T3435] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.971878][ T3435] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 167.210556][ T7285] netlink: 184 bytes leftover after parsing attributes in process `syz.1.383'. [ 167.253317][ T7288] netlink: 92 bytes leftover after parsing attributes in process `syz.3.381'. [ 168.494991][ T7343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.814861][ T7355] netlink: 'syz.3.401': attribute type 1 has an invalid length. [ 169.109340][ T7363] syzkaller1: entered promiscuous mode [ 169.144042][ T7363] syzkaller1: entered allmulticast mode [ 170.159149][ T7406] tipc: Started in network mode [ 170.194001][ T7406] tipc: Node identity e0000001, cluster identity 4711 [ 170.202519][ T7406] tipc: Enabling of bearer rejected, failed to enable media [ 170.445063][ T7411] netlink: 'syz.3.415': attribute type 9 has an invalid length. [ 170.490168][ T7411] netlink: 'syz.3.415': attribute type 11 has an invalid length. [ 170.553116][ T7411] netlink: 'syz.3.415': attribute type 12 has an invalid length. [ 170.567723][ T7411] __nla_validate_parse: 2 callbacks suppressed [ 170.567746][ T7411] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.415'. [ 170.608302][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'. [ 170.645303][ T7419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.417'. [ 170.671011][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.417'. [ 170.790623][ T7419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.417'. [ 171.241770][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.424'. [ 171.431219][ T7451] netlink: 224 bytes leftover after parsing attributes in process `syz.1.426'. [ 171.455120][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.426'. [ 171.596105][ T7438] hsr_slave_1 (unregistering): left promiscuous mode [ 172.331535][ T7482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.437'. [ 172.493814][ T7489] netlink: 96 bytes leftover after parsing attributes in process `syz.0.440'. [ 172.584689][ T7488] wireguard0: entered promiscuous mode [ 172.697722][ T7488] wireguard0: entered allmulticast mode [ 172.746501][ T7488] team0: Device wireguard0 is of different type [ 172.767784][ T7501] sctp: [Deprecated]: syz.0.443 (pid 7501) Use of int in max_burst socket option deprecated. [ 172.767784][ T7501] Use struct sctp_assoc_value instead [ 172.879735][ T7502] sctp: [Deprecated]: syz.0.443 (pid 7502) Use of int in max_burst socket option deprecated. [ 172.879735][ T7502] Use struct sctp_assoc_value instead [ 173.222433][ T7519] netlink: 'syz.2.448': attribute type 29 has an invalid length. [ 173.348322][ T7519] netlink: 'syz.2.448': attribute type 29 has an invalid length. [ 173.987314][ T7547] netlink: 'syz.3.457': attribute type 1 has an invalid length. [ 174.053219][ T7549] netlink: 'syz.3.457': attribute type 1 has an invalid length. [ 174.167313][ T7553] syzkaller1: entered promiscuous mode [ 174.174746][ T7553] syzkaller1: entered allmulticast mode [ 174.232351][ T7553] netlink: 'syz.0.458': attribute type 1 has an invalid length. [ 174.503547][ T7567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.518973][ T7555] bond2: (slave gretap1): making interface the new active one [ 174.540707][ T7555] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 174.851336][ T7574] netlink: 'syz.4.463': attribute type 10 has an invalid length. [ 174.945241][ T7574] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 175.020033][ T7581] C: renamed from lo (while UP) [ 175.261735][ T7578] "syz.3.466" (7578) uses obsolete ecb(arc4) skcipher [ 175.661965][ T7606] __nla_validate_parse: 8 callbacks suppressed [ 175.661990][ T7606] netlink: 60 bytes leftover after parsing attributes in process `syz.3.473'. [ 175.729928][ T7606] unsupported nlmsg_type 40 [ 176.019310][ T7625] vlan2: entered promiscuous mode [ 176.048154][ T7625] bridge0: entered promiscuous mode [ 176.150676][ T7632] netlink: 'syz.2.482': attribute type 12 has an invalid length. [ 176.186283][ T7632] netlink: 'syz.2.482': attribute type 29 has an invalid length. [ 176.236531][ T7632] netlink: 148 bytes leftover after parsing attributes in process `syz.2.482'. [ 176.261574][ T7639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.484'. [ 176.284002][ T7632] netlink: 59 bytes leftover after parsing attributes in process `syz.2.482'. [ 176.420976][ T7643] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.504587][ T7645] netlink: 76 bytes leftover after parsing attributes in process `syz.4.486'. [ 176.703852][ T7655] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 176.805550][ T7661] netlink: 68 bytes leftover after parsing attributes in process `syz.4.491'. [ 177.032418][ T7668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.294069][ T7670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.494'. [ 177.859556][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.497'. [ 177.932400][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.497'. [ 178.019097][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.497'. [ 178.400086][ T7694] ip6_vti0: entered promiscuous mode [ 179.310718][ T7694] sit0: entered promiscuous mode [ 179.343159][ T7694] ip6tnl0: entered promiscuous mode [ 179.395468][ T7694] ip6gre0: entered promiscuous mode [ 179.425428][ T7694] syz_tun: entered promiscuous mode [ 179.463811][ T7694] ip6gretap0: entered promiscuous mode [ 179.498073][ T7694] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.508499][ T7694] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.527271][ T7694] bridge0: entered promiscuous mode [ 179.565500][ T7694] vcan0: entered promiscuous mode [ 179.581201][ T7694] bond0: entered promiscuous mode [ 179.592481][ T7694] bond_slave_0: entered promiscuous mode [ 179.605922][ T7694] bond_slave_1: entered promiscuous mode [ 179.619885][ T7694] batadv0: entered promiscuous mode [ 179.627239][ T7694] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 179.657924][ T7694] team0: entered promiscuous mode [ 179.665524][ T7694] team_slave_0: entered promiscuous mode [ 179.674948][ T7694] team_slave_1: entered promiscuous mode [ 179.689156][ T7694] dummy0: entered promiscuous mode [ 179.720998][ T7694] nlmon0: entered promiscuous mode [ 179.732180][ T7694] caif0: entered promiscuous mode [ 179.754401][ T7694] vxcan0: entered promiscuous mode [ 179.765361][ T7694] vxcan1: entered promiscuous mode [ 179.774374][ T7694] veth0: entered promiscuous mode [ 179.793187][ T7694] veth1: entered promiscuous mode [ 179.852191][ T7694] wg0: entered promiscuous mode [ 179.892391][ T7694] wg1: entered promiscuous mode [ 179.915809][ T7694] wg2: entered promiscuous mode [ 179.935777][ T7694] veth0_to_bridge: entered promiscuous mode [ 179.951841][ T7694] veth1_to_bridge: entered promiscuous mode [ 179.972296][ T7694] veth0_to_bond: entered promiscuous mode [ 179.985627][ T7694] veth1_to_bond: entered promiscuous mode [ 180.006221][ T7694] veth0_to_team: entered promiscuous mode [ 180.030686][ T7694] veth1_to_team: entered promiscuous mode [ 180.050156][ T7694] veth0_to_batadv: entered promiscuous mode [ 180.067177][ T7694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.083657][ T7694] batadv_slave_0: entered promiscuous mode [ 180.097837][ T7694] veth1_to_batadv: entered promiscuous mode [ 180.111486][ T7694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.124000][ T7694] batadv_slave_1: entered promiscuous mode [ 180.146111][ T7694] xfrm0: entered promiscuous mode [ 180.163898][ T7694] veth0_to_hsr: entered promiscuous mode [ 180.182404][ T7694] hsr0: entered promiscuous mode [ 180.202265][ T7694] veth1_virt_wifi: entered promiscuous mode [ 180.216858][ T7694] veth0_virt_wifi: entered promiscuous mode [ 180.232376][ T7694] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 180.366470][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 180.375684][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 180.384320][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 180.391815][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 180.411389][ T7694] vlan0: entered promiscuous mode [ 180.428312][ T7694] vlan1: entered promiscuous mode [ 180.437033][ T7694] macvlan0: entered promiscuous mode [ 180.498642][ T7694] macvlan1: entered promiscuous mode [ 180.512229][ T7694] ipvlan0: entered promiscuous mode [ 180.522468][ T7694] ipvlan1: entered promiscuous mode [ 180.551265][ T7694] macvtap0: entered promiscuous mode [ 180.577524][ T7694] macsec0: entered promiscuous mode [ 180.616354][ T7694] geneve0: entered promiscuous mode [ 180.637247][ T7694] geneve1: entered promiscuous mode [ 180.770816][ T7694] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 180.803781][ T7694] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 180.837417][ T7694] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 180.871707][ T7694] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 180.903294][ T7694] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 180.928781][ T7694] veth2: entered promiscuous mode [ 180.937221][ T7694] veth3: entered promiscuous mode [ 180.947285][ T7694] veth3: left allmulticast mode [ 180.956186][ T7694] bridge1: entered promiscuous mode [ 180.966559][ T7694] bond1: entered promiscuous mode [ 180.973082][ T7694] geneve2: entered promiscuous mode [ 180.988169][ T7694] erspan1: entered promiscuous mode [ 180.999166][ T7694] vlan2: entered promiscuous mode [ 181.005622][ T7694] bridge2: entered promiscuous mode [ 181.013148][ T7694] batadv0.5: entered promiscuous mode [ 181.023518][ T7694] macsec1: entered promiscuous mode [ 181.031472][ T7694] gretap1: entered promiscuous mode [ 181.058091][ T7704] dvmrp0: renamed from lo (while UP) [ 181.076939][ T7704] dvmrp0: entered promiscuous mode [ 181.100441][ T7704] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 181.150003][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880305eb400: rx timeout, send abort [ 181.166913][ T1034] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.197757][ T1034] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 181.218058][ T1034] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.253783][ T7739] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.271940][ T1034] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 181.371201][ T1034] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.406342][ T1034] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 181.498878][ T7746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.663920][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880305eb400: abort rx timeout. Force session deactivation [ 181.854026][ T7763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.511'. [ 182.233546][ T7776] netlink: 20 bytes leftover after parsing attributes in process `syz.1.516'. [ 182.251817][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.516'. [ 182.261171][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'. [ 182.481567][ T7725] IPVS: starting estimator thread 0... [ 182.617705][ T7787] IPVS: using max 24 ests per chain, 57600 per kthread [ 182.917126][ T7804] x_tables: duplicate underflow at hook 1 [ 182.994009][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'. [ 183.462989][ T7819] bridge0: port 3(ipvlan2) entered blocking state [ 183.472228][ T7819] bridge0: port 3(ipvlan2) entered disabled state [ 183.481262][ T7819] ipvlan2: entered allmulticast mode [ 183.502477][ T7819] bridge0: entered allmulticast mode [ 183.536757][ T7819] ipvlan2: left allmulticast mode [ 183.553897][ T7819] bridge0: left allmulticast mode [ 183.973324][ T7836] netlink: 27 bytes leftover after parsing attributes in process `syz.3.532'. [ 184.310010][ T7845] netlink: 32 bytes leftover after parsing attributes in process `syz.0.534'. [ 184.666329][ T7852] Driver unsupported XDP return value 0 on prog (id 129) dev N/A, expect packet loss! [ 184.829995][ T7860] netlink: 'syz.3.540': attribute type 18 has an invalid length. [ 185.132932][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.545'. [ 185.158620][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.545'. [ 185.168861][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.545'. [ 186.418439][ T7932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.454554][ T7933] xt_TCPMSS: Only works on TCP SYN packets [ 187.069649][ T7968] netlink: 'syz.4.569': attribute type 16 has an invalid length. [ 187.082781][ T7968] __nla_validate_parse: 12 callbacks suppressed [ 187.082808][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.569'. [ 187.210966][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.568'. [ 187.706721][ T7994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.575'. [ 188.124705][ T8005] netlink: 'syz.4.579': attribute type 1 has an invalid length. [ 188.153333][ T8005] netlink: 'syz.4.579': attribute type 4 has an invalid length. [ 188.171130][ T8008] netlink: 120 bytes leftover after parsing attributes in process `syz.0.578'. [ 188.213470][ T8005] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.579'. [ 188.245122][ T8008] netlink: 'syz.0.578': attribute type 1 has an invalid length. [ 188.260828][ T8008] netlink: 64 bytes leftover after parsing attributes in process `syz.0.578'. [ 188.280090][ T8015] : renamed from hsr0 (while UP) [ 188.706731][ T8019] nftables ruleset with unbound chain [ 188.782286][ T8031] IPv6: NLM_F_REPLACE set, but no existing node found! [ 189.009337][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.587'. [ 189.072689][ T8041] netlink: 24 bytes leftover after parsing attributes in process `syz.3.588'. [ 189.330980][ T8051] netlink: 40 bytes leftover after parsing attributes in process `syz.3.591'. [ 189.407338][ T8054] netlink: 40 bytes leftover after parsing attributes in process `syz.3.591'. [ 189.588006][ T8001] netlink: 'syz.2.577': attribute type 1 has an invalid length. [ 189.637114][ T8058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.759168][ T8001] openvswitch: netlink: Message has 536 unknown bytes. [ 189.794055][ T8001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.923500][ T8058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.225100][ T8086] syz_tun: entered allmulticast mode [ 190.649217][ T8081] syz_tun: left allmulticast mode [ 190.953348][ T8106] netlink: 'syz.2.601': attribute type 1 has an invalid length. [ 190.954150][ T8107] netlink: 'syz.2.601': attribute type 1 has an invalid length. [ 191.024957][ T8098] netlink: 'syz.1.600': attribute type 1 has an invalid length. [ 192.205024][ T8153] bond2 (unregistering): Released all slaves [ 192.332019][ T8157] sit0: entered promiscuous mode [ 192.380737][ T8157] netlink: 'syz.1.613': attribute type 1 has an invalid length. [ 192.427812][ T8157] __nla_validate_parse: 13 callbacks suppressed [ 192.427832][ T8157] netlink: 1 bytes leftover after parsing attributes in process `syz.1.613'. [ 192.604432][ T8171] netlink: 'syz.0.615': attribute type 3 has an invalid length. [ 192.709846][ T8161] bond2: option min_links: invalid value (18446744073709551614) [ 192.747943][ T8161] bond2: option min_links: allowed values 0 - 2147483647 [ 192.778525][ T8161] bond2 (unregistering): Released all slaves [ 192.891414][ T8169] 8021q: VLANs not supported on gre0 [ 192.910283][ T8184] tunl0 speed is unknown, defaulting to 1000 [ 192.963137][ T8184] tunl0 speed is unknown, defaulting to 1000 [ 193.004208][ T8184] tunl0 speed is unknown, defaulting to 1000 [ 193.423486][ T8191] netlink: 20 bytes leftover after parsing attributes in process `syz.1.619'. [ 193.496573][ T8202] netlink: 'syz.4.623': attribute type 21 has an invalid length. [ 193.534670][ T8202] netlink: 156 bytes leftover after parsing attributes in process `syz.4.623'. [ 193.599588][ T8202] netlink: 'syz.4.623': attribute type 21 has an invalid length. [ 193.609939][ T8202] netlink: 156 bytes leftover after parsing attributes in process `syz.4.623'. [ 193.623752][ T8202] netlink: 'syz.4.623': attribute type 21 has an invalid length. [ 193.645337][ T8202] netlink: 156 bytes leftover after parsing attributes in process `syz.4.623'. [ 193.704601][ T8202] netlink: 'syz.4.623': attribute type 21 has an invalid length. [ 193.775226][ T8202] netlink: 156 bytes leftover after parsing attributes in process `syz.4.623'. [ 193.828418][ T8202] netlink: 'syz.4.623': attribute type 21 has an invalid length. [ 193.897133][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.624'. [ 193.914863][ T8202] netlink: 156 bytes leftover after parsing attributes in process `syz.4.623'. [ 194.017040][ T8212] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 194.046017][ T8202] netlink: 156 bytes leftover after parsing attributes in process `syz.4.623'. [ 194.120587][ T8202] netlink: 156 bytes leftover after parsing attributes in process `syz.4.623'. [ 194.372653][ T5876] udevd[5876]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 194.389388][ T8226] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 194.409213][ T8184] infiniband syz2: set down [ 194.416350][ T8184] infiniband syz2: added tunl0 [ 194.478724][ T6754] udevd[6754]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 194.520714][ T5886] tunl0 speed is unknown, defaulting to 1000 [ 194.613003][ T8184] RDS/IB: syz2: added [ 194.620040][ T8184] smc: adding ib device syz2 with port count 1 [ 194.630764][ T5941] tunl0 speed is unknown, defaulting to 1000 [ 194.645821][ T8184] smc: ib device syz2 port 1 has no pnetid [ 194.686829][ T8184] tunl0 speed is unknown, defaulting to 1000 [ 196.296216][ T8184] tunl0 speed is unknown, defaulting to 1000 [ 196.769668][ T8299] netem: change failed [ 196.850224][ T8299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.317458][ T8184] tunl0 speed is unknown, defaulting to 1000 [ 197.681283][ T8326] __nla_validate_parse: 37 callbacks suppressed [ 197.681304][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.656'. [ 198.116049][ T8184] tunl0 speed is unknown, defaulting to 1000 [ 198.647392][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.664'. [ 198.869715][ T8363] xt_hashlimit: size too large, truncated to 1048576 [ 199.050090][ T8184] tunl0 speed is unknown, defaulting to 1000 [ 199.584527][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.673'. [ 200.182267][ T8403] tipc: Enabled bearer , priority 0 [ 200.212368][ T8403] syzkaller0: entered promiscuous mode [ 200.247772][ T8403] syzkaller0: entered allmulticast mode [ 200.298501][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.306179][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.329573][ T8403] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 200.372411][ T8409] netlink: 48 bytes leftover after parsing attributes in process `syz.4.679'. [ 200.429078][ T8409] Cannot find add_set index 2 as target [ 200.439173][ T8403] tipc: Resetting bearer [ 200.446513][ T8403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.488120][ T8409] xt_policy: output policy not valid in PREROUTING and INPUT [ 200.560824][ T8412] bond0: entered promiscuous mode [ 200.575277][ T8412] bond_slave_0: entered promiscuous mode [ 200.586854][ T8412] bond_slave_1: entered promiscuous mode [ 200.606780][ T8412] batadv0: entered promiscuous mode [ 200.649844][ T8412] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 200.680892][ T8412] bond0: left promiscuous mode [ 200.688330][ T8412] bond_slave_0: left promiscuous mode [ 200.697018][ T8412] bond_slave_1: left promiscuous mode [ 200.739288][ T8412] batadv0: left promiscuous mode [ 200.876419][ T8402] tipc: Resetting bearer [ 200.979958][ T8402] tipc: Disabling bearer [ 201.136001][ T8421] validate_nla: 32 callbacks suppressed [ 201.136024][ T8421] netlink: 'syz.3.684': attribute type 83 has an invalid length. [ 201.275042][ T8442] netlink: 'syz.1.688': attribute type 1 has an invalid length. [ 201.311741][ T8442] netlink: 'syz.1.688': attribute type 1 has an invalid length. [ 201.667022][ T8453] netlink: 830 bytes leftover after parsing attributes in process `syz.0.691'. [ 201.695541][ T8457] syzkaller1: entered promiscuous mode [ 201.779850][ T8457] syzkaller1: entered allmulticast mode [ 202.230567][ T8484] wlan0 speed is unknown, defaulting to 1000 [ 202.293811][ T8485] siw: device registration error -23 [ 202.324260][ T8484] wlan0 speed is unknown, defaulting to 1000 [ 202.359404][ T8484] wlan0 speed is unknown, defaulting to 1000 [ 202.433190][ T8484] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 202.520840][ T8484] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 202.720973][ T8484] wlan0 speed is unknown, defaulting to 1000 [ 202.735169][ T8500] xt_l2tp: missing protocol rule (udp|l2tpip) [ 202.780643][ T8484] wlan0 speed is unknown, defaulting to 1000 [ 202.829069][ T8484] wlan0 speed is unknown, defaulting to 1000 [ 202.861144][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 202.876953][ T8484] wlan0 speed is unknown, defaulting to 1000 [ 202.889916][ T8484] wlan0 speed is unknown, defaulting to 1000 [ 202.950649][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.707'. [ 203.006943][ T8507] gtp1: entered promiscuous mode [ 203.015309][ T8507] gtp1: entered allmulticast mode [ 203.075861][ T8517] IPVS: set_ctl: invalid protocol: 115 172.30.1.3:20001 [ 203.421972][ T8506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.444807][ T8506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.459320][ T8506] bond0 (unregistering): Released all slaves [ 203.494922][ T8513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.710'. [ 203.930768][ T8549] Cannot find set identified by id 0 to match [ 203.939933][ T8549] netlink: 'syz.1.717': attribute type 5 has an invalid length. [ 203.990740][ T8551] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 204.182792][ T8555] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 204.232633][ T8555] bond2 (unregistering): Released all slaves [ 204.248619][ T8562] netlink: 'syz.3.721': attribute type 4 has an invalid length. [ 204.300174][ T8566] netlink: 'syz.3.721': attribute type 4 has an invalid length. [ 204.322513][ T8548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.718'. [ 204.472407][ T8576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.721'. [ 204.526693][ T8565] 8021q: adding VLAN 0 to HW filter on device bond2 [ 204.584458][ T8571] team0: No ports can be present during mode change [ 204.954797][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'. [ 205.161562][ T8597] bridge_slave_0: left allmulticast mode [ 205.228276][ T8597] bridge_slave_0: left promiscuous mode [ 205.309452][ T8597] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.421252][ T8619] netlink: 68 bytes leftover after parsing attributes in process `syz.1.732'. [ 205.440445][ T8597] bridge_slave_1: left allmulticast mode [ 205.471664][ T8597] bridge_slave_1: left promiscuous mode [ 205.495856][ T8597] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.552438][ T8597] bond0: (slave bond_slave_0): Releasing backup interface [ 205.605664][ T8597] bond0: (slave bond_slave_1): Releasing backup interface [ 205.666077][ T8597] team0: Port device team_slave_0 removed [ 205.717451][ T8597] team0: Port device team_slave_1 removed [ 205.763236][ T8597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.773988][ T8597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.785907][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.735'. [ 205.793199][ T8597] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 206.039921][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 206.221313][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.737'. [ 206.374922][ T8654] veth0: entered promiscuous mode [ 206.405646][ T8653] veth0: left promiscuous mode [ 206.677831][ T5841] Bluetooth: hci2: command 0x0401 tx timeout [ 206.686219][ T5827] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 206.776818][ T8666] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 206.834687][ T8665] No such timeout policy "syz0" [ 206.980599][ T8685] netlink: 'syz.1.748': attribute type 10 has an invalid length. [ 207.142111][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.749'. [ 207.616759][ T8707] netlink: 'syz.3.754': attribute type 1 has an invalid length. [ 207.746705][ T8713] netlink: 'syz.0.755': attribute type 39 has an invalid length. [ 207.784234][ T8714] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 207.891878][ T8709] 8021q: VLANs not supported on vcan0 [ 208.051772][ T8724] netlink: 'syz.4.759': attribute type 4 has an invalid length. [ 208.827070][ T8753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.768'. [ 208.858989][ T8753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.768'. [ 209.206644][ T8769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.771'. [ 209.275354][ T8772] netlink: 28 bytes leftover after parsing attributes in process `syz.0.772'. [ 209.519014][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'. [ 210.022476][ T8784] Set syz1 is full, maxelem 6117 reached [ 210.290437][ T8799] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 210.343015][ T8799] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 210.365009][ T8799] gretap1: entered promiscuous mode [ 210.372744][ T8799] gretap1: entered allmulticast mode [ 210.452550][ T8803] syzkaller1: entered promiscuous mode [ 210.469139][ T8803] syzkaller1: entered allmulticast mode [ 210.532349][ T8805] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 211.237946][ T8843] netlink: 32 bytes leftover after parsing attributes in process `syz.4.790'. [ 211.277378][ T8847] netlink: 256 bytes leftover after parsing attributes in process `syz.0.793'. [ 211.357085][ T8851] netlink: 'syz.2.792': attribute type 33 has an invalid length. [ 211.408765][ T8851] netlink: 152 bytes leftover after parsing attributes in process `syz.2.792'. [ 211.492048][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.792'. [ 211.591488][ T8861] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.599567][ T8861] IPv6: NLM_F_CREATE should be set when creating new route [ 211.607514][ T8861] IPv6: NLM_F_CREATE should be set when creating new route [ 211.617455][ T8861] IPv6: NLM_F_CREATE should be set when creating new route [ 211.656834][ T8862] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.905162][ T8872] netlink: 'syz.4.798': attribute type 5 has an invalid length. [ 212.048987][ T8876] netlink: 'syz.4.798': attribute type 1 has an invalid length. [ 212.128803][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.798'. [ 213.211822][ T8923] TCP: TCP_TX_DELAY enabled [ 213.733009][ T8940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.380567][ T8969] xt_hashlimit: overflow, rate too high: 0 [ 214.644672][ T8967] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.726205][ T8985] __nla_validate_parse: 2 callbacks suppressed [ 214.726228][ T8985] netlink: 71 bytes leftover after parsing attributes in process `syz.1.824'. [ 214.895330][ T8991] netlink: 'syz.0.825': attribute type 2 has an invalid length. [ 214.941155][ T8990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.825'. [ 215.010259][ T8991] netlink: 'syz.0.825': attribute type 2 has an invalid length. [ 215.033923][ T8995] netlink: 'syz.4.826': attribute type 24 has an invalid length. [ 215.077305][ T8991] netlink: 'syz.0.825': attribute type 2 has an invalid length. [ 215.097430][ T8991] netlink: 'syz.0.825': attribute type 2 has an invalid length. [ 215.111734][ T8991] netlink: 'syz.0.825': attribute type 1 has an invalid length. [ 215.191619][ T8967] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.229903][ T9005] netlink: 152 bytes leftover after parsing attributes in process `syz.1.828'. [ 215.287266][ T9003] netlink: 32 bytes leftover after parsing attributes in process `syz.3.827'. [ 215.489665][ T8967] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.728741][ T8967] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.952753][ T9023] netlink: 'syz.0.833': attribute type 1 has an invalid length. [ 216.003094][ T9023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.833'. [ 216.269511][ T80] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.330166][ T9034] netlink: 120 bytes leftover after parsing attributes in process `syz.3.836'. [ 216.370347][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.390585][ T9034] netlink: 'syz.3.836': attribute type 1 has an invalid length. [ 216.454738][ T9034] netlink: 64 bytes leftover after parsing attributes in process `syz.3.836'. [ 216.506997][ T6008] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.556626][ T6008] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.808386][ T9053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.839'. [ 217.270088][ T9] IPVS: starting estimator thread 0... [ 217.282178][ T9073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.306648][ T9071] netlink: 256 bytes leftover after parsing attributes in process `syz.4.847'. [ 217.414938][ T9074] IPVS: using max 22 ests per chain, 52800 per kthread [ 217.475312][ T9076] netlink: 40 bytes leftover after parsing attributes in process `syz.1.848'. [ 217.581309][ T9081] Cannot find add_set index 2 as target [ 217.599485][ T9076] xt_hashlimit: size too large, truncated to 1048576 [ 218.316811][ T9109] IPVS: ip_vs_add_dest(): server weight less than zero [ 218.326938][ T5907] IPVS: starting estimator thread 0... [ 218.368479][ T9109] netlink: 'syz.0.858': attribute type 1 has an invalid length. [ 218.437811][ T9110] IPVS: using max 30 ests per chain, 72000 per kthread [ 219.299360][ T9141] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 219.353383][ T9142] : renamed from hsr0 [ 220.048231][ T9166] __nla_validate_parse: 2 callbacks suppressed [ 220.048259][ T9166] netlink: 104 bytes leftover after parsing attributes in process `syz.4.875'. [ 220.136451][ T9171] netlink: 'syz.2.877': attribute type 1 has an invalid length. [ 220.299258][ T9182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.319209][ T9183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.877'. [ 220.379413][ T9181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.396394][ T9185] netlink: 14 bytes leftover after parsing attributes in process `syz.1.879'. [ 220.426528][ T9171] bond3: entered promiscuous mode [ 220.433354][ T9171] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.472829][ T9183] bond3: entered allmulticast mode [ 220.581376][ T9171] bond3: (slave bridge2): making interface the new active one [ 220.625994][ T9171] bridge2: entered promiscuous mode [ 220.648949][ T9193] netlink: 44 bytes leftover after parsing attributes in process `syz.0.881'. [ 220.649523][ T9171] bridge2: entered allmulticast mode [ 220.708503][ T9171] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 220.750466][ T9200] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 220.937828][ T9206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.886'. [ 221.001624][ T9206] netlink: 'syz.2.886': attribute type 1 has an invalid length. [ 221.499228][ T9227] tipc: Enabling of bearer rejected, failed to enable media [ 221.854471][ T9245] netlink: 'syz.2.897': attribute type 18 has an invalid length. [ 222.226452][ T9257] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 222.290871][ T9260] netlink: 24 bytes leftover after parsing attributes in process `syz.1.901'. [ 222.499485][ T9265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.903'. [ 222.547961][ T9265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.903'. [ 222.671669][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.905'. [ 222.711060][ T9273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.904'. [ 222.842990][ T9273] 8021q: adding VLAN 0 to HW filter on device bond4 [ 222.975450][ T9276] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 223.032249][ T9273] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.190664][ T9273] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.269539][ T9292] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 223.309435][ T9273] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.474519][ T9273] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.724426][ T33] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.819427][ T4554] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.887172][ T60] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.006726][ T9312] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 224.023835][ T9312] bond2 (unregistering): Released all slaves [ 224.077146][ T9315] : entered promiscuous mode [ 224.090683][ T60] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.369985][ T9326] netlink: 'syz.2.925': attribute type 2 has an invalid length. [ 224.752673][ T9336] netlink: 'syz.4.926': attribute type 4 has an invalid length. [ 225.184377][ T9364] __nla_validate_parse: 10 callbacks suppressed [ 225.184407][ T9364] netlink: 52 bytes leftover after parsing attributes in process `syz.0.930'. [ 225.554930][ T9369] netlink: 'syz.1.933': attribute type 4 has an invalid length. [ 226.336880][ T9398] netlink: 'syz.2.943': attribute type 2 has an invalid length. [ 226.367812][ T9398] netlink: 36 bytes leftover after parsing attributes in process `syz.2.943'. [ 226.379782][ T9395] IPVS: Error connecting to the multicast addr [ 226.391051][ T9399] netlink: 'syz.2.943': attribute type 10 has an invalid length. [ 226.493910][ T9399] netlink: 40 bytes leftover after parsing attributes in process `syz.2.943'. [ 226.629400][ T9399] team0: Port device geneve0 added [ 226.651126][ T9410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.781533][ T9412] netlink: 'syz.3.947': attribute type 1 has an invalid length. [ 226.926781][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.947'. [ 227.700537][ T9450] netlink: 'syz.4.955': attribute type 12 has an invalid length. [ 227.986751][ T9443] delete_channel: no stack [ 228.048806][ T9460] netlink: 212304 bytes leftover after parsing attributes in process `syz.2.957'. [ 228.148324][ T9460] openvswitch: netlink: Message has 6 unknown bytes. [ 228.387509][ T9465] netlink: 20 bytes leftover after parsing attributes in process `syz.4.959'. [ 228.528881][ T9469] netlink: 40 bytes leftover after parsing attributes in process `syz.4.959'. [ 228.568170][ T9473] netlink: 48 bytes leftover after parsing attributes in process `syz.2.962'. [ 228.667740][ T9473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.759580][ T9478] v: renamed from vlan0 (while UP) [ 229.071086][ T9493] syz_tun: entered allmulticast mode [ 229.100097][ T9489] syzkaller0: entered promiscuous mode [ 229.122989][ T9489] syzkaller0: entered allmulticast mode [ 229.193397][ T9488] syz_tun: left allmulticast mode [ 229.491880][ T9506] netlink: 120 bytes leftover after parsing attributes in process `syz.1.970'. [ 229.558039][ T9506] netlink: 'syz.1.970': attribute type 1 has an invalid length. [ 229.608609][ T9506] netlink: 64 bytes leftover after parsing attributes in process `syz.1.970'. [ 229.739241][ T9513] C: renamed from team_slave_0 [ 229.751550][ T9513] netlink: 'syz.2.974': attribute type 1 has an invalid length. [ 229.784099][ T9513] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 229.810107][ T9518] IPVS: Error connecting to the multicast addr [ 229.828370][ T9519] dvmrp0: left promiscuous mode [ 230.113352][ T9519] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.122306][ T9519] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.337944][ T9541] __nla_validate_parse: 3 callbacks suppressed [ 230.337967][ T9541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.977'. [ 230.870869][ T9519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.181215][ T9537] v: renamed from vlan0 (while UP) [ 231.364277][ T3521] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.400715][ T9557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.422248][ T3521] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.466405][ T3521] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.510068][ T9557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.624291][ T3521] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.667428][ T9566] netlink: 28 bytes leftover after parsing attributes in process `syz.3.983'. [ 231.752338][ T7733] IPVS: starting estimator thread 0... [ 231.859098][ T9573] IPVS: using max 23 ests per chain, 55200 per kthread [ 231.911476][ T9575] netlink: 'syz.1.985': attribute type 3 has an invalid length. [ 231.981108][ T9575] netlink: 'syz.1.985': attribute type 1 has an invalid length. [ 232.094670][ T9575] 8021q: adding VLAN 0 to HW filter on device bond2 [ 232.186049][ T9577] bond2: (slave veth7): Enslaving as an active interface with a down link [ 232.235369][ T9589] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 232.270061][ T9588] netlink: 24 bytes leftover after parsing attributes in process `syz.4.989'. [ 232.607989][ T9606] netlink: 300 bytes leftover after parsing attributes in process `syz.1.993'. [ 232.791638][ T9580] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.260309][ T9623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.997'. [ 233.598243][ T9631] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1001'. [ 233.617241][ T9628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1000'. [ 233.628880][ T9628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1000'. [ 233.670938][ T9631] vlan3: entered allmulticast mode [ 233.698048][ T9631] gretap0: entered allmulticast mode [ 233.790194][ T9634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'. [ 233.818345][ T9634] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1002'. [ 234.504533][ T9682] veth0: entered promiscuous mode [ 234.565151][ T9681] veth0: left promiscuous mode [ 234.646970][ T9679] dvmrp6: entered allmulticast mode [ 235.122176][ T9694] syzkaller0: entered promiscuous mode [ 235.149885][ T9694] syzkaller0: entered allmulticast mode [ 235.535635][ T9728] netlink: 'syz.1.1024': attribute type 11 has an invalid length. [ 235.603537][ T9733] netlink: 'syz.3.1025': attribute type 10 has an invalid length. [ 235.685503][ T9735] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 235.923457][ T9746] netlink: 'syz.1.1028': attribute type 10 has an invalid length. [ 237.966731][ T9733] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 238.335971][ T9763] __nla_validate_parse: 6 callbacks suppressed [ 238.335995][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1034'. [ 238.392313][ T9764] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1034'. [ 238.968505][ T9790] netlink: 'syz.1.1044': attribute type 4 has an invalid length. [ 239.253863][ T9801] syzkaller0: entered promiscuous mode [ 239.272089][ T9801] syzkaller0: entered allmulticast mode [ 239.315050][ T9801] tipc: Enabled bearer , priority 0 [ 239.378155][ T9799] tipc: Resetting bearer [ 239.520304][ T9799] tipc: Disabling bearer [ 240.365679][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'. [ 240.448728][ T9849] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1062'. [ 240.490365][ T9853] netlink: 'syz.0.1063': attribute type 39 has an invalid length. [ 240.567425][ T9853] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1063'. [ 241.067795][ T9874] netlink: 'syz.0.1068': attribute type 1 has an invalid length. [ 241.118357][ T9874] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1068'. [ 241.577269][ T9897] xt_hashlimit: max too large, truncated to 1048576 [ 241.739186][ T9909] netlink: 'syz.3.1078': attribute type 83 has an invalid length. [ 241.940967][ T9912] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1079'. [ 241.984113][ T9912] block nbd0: not configured, cannot reconfigure [ 242.122926][ T9916] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1082'. [ 242.276879][ T9928] set match dimension is over the limit! [ 242.304532][ T9928] syzkaller1: entered promiscuous mode [ 242.313474][ T9928] syzkaller1: entered allmulticast mode [ 242.744301][ T9948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1090'. [ 242.769371][ T9948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1090'. [ 242.781711][ T9950] tipc: Enabled bearer , priority 0 [ 242.915529][ T9950] syzkaller0: entered promiscuous mode [ 242.927074][ T9950] syzkaller0: entered allmulticast mode [ 243.011338][ T9950] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 243.322583][ T5839] Bluetooth: hci2: command 0x0401 tx timeout [ 243.322688][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 243.331095][ T5148] Bluetooth: hci3: command 0x0406 tx timeout [ 243.485140][ T9983] openvswitch: netlink: IP tunnel dst address not specified [ 245.299386][ T9964] tipc: Resetting bearer [ 245.367281][ T9983] netlink: 'syz.2.1100': attribute type 2 has an invalid length. [ 245.400186][ T9949] tipc: Resetting bearer [ 245.545911][ T9949] tipc: Disabling bearer [ 245.561328][ T9992] __nla_validate_parse: 1 callbacks suppressed [ 245.561349][ T9992] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1103'. [ 245.877039][ T9992] bond4 (unregistering): Released all slaves [ 246.456723][ T5198] udevd[5198]: worker [6754] terminated by signal 33 (Unknown signal 33) [ 246.495497][ T5198] udevd[5198]: worker [6754] failed while handling '/devices/virtual/block/loop1' [ 246.549800][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1113'. [ 246.642231][T10043] GUP no longer grows the stack in syz.4.1115 (10043): 200000003000-20000000a000 (200000001000) [ 246.676266][T10043] CPU: 1 UID: 0 PID: 10043 Comm: syz.4.1115 Not tainted syzkaller #0 PREEMPT(full) [ 246.676302][T10043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.676325][T10043] Call Trace: [ 246.676337][T10043] [ 246.676347][T10043] dump_stack_lvl+0x189/0x250 [ 246.676396][T10043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.676425][T10043] ? __pfx__printk+0x10/0x10 [ 246.676453][T10043] ? find_vma+0xe7/0x160 [ 246.676501][T10043] __get_user_pages+0x2465/0x29f0 [ 246.676553][T10043] ? __gup_longterm_locked+0xc63/0x1660 [ 246.676582][T10043] ? down_read_killable+0x1bc/0x350 [ 246.676617][T10043] __gup_longterm_locked+0xde4/0x1660 [ 246.676655][T10043] ? try_grab_folio_fast+0x1bf/0x6a0 [ 246.676695][T10043] ? gup_fast_fallback+0x1b82/0x22d0 [ 246.676728][T10043] gup_fast_fallback+0x1d6b/0x22d0 [ 246.676794][T10043] ? __pfx_gup_fast_fallback+0x10/0x10 [ 246.676821][T10043] ? __mutex_lock+0x335/0x1350 [ 246.676844][T10043] ? __cgroup_account_cputime+0xe5/0x120 [ 246.676873][T10043] ? is_valid_gup_args+0x11f/0x200 [ 246.676906][T10043] ? get_user_pages_fast+0x4d/0xb0 [ 246.676939][T10043] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 246.676976][T10043] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 246.677007][T10043] ? wait_for_space+0x248/0x2d0 [ 246.677038][T10043] iov_iter_get_pages2+0x5e/0xa0 [ 246.677067][T10043] __se_sys_vmsplice+0x548/0x10d0 [ 246.677130][T10043] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 246.677659][T10043] ? __pfx_futex_wake+0x10/0x10 [ 246.677754][T10043] ? do_syscall_64+0xbe/0xf80 [ 246.677784][T10043] do_syscall_64+0xfa/0xf80 [ 246.677808][T10043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.677829][T10043] ? clear_bhb_loop+0x60/0xb0 [ 246.677857][T10043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.677892][T10043] RIP: 0033:0x7f5ed7b8f749 [ 246.677920][T10043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.677938][T10043] RSP: 002b:00007f5ed8ae1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 246.677967][T10043] RAX: ffffffffffffffda RBX: 00007f5ed7de6090 RCX: 00007f5ed7b8f749 [ 246.677983][T10043] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 246.677997][T10043] RBP: 00007f5ed7c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 246.678009][T10043] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 246.678021][T10043] R13: 00007f5ed7de6128 R14: 00007f5ed7de6090 R15: 00007ffc8eacd488 [ 246.678058][T10043] [ 247.140639][T10050] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 247.161968][T10050] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 247.225919][T10055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.241144][T10055] bond0: (slave caif0): The slave device specified does not support setting the MAC address [ 247.276910][T10055] bond0: (slave caif0): Error -95 calling set_mac_address [ 247.341692][T10060] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.1121'. [ 247.363108][T10060] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.1121'. [ 247.557756][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1124'. [ 247.571790][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1124'. [ 247.589322][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1124'. [ 248.059580][T10098] delete_channel: no stack [ 248.230414][T10104] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 248.951173][T10130] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1139'. [ 249.004563][T10129] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1139'. [ 249.544182][T10156] tipc: Enabling of bearer rejected, failed to enable media [ 249.843360][T10168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1147'. [ 250.044833][T10176] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 251.489027][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1169'. [ 251.601445][T10249] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1171'. [ 251.652002][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'. [ 251.666110][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1170'. [ 251.752336][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1174'. [ 251.986205][T10268] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 252.487175][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1184'. [ 253.327192][T10318] bond3: entered promiscuous mode [ 253.338865][T10318] bond3: entered allmulticast mode [ 253.346593][T10318] 8021q: adding VLAN 0 to HW filter on device bond3 [ 253.386179][T10322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1197'. [ 253.484726][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'. [ 253.587879][T10330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1199'. [ 253.619425][T10330] netlink: 'syz.0.1199': attribute type 5 has an invalid length. [ 253.670055][T10331] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1199'. [ 253.747774][T10341] netlink: 'syz.1.1202': attribute type 2 has an invalid length. [ 254.334113][T10366] syzkaller1: entered promiscuous mode [ 254.347805][T10366] syzkaller1: entered allmulticast mode [ 254.421056][T10368] bond5: entered allmulticast mode [ 359.487553][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 359.494602][ C1] rcu: 0-...!: (1 GPs behind) idle=df7c/1/0x4000000000000000 softirq=35591/35592 fqs=1 [ 359.505418][ C1] rcu: (detected by 1, t=10506 jiffies, g=36633, q=301 ncpus=2) [ 359.513388][ C1] Sending NMI from CPU 1 to CPUs 0: [ 359.513425][ C0] NMI backtrace for cpu 0 [ 359.513450][ C0] CPU: 0 UID: 0 PID: 10366 Comm: syz.1.1210 Not tainted syzkaller #0 PREEMPT(full) [ 359.513480][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 359.513506][ C0] RIP: 0010:__lock_acquire+0xa55/0x2cf0 [ 359.513538][ C0] Code: c7 c6 17 29 87 8d 67 48 0f b9 3a 90 31 c0 48 83 78 40 00 0f 84 5f 1d 00 00 41 8b 45 20 25 ff 1f 00 00 48 0f a3 05 2b e0 e7 11 <73> 10 48 69 c0 c8 00 00 00 48 8d 80 b0 63 27 93 eb 32 83 3d f2 6f [ 359.513553][ C0] RSP: 0018:ffffc90000007ab8 EFLAGS: 00000007 [ 359.513569][ C0] RAX: 000000000000006f RBX: 000000005ff7dd64 RCX: 00000000001c6bfd [ 359.513581][ C0] RDX: 000000006c734efe RSI: 00000000335ba412 RDI: ffff88801b700000 [ 359.513594][ C0] RBP: fb268dbe00000000 R08: ffffffff81af1af2 R09: ffff8880b8628258 [ 359.513607][ C0] R10: dffffc0000000000 R11: fffffbfff1f0440f R12: ffff88801b700b80 [ 359.513620][ C0] R13: ffff88801b700b80 R14: ffff88801b700000 R15: 0000000000000002 [ 359.513633][ C0] FS: 00007f7b5a2d26c0(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 359.513648][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 359.513660][ C0] CR2: 00007fddbd7e7dac CR3: 00000000797b2000 CR4: 00000000003526f0 [ 359.513683][ C0] Call Trace: [ 359.513692][ C0] [ 359.513710][ C0] ? __netif_schedule+0xe5/0x2e0 [ 359.513742][ C0] ? __hrtimer_run_queues+0x5e2/0xc30 [ 359.513764][ C0] lock_acquire+0x117/0x340 [ 359.513781][ C0] ? __hrtimer_run_queues+0x5e2/0xc30 [ 359.513804][ C0] ? advance_sched+0x9f8/0xc90 [ 359.513828][ C0] ? advance_sched+0x9f8/0xc90 [ 359.513850][ C0] ? advance_sched+0x9f8/0xc90 [ 359.513881][ C0] _raw_spin_lock_irq+0xa2/0xf0 [ 359.513915][ C0] ? __hrtimer_run_queues+0x5e2/0xc30 [ 359.513937][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 359.513968][ C0] __hrtimer_run_queues+0x5e2/0xc30 [ 359.513990][ C0] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 359.514017][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 359.514039][ C0] ? read_tsc+0x9/0x20 [ 359.514068][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 359.514104][ C0] __sysvec_apic_timer_interrupt+0x102/0x3e0 [ 359.514126][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 359.514145][ C0] [ 359.514151][ C0] [ 359.514157][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 359.514176][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 359.514204][ C0] Code: 74 05 e8 7b 2a 6b f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 53 ae 32 f6 65 8b 05 ec 50 20 07 85 c0 74 40 48 c7 04 24 0e 36 [ 359.514217][ C0] RSP: 0018:ffffc900031d6e20 EFLAGS: 00000206 [ 359.514232][ C0] RAX: cc850147b5b94d00 RBX: 0000000000000a02 RCX: cc850147b5b94d00 [ 359.514249][ C0] RDX: 0000000000000002 RSI: ffffffff8d7925e3 RDI: 0000000000000001 [ 359.514261][ C0] RBP: ffffc900031d6eb0 R08: ffffffff8f822077 R09: 1ffffffff1f0440e [ 359.514273][ C0] R10: dffffc0000000000 R11: fffffbfff1f0440f R12: dffffc0000000000 [ 359.514286][ C0] R13: dffffc0000000000 R14: ffff88803081e2a8 R15: 1ffff9200063adc4 [ 359.514309][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 359.514342][ C0] taprio_change+0x302c/0x3c40 [ 359.514375][ C0] ? __pfx_taprio_change+0x10/0x10 [ 359.514399][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 359.514437][ C0] taprio_init+0x959/0xbd0 [ 359.514464][ C0] ? __pfx_taprio_init+0x10/0x10 [ 359.514486][ C0] ? lockdep_rtnl_is_held+0x26/0x40 [ 359.514517][ C0] ? qdisc_lookup+0x36d/0x6d0 [ 359.514541][ C0] ? __pfx_taprio_init+0x10/0x10 [ 359.514563][ C0] qdisc_create+0x7ac/0xea0 [ 359.514583][ C0] tc_modify_qdisc+0x1547/0x2020 [ 359.514616][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 359.514662][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 359.514688][ C0] rtnetlink_rcv_msg+0x77c/0xb70 [ 359.514709][ C0] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 359.514727][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 359.514745][ C0] ? ref_tracker_free+0x63a/0x7d0 [ 359.514761][ C0] ? __asan_memcpy+0x40/0x70 [ 359.514777][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 359.514799][ C0] netlink_rcv_skb+0x208/0x470 [ 359.514830][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 359.514853][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 359.514880][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 359.514905][ C0] netlink_unicast+0x82f/0x9e0 [ 359.514929][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 359.514949][ C0] ? netlink_sendmsg+0x642/0xb30 [ 359.514970][ C0] ? skb_put+0x11b/0x210 [ 359.514990][ C0] netlink_sendmsg+0x805/0xb30 [ 359.515017][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.515041][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 359.515065][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 359.515082][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.515105][ C0] __sock_sendmsg+0x21c/0x270 [ 359.515132][ C0] ____sys_sendmsg+0x505/0x820 [ 359.515155][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.515180][ C0] ? import_iovec+0x74/0xa0 [ 359.515203][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 359.515229][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.515254][ C0] ? futex_wake+0x4b2/0x560 [ 359.515289][ C0] ? __fget_files+0x2a/0x420 [ 359.515310][ C0] ? __fget_files+0x3a0/0x420 [ 359.515337][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 359.515359][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.515388][ C0] ? do_syscall_64+0xbe/0xf80 [ 359.515408][ C0] do_syscall_64+0xfa/0xf80 [ 359.515427][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.515443][ C0] ? clear_bhb_loop+0x60/0xb0 [ 359.515463][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.515480][ C0] RIP: 0033:0x7f7b5938f749 [ 359.515505][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.515519][ C0] RSP: 002b:00007f7b5a2d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.515536][ C0] RAX: ffffffffffffffda RBX: 00007f7b595e5fa0 RCX: 00007f7b5938f749 [ 359.515549][ C0] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000008 [ 359.515578][ C0] RBP: 00007f7b59413f91 R08: 0000000000000000 R09: 0000000000000000 [ 359.515590][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.515600][ C0] R13: 00007f7b595e6038 R14: 00007f7b595e5fa0 R15: 00007ffc7d74de38 [ 359.515622][ C0] [ 359.516429][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g36633 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 360.152734][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 360.162908][ C1] rcu: RCU grace-period kthread stack dump: [ 360.168909][ C1] task:rcu_preempt state:R running task stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 360.182660][ C1] Call Trace: [ 360.185970][ C1] [ 360.188938][ C1] __schedule+0x14bc/0x5000 [ 360.193510][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 360.198757][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 360.204703][ C1] ? __pfx___schedule+0x10/0x10 [ 360.209606][ C1] ? schedule+0x91/0x360 [ 360.214049][ C1] schedule+0x165/0x360 [ 360.218250][ C1] schedule_timeout+0x12b/0x270 [ 360.223145][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 360.228658][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 360.234602][ C1] ? __pfx_process_timeout+0x10/0x10 [ 360.239956][ C1] ? prepare_to_swait_event+0x341/0x380 [ 360.245652][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 360.250870][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 360.256813][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 360.262334][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 360.267851][ C1] ? finish_swait+0xcd/0x1f0 [ 360.272760][ C1] rcu_gp_kthread+0x99/0x390 [ 360.277402][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 360.282642][ C1] ? __kthread_parkme+0x7b/0x200 [ 360.287619][ C1] ? __kthread_parkme+0x1a1/0x200 [ 360.292779][ C1] kthread+0x711/0x8a0 [ 360.296893][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 360.302204][ C1] ? __pfx_kthread+0x10/0x10 [ 360.306840][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 360.312184][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 360.317595][ C1] ? __pfx_kthread+0x10/0x10 [ 360.322237][ C1] ret_from_fork+0x599/0xb30 [ 360.326955][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 360.332213][ C1] ? __switch_to_asm+0x39/0x70 [ 360.337283][ C1] ? __switch_to_asm+0x33/0x70 [ 360.342090][ C1] ? __pfx_kthread+0x10/0x10 [ 360.346819][ C1] ret_from_fork_asm+0x1a/0x30 [ 360.351842][ C1] [ 360.355003][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 360.361451][ C1] CPU: 1 UID: 0 PID: 3521 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 360.371036][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 360.381134][ C1] Workqueue: events_unbound toggle_allocation_gate [ 360.387788][ C1] RIP: 0010:smp_call_function_many_cond+0xccf/0x12b0 [ 360.394550][ C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 4a 9a 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 f5 95 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 d9 95 [ 360.414469][ C1] RSP: 0018:ffffc9000c627620 EFLAGS: 00000293 [ 360.420696][ C1] RAX: ffffffff81b61c77 RBX: 1ffff110170c856d RCX: ffff88803121bd00 [ 360.428796][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 360.436901][ C1] RBP: ffffc9000c6277a0 R08: ffffffff8f822077 R09: 1ffffffff1f0440e [ 360.444916][ C1] R10: dffffc0000000000 R11: fffffbfff1f0440f R12: ffff8880b8642b68 [ 360.452938][ C1] R13: dffffc0000000000 R14: ffff8880b873bb00 R15: 0000000000000000 [ 360.460944][ C1] FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 360.469912][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.476616][ C1] CR2: 00007f5ed89156c0 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 360.484727][ C1] Call Trace: [ 360.488092][ C1] [ 360.491094][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 360.496266][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 360.502655][ C1] ? kmem_cache_alloc_bulk_noprof+0xaa/0x720 [ 360.508699][ C1] ? __pfx___text_poke+0x10/0x10 [ 360.513781][ C1] ? rcu_is_watching+0x15/0xb0 [ 360.518614][ C1] ? trace_contention_end+0x39/0x100 [ 360.524125][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 360.529314][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 360.534519][ C1] smp_text_poke_batch_finish+0x5f9/0x1130 [ 360.540476][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 360.546693][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 360.551760][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 360.558053][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 360.564357][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 360.570833][ C1] static_key_enable_cpuslocked+0x128/0x240 [ 360.576975][ C1] static_key_enable+0x1a/0x20 [ 360.581981][ C1] toggle_allocation_gate+0xad/0x240 [ 360.588382][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 360.594333][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 360.600164][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 360.606166][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 360.612020][ C1] process_scheduled_works+0xad1/0x1770 [ 360.617640][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 360.623677][ C1] worker_thread+0x8a0/0xda0 [ 360.628396][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 360.634798][ C1] ? __kthread_parkme+0x7b/0x200 [ 360.639886][ C1] kthread+0x711/0x8a0 [ 360.644001][ C1] ? __pfx_worker_thread+0x10/0x10 [ 360.649155][ C1] ? __pfx_kthread+0x10/0x10 [ 360.653794][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 360.659213][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 360.664451][ C1] ? __pfx_kthread+0x10/0x10 [ 360.669083][ C1] ret_from_fork+0x599/0xb30 [ 360.673712][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 360.678864][ C1] ? __switch_to_asm+0x39/0x70 [ 360.683671][ C1] ? __switch_to_asm+0x33/0x70 [ 360.688478][ C1] ? __pfx_kthread+0x10/0x10 [ 360.693245][ C1] ret_from_fork_asm+0x1a/0x30 [ 360.698068][ C1]