last executing test programs: 40.331624789s ago: executing program 2 (id=4733): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000380)="6ebe3018046b2c626a05737446ffc208", 0x10) close(r4) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd29, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x1, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4801}, 0x4041080) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) accept4(r0, 0x0, 0x0, 0x0) 22.452803536s ago: executing program 2 (id=4738): r0 = socket$inet(0x2, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@rand_addr=0x64010100, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x20}}}}}, 0x0) 22.448302531s ago: executing program 2 (id=4742): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x10000000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000003f0009000000000000000000030000000400fd001500090008000000000000263a7f1f000000000000000000"], 0x30}}, 0x0) syz_emit_ethernet(0x55, &(0x7f0000000080)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "a70ddb", 0x0, 0x3a, 0x30d66df472e0f96c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@routing={0x3a, 0x0, 0x0, 0x6, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1c}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @ipv4={'\x00', '\xff\xff', @remote}]}, @hopopts={0x2f, 0x0, '\x00', [@pad1]}], "ff5c8117a0576a28506d0a4a67a62b6617f0069d3b544f27b0de32616ac8cf19fd229faab8432ff5adda3aacb4618fe92a8e39d8e9f88e1524c888a8c182d227f023749ec16ec75ab71fce44c4017aec37f24b5a34"}}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001d40), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r9, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r10], 0x24}}, 0x0) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, r7, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) close(r3) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20}}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000f921a6bc6f103c91bec682023900611078000000000063012200000000002f6970b3000000008f6a138c9e4eb32e71d7754e127d8d87525e8d57dc3c002fa721249c4cdfd87788947190b59b5af99eaaecbf2ba57aa6ffd750ffd3bef751c89264a6a9ec3b188b69dc1b6a12211cbf01"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r11, 0x8927, &(0x7f0000000000)={0xfffffffffffffffb, 0xd93a}) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$nci(r12, &(0x7f00000000c0)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x9, @a={0x3, 0x7, 0x0, 0x0, {0x1e, 0x23, "955c0c53f2718f94ab60f1deebccd011935e85cb30746ee432bf086a2b86d8bfebf4ac", 0x7, 0x9}}}, 0x2f) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb, {0x8a664c926221d382}}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) 22.443640877s ago: executing program 2 (id=4745): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x1000, 0x2}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000400"}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x8, &(0x7f0000000080)=[{0xbde, 0x5, 0x2, 0x3}, {0x5d, 0x0, 0x3e, 0xfffffffd}, {0xb, 0x9, 0x2, 0x1}, {0xf1c3, 0xcc, 0x0, 0x7}, {0x8, 0x90, 0x9, 0x9}, {0x1, 0x0, 0x17, 0x800}, {0xb540, 0x0, 0xff, 0xfffffffa}, {0xfff1, 0x8, 0x3, 0x2}]}, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = socket(0x14, 0x2, 0x4) getsockname$packet(r5, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000400)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@dstopts={0x67}], @ndisc_redir={0x89, 0x2, 0x0, '\x00', @private0, @ipv4={'\x00', '\xff\xff', @multicast1}, [{0x1, 0x1ed, "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"}]}}}}}, 0xfce) 22.304074719s ago: executing program 0 (id=4749): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="010886000bae761e81421f4d605b15"], &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) (async, rerun: 32) r0 = socket(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0x3, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x2000400c) (async) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58) 22.198030495s ago: executing program 1 (id=4751): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x100, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x2400, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6000}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_TXQLEN={0x8}]}, 0x4c}}, 0x4000) 21.248691007s ago: executing program 0 (id=4753): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) (async) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xbc, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xffe0}, {0xd, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x2, 0x0, 0xf, 0xff, 0x0, 0x3, 0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xf4, 0x2], 0x1, [0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}]}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) 21.147566616s ago: executing program 1 (id=4755): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9280208a}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe0, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x783e}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20040000}, 0x48011) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000340), 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000380)={0x8b, 0x52db6f85, 0xf, 0x9}, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={0x290, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc6dd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa59}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb89f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x44}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffc}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6681}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x74b2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4ef50fa3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3153}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xda0}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa9}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x40004}, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000740)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000b40)={0x0, 0xffffffffffffffff, 0x1, [0xb81, 0x4, 0x0, 0x8171, 0x7f], [0x9, 0x6, 0x1, 0x1, 0x1, 0x9f9, 0x7, 0x8, 0xd8d, 0x4, 0x2, 0xb7, 0x1, 0x9, 0x3, 0x6, 0x7f, 0x1, 0xe47f, 0x4, 0x7, 0x2d, 0x8a, 0x8, 0x401, 0xff, 0x100000000, 0x400, 0xba, 0x6, 0x9, 0x0, 0x5, 0x7, 0x3, 0x5, 0x5, 0x21, 0x4, 0x7f, 0xf9, 0x7, 0x1, 0x6, 0x7, 0x4, 0x0, 0x9, 0x2d44, 0x1, 0xce, 0x4, 0x8000000000000000, 0xd5b1, 0xaf8, 0xf3, 0x8, 0x0, 0x2b00000000000000, 0xae16, 0x0, 0xffffffffffffff00, 0x7f, 0x4, 0x1, 0x6, 0x9, 0xcc, 0x9, 0x4, 0x100, 0x2, 0x5, 0xbe84, 0x1, 0x6, 0x3, 0x100000001, 0x3, 0x7fff, 0x800, 0x3ff, 0x9, 0xffff, 0x3, 0x30a8, 0x5608, 0x0, 0x1, 0x5, 0x5, 0x3, 0x6, 0x4, 0x5, 0x77a603be, 0xe4, 0x5, 0x7f, 0x3, 0x80000001, 0x5, 0x6, 0x7f, 0x8, 0x33, 0x2, 0x1ff, 0x100, 0x1, 0x84, 0x81, 0x200, 0x24, 0xb4d, 0x7, 0x4e180000000000, 0x2, 0x5, 0x5, 0xde7c]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f80)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001380)={0x10, 0x4fe1367e4644778a, {0x6, @usage=0x8000000000000001, r4, 0x5, 0x0, 0x2b, 0x8, 0x1, 0x89, @struct={0x6}, 0xc, 0x3, [0x8, 0x100000000, 0xffffffffffffffff, 0x8, 0x3, 0x5]}, {0x9, @struct={0xfffffeff}, r5, 0x8, 0x0, 0x8, 0x1, 0x80000001, 0x4a3, @usage=0x7, 0xcb, 0xd2, [0x7, 0xd, 0xfffffffffffffffc, 0xb, 0x800, 0x2]}, {0x4, @usage=0x2, r6, 0xe7dd, 0x20c4000000000000, 0x8000000000000000, 0x7, 0x9, 0x412, @usage=0xa1f4, 0x3, 0x8, [0xe73, 0x9, 0x6, 0x6, 0x9, 0xfff]}, {0x0, 0x8000000000000001}}) writev(r0, &(0x7f0000001900)=[{&(0x7f0000001780)="fc7a0eb3579b0dd37602a5ba9b1e3e9a07939fdc5af6dd408b55c4024b5b2f9f5143254be63256ad1feebee73d7f19434072a28af75bf21b1021e2f7c365e0abb1bfd33074e10302098f25dcf96d9b43738aa44df321e4ab0692c4e08966936de465a69fb610b9aabbd2fd3c0a7fa522a3fb569bbd06164917697f2b801c30d55652c88b88ccddd6", 0x88}, {&(0x7f0000001840)="594b612de1721864ffff1fa8ee7b97db90d624be6162b2e4248e9cbbc695694e236fd5b3d0ee1b1fd867c486d4d5b17bfd78b18677004ddc18ecdedf32bd8c2f85a439d3b436be353945388ea5818b89e9bf3962231420f607a52dc03ac0068664df1ad5fe66d2c16fa9c76518363309281b5e8dc69c29188cc6a921195d9ebc79ed3d9585ad5721c65c6a8b9f8de9f5f52b307b12d1f93a9720ac8300da525a29da2d", 0xa3}], 0x2) recvmsg(r1, &(0x7f0000001c40)={&(0x7f0000001940)=@qipcrtr, 0x80, &(0x7f0000001b40)=[{&(0x7f00000019c0)=""/49, 0x31}, {&(0x7f0000001a00)=""/22, 0x16}, {&(0x7f0000001a40)=""/227, 0xe3}], 0x3, &(0x7f0000001b80)=""/154, 0x9a}, 0x2003) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001cc0), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x24, r7, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8de6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) writev(r0, &(0x7f00000020c0)=[{&(0x7f0000001dc0)="d9be17624fcd766ec03848609c3be5e52ec84b0c03eb7b91fb3e13b6a57640a262ab4620048dc9622863af4bc701a84ad9775487583cba56694becf70981c61e63564d68483bed15e4816b1f251c2ed9158272debc1534e8bc77a9466461c7ce524773c41f298ba827bfc1c6f75eb6a8bda190f73eaeacad0bbcc43d1683c2207d4c8e782542abd8f68f7aea6a2327fbfc92a1651822fe81bf35866f4cbfc0d37dc8c76c983f164dbc894c312f2110bd53aeab436bf549680212a41075bc1af9de927dfb3331f49cbb11a49e613b9dab", 0xd0}, {&(0x7f0000001ec0)="e520ed7542f5f8523231e63332ea32736c32a617857578a1d9a780f52bddbfd58687b6314bec4821d59ca810a87bbee22b506d8f280fdfc649a469e28df27cb96dfe0cd48db7d7a2c78b1c5816ba841a14988bb75868e375b610f0d76e83d5c4aa1f04ac7150a3fa8adb9e2667ac3b2939abe6d8761cfeb43a1b795779ee52726c40af0074e9b932e71d", 0x8a}, {&(0x7f0000001f80)="5015cf4ff6a9f3141b7903d9cb099b9a828805a9fd6461194ea84b4bafb69718ccd1c186ffe4dc6ce8cbc34ba1f69d971fe41f50e8ce0910f02cc283128582b5c299bcb9f2decc209b1cd343e839fd56592b20e832f4aaa1ed4a7342265a528bd025a7e5db8ca1cd69dc64fe3a50ea739f2ce3c68a7adbf7ef0083a07e9075cf416d3e986b03a15e9290ab2d0c15dbff7f47175be7728f2ace01ed27cb26399c44814e6fd91278b79a39bc929466e751e351a62d", 0xb4}, {&(0x7f0000002040)="81deef58c46736dacaa63512af874ee7bcbe0712c594dd5bd9ca53864c4a1afe266b1baefd3ea08a23b9650f87ba8644ef00625f1934efac00e431ede1b91a4afc6a6766149d0349303706b4c23ab61ec1ad3119cf220283fc7d9c22d33a723aee522e2fa84f0cabfe46c9a80a36c7c68a7cfdf3124d5800709020", 0x7b}], 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000021c0)={'syztnl1\x00', &(0x7f0000002140)={'ip6gre0\x00', 0x0, 0x4, 0x57, 0x0, 0x8, 0x41, @dev={0xfe, 0x80, '\x00', 0x2e}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x40, 0x1c, 0x6d}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002280)={'ip_vti0\x00', &(0x7f0000002200)={'tunl0\x00', 0x0, 0xa0, 0x700, 0x8001, 0x4, {{0xa, 0x4, 0x0, 0x3, 0x28, 0x64, 0x0, 0x2, 0x2f, 0x0, @multicast2, @multicast1, {[@lsrr={0x83, 0x7, 0xf4, [@remote]}, @ra={0x94, 0x4}, @noop, @noop, @noop, @ra={0x94, 0x4}, @end, @noop]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000022c0)={0x11, 0x0, 0x0}, &(0x7f0000002300)=0x14) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000002480)={&(0x7f0000002100), 0xc, &(0x7f0000002440)={&(0x7f0000002340)={0xd0, r2, 0xa, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002500), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000002600)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x64, r11, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r12, &(0x7f0000002740)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002700)={&(0x7f0000002680)={0x78, 0x13, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x1a, 0x8, "f51c24e73c688cf23ef892937f1317efc156938d6121"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_LEAVE_GROUP(r13, 0x29, 0x2d, &(0x7f0000002780)={0x3, {{0xa, 0x4e22, 0xfffffff7, @loopback}}}, 0x88) 20.958874296s ago: executing program 0 (id=4756): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) r1 = socket$kcm(0x11, 0x3, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0xc096, &(0x7f0000000000)={0xa, 0x0, 0x5, @private2, 0x1, 0x8}, 0x20) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xa6}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x4a}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x64}}, 0x44080) sendmsg$AUDIT_USER(r2, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xf0, 0x3ed, 0x10, 0x70bd28, 0x25dfdbfb, "9657b73c1adf169441bca3be2a38466107249c2b98b9305d3c345d702a2ee96c08ec08df5fb372458a145fc8a8f90d31b26958ea548b390435e871f2b320c92a8b979bad70dce466926917a41f5d1ba2f87890151dd0029ca73ec4de2dcfed1653b48a5ad3c8368915e751deea16fc1cc464882d9efb751cfdbb219a4998319352e0bb779f3840d23e050f924c23dbadcdc11729ac10f93357e552772a65ec58928b0c69d3fef6bdd77f74adf11c5692b393f4a4668d3221d2dddc54cd56e2628f5988a28e694defc0bb3eca26cf7b7486bdd97c28c06aa26ada510349", ["", "", "", "", "", "", ""]}, 0xf0}, 0x1, 0x0, 0x0, 0x20044821}, 0x4000000) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000180)=@phonet={0x23, 0x55, 0x0, 0x14}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000040)="270502001c0014000600002f86ddb304e82f4b6da00dad6b00a25124a1917a35db7f872382c090c8064b518633f9dbd4a4f8f86e7161", 0x36}], 0x1}, 0x24008800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r5, 0xd7735000) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r5, 0x4) 20.838774751s ago: executing program 1 (id=4758): r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xb9, 0x6, 0x81, 0x8, 0x40433, {0x0, @in6={{0xa, 0x4e22, 0x80000000, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}}, 0x9, 0x4, 0x356b, 0xf, 0x800}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={r2, @in={{0x2, 0x4e24, @empty}}, 0x86, 0x0, 0x6, 0x7, 0x12, 0x800}, &(0x7f0000000240)=0x9c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x57}, @val={0x8, 0x3, r6}, @void}}}, 0x24}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r3, 0x0, 0x0, 0x80800) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x557081, 0x100408) setsockopt$ax25_int(r7, 0x101, 0x5, &(0x7f0000000540)=0x80000000, 0x4) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="90000000593838d72d94e5105383e064f659b9a791a556f153f5ed85647e50b7781ebfa0eddcebe033ed574b878194dd283617ff5016494849d4f20d79f3f490b5", @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100030000001c00048005000300010000000500030000000000050003008000000058000c801c000b8008000a00ad0e000008000a00d234000008000a00b50e00000c000b8008000a00857300002c000b8008000900e3ecca4308000900bdd20a2e08000a0004ec000008000900de1ae563080009001888391f"], 0x90}}, 0xc000) 20.834170717s ago: executing program 0 (id=4760): r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a0000000000007b118800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010001b1d00000069e24edf511c4e32d77d6efcc064e39ebf111d5ac5831e01716fa0b68381b0e269a821483effb7e93e4e73f2bef3514e5322ab8dc14a6524976b50e5edb57a350459d36a7ba48b319234d5878a073f2fc72264f494c9d9f0724e5f93f6824d48ef18ffd623358253cc70ba09f581e6df26694a2dbe79f7c5468752ca2a563658128006c6c059", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b000100697036746e6c00001000028004001300050009000400000008000400ff0f0000"], 0x48}}, 0x0) 20.830278563s ago: executing program 2 (id=4761): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r0, 0x2f, 0x0, 0x0, @void, @value=r1}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r3, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback=r0, r2, 0x2f, 0x2008, 0x4, @value=r4}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x17, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7f}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}]}, &(0x7f00000002c0)='syzkaller\x00', 0x68, 0xc, &(0x7f00000003c0)=""/12, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x10, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x80000000}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0xfc6, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x6754, 0x1, 0x2}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r6, r5, 0x32, 0x12, r1, @void, @value=r0}, 0x20) socket$netlink(0x10, 0x3, 0x6) 20.82634018s ago: executing program 1 (id=4762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/849], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000ac0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x73, 0x1, '\x00', [@ra, @ra]}]}}}}}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = getuid() sendmsg$nl_xfrm(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=@delsa={0x2d4, 0x11, 0x4, 0x70bd27, 0x25dfdbfc, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x2, 0x32}, [@migrate={0x134, 0x11, [{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@remote, 0x6c, 0x5, 0x0, 0x3502, 0xa, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x2b}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfc, 0x2, 0x0, 0x3505, 0xa, 0xa}, {@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast1, @in=@loopback, 0x33, 0x0, 0x0, 0x3501, 0xa, 0x2}, {@in=@rand_addr=0x64010101, @in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x24}, @in=@rand_addr=0x64010101, 0x33, 0x1, 0x0, 0x34ff, 0x2, 0x8}]}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e20, 0x4e24, @in6=@remote}}, @mark={0xc, 0x15, {0x35075d, 0x3}}, @algo_comp={0xa4, 0x3, {{'deflate\x00'}, 0x2e0, "bb34a5dbed7cd895022dee8176afad1516d1105efae0524e8b66ea238bcbaea2f32ecfb98042785d205581a2830a78100a6ab2915c81caaea7b15e3885c158fc723bc0ee71bf935750a4e07bd0759da36e5279d70d45452e2c8e7c26"}}, @policy={0xac, 0x7, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x0, 0x4e24, 0x1, 0x2, 0xa0, 0x0, 0x33, r4, r5}, {0x80000000, 0x6, 0x8, 0x3, 0x4, 0xfffffffffffffffd, 0x7, 0x8}, {0x3, 0x8, 0x3ff, 0x8}, 0xf, 0x6e6bbd, 0x1, 0x1, 0x0, 0x1}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 20.736686774s ago: executing program 0 (id=4764): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x92}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2b}, 0x94) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00c92429bd70000000020007000000", @ANYRES32=r3, @ANYBLOB="80008f0b0a000200aaaaaaaaaaaa000008000f"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) 20.734346562s ago: executing program 2 (id=4765): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000001400)={'virt_wifi0\x00', @random="0600"}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r5, 0x401, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) write$nci(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="610202060502e505025dea30a8"], 0xc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x2, 0x0, 0x0, 0x2}, &(0x7f0000000500)=0x18) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000300a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000002080001400000001408000240000000120c000580060001008faa00000c000800000001008a9500000900010073797a30"], 0x118}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r14 = syz_open_procfs$namespace(r11, &(0x7f0000001780)='ns/ipc\x00') sendmsg$NFT_BATCH(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELCHAIN={0x3c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x38, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x164, 0x8, 0xa, 0x600, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x94, 0x7, 0x1, 0x0, "387fd9136f01dd505fe8195f0fad4709b7c52e8c766b716e68d30b9e028a850e7de9b319c8036f8280f41994f28aa522492dcf565c98e26262cd4c6c8de8ef602e70de2ee77d4aad227b61cd489f801d2bc2651702168457e064a730a50bba76765435754ca1a87864bc70747377241e2719a208fb28a3f3494966b7988ac3ca954ea29142aa2f82613d3aefcb09a69f"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}]}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_USERDATA={0x3d, 0x7, 0x1, 0x0, "b737ca75e60cfcba7cf50d938be8cf93c68cddc10781a0c023e0e7504a9146bc3d818b10b6a34abc53b695052b5c2e33d844c4581d65db38e0"}]}, @NFT_MSG_NEWOBJ={0x40, 0x12, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_DATA={0x2c, 0x4, 0x0, 0x1, [@NFTA_TUNNEL_KEY_TTL={0x5, 0x6, 0xb}, @NFTA_TUNNEL_KEY_TTL={0x5}, @NFTA_TUNNEL_KEY_FLAGS={0x8}, @NFTA_TUNNEL_KEY_FLAGS={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_TUNNEL_KEY_ID={0x8, 0x1, 0x1, 0x0, 0x7788}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x240}, 0x1, 0x0, 0x0, 0xc010}, 0x20000000) r15 = getpid() sendmmsg$unix(r10, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r11, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r11, 0x0, r13}}}, @cred={{0x1c, 0x1, 0x2, {r15, r12}}}, @rights={{0x18, 0x1, 0x1, [r14, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) ioctl$TUNSETGROUP(r9, 0x400454ce, r13) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 20.623791396s ago: executing program 0 (id=4766): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x44, r1, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x44}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) syz_open_procfs$namespace(r4, &(0x7f0000001780)='ns/ipc\x00') r5 = socket$phonet(0x23, 0x2, 0x1) r6 = socket$netlink(0x10, 0x3, 0xc) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0}, &(0x7f0000002880)=0xc) sendmsg$netlink(r6, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000980)={0x10, 0x32, 0x4, 0x70bd25, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0, r7}}}], 0x20, 0x50}, 0x40880) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r11}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x11, 0x10d, 0x0, 0x1, [@generic="905176c518740da397a9423603"]}]}]}, 0x3c}], 0x1}, 0x0) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050000000200"/28], 0x50) r13 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_GET_FNAME(r13, 0x1, 0x53, &(0x7f0000000700)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000280)=0xffffffffffffff18) r14 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002680)=@mangle={'mangle\x00', 0x2, 0x6, 0x778, 0x2a0, 0x388, 0x2a0, 0x1b0, 0x388, 0x6a8, 0x6a8, 0x6a8, 0x6a8, 0x6a8, 0x6, 0x0, {[{{@ipv6={@mcast1, @mcast1, [], [0x0, 0xff000000], 'team0\x00', 'vlan1\x00', {}, {}, 0x11}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x5c, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [0x0, 0xff], [0x0, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xff]}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x4e20, 0x0, 0xfffd], [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0xfd, 0xfd]}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x18, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff000000, 0xffffff00], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xe8, 0x48000000}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x8, 0x4, @ipv6=@private0, 0x4e23}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1c}, @mcast1, [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffff00, 0xff], 'veth0_vlan\x00', 'veth1_to_bond\x00', {0x9865820c52afa8d5}, {0xff}, 0x84, 0x1, 0x0, 0x28}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x9, 0x0, 0x0, [@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7d8) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7fff, 0x7}, 0x48) r16 = accept$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @local}, &(0x7f0000000340)=0x10) r17 = openat$nci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r18 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0) sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)={0xe4, 0x12, 0x300, 0x70bd28, 0x25dfdbfe, "", [@nested={0xd4, 0x13, 0x0, 0x1, [@nested={0x4, 0x150}, @generic="23f13ccc4c3711e96f2c755e624efb67878c9bcc7419abb6d0e72355d01510202efcd3178db6506753cb6f53da5635a676f5d939ba1c59a43df041006c12c719fbcd4f16d257f1bae08c74eb30c1c33e9043a4dc53ca79a22cba28740000cfd42f492d", @typed={0x8, 0x133, 0x0, 0x0, @pid=r2}, @nested={0x4, 0xf8}, @generic="0b1470a201bca04556062a319f3c85a2187b86ff7f0aee657a2b41e7d355f5f884acdf0a248e6e8ea0ac7ecf4c65bdef825ae19f389fbb742d4545a28c6fcbaaab9c3769d93ca242ee28286cbcfbed7d0fdb548f71f4d9f6b448539dc1"]}]}, 0xe4}], 0x1, &(0x7f0000000680)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r4, r7, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r8, r11, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r12, r0, r13, r14, r0, r0, r0]}}, @rights={{0x10}}, @rights={{0x38, 0x1, 0x1, [r0, r0, r0, r0, r15, r0, r0, r0, r16, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r17, r18]}}], 0x108, 0x4040004}, 0x20040000) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000006c00)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x5, 0x37, 0x0, 0x0, @binary="1b"}]}, 0x28}], 0x1}, 0x0) 20.531579072s ago: executing program 1 (id=4768): syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r0 = socket(0x1d, 0x2, 0x6) socket$unix(0x1, 0x5, 0x0) (async) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="000898"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000180), 0x0}, 0x20) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) sendmsg$tipc(r0, &(0x7f0000000680)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x2, 0x2}}, 0x10, &(0x7f0000000140), 0x0, &(0x7f00000005c0)="e75ce93abb53b55d2a1dde80907f06194a3642de450a6d0dd5b57707c6403051b98b861b06524637921d88b298656ee0b8a14dc3644ad77b1ffb7a6c2f2ab396a711c0d212f1f6db17dc91a4360662b32791f7b558fce0e5ef9dafad59673e76bcba5f6892054b65c9bb6949ca728c479b78edc5766abeeab2464106bf05b1243cc04a40a6a5b370171dab8e664b36840fb65e8dd0bc094c5468", 0x9a, 0x4001}, 0x880) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) (async) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000040)='\x00\x00\x00{\t\x00\x00\x00', 0x8) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0xa, 0x148, 0x120, 0x60, 0x1f8, 0x2a8, 0x2a8, 0x1f8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x200003ae, 0x7f00}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0xb6, 0x8, [0xb, 0x24, 0x24, 0x19, 0x3e, 0x19, 0x31, 0x3b, 0x5, 0x40, 0x12, 0x33, 0x3b, 0x3f, 0x3b, 0x7], 0x0, 0x7fff, 0x1}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x67, 0x0, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x1, 0x81, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2a0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82D\x80'}, 0x30) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) (rerun: 64) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[], 0x32600) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async, rerun: 32) mkdirat$cgroup(r6, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x25, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) 20.335071598s ago: executing program 1 (id=4771): r0 = socket(0x400000000010, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="fedbdf2502000004fe00000600214279994cd64c54acaad3c3193400"/41], 0x1c}, 0x1, 0x0, 0x0, 0x50001}, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$isdn(0x22, 0x2, 0x11) close(r4) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040), &(0x7f00000000c0)=0x4) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r9}, 0x10) pipe(0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='mm_vmscan_lru_shrink_active\x00', r8, 0x0, 0xfffffffffffffff9}, 0x18) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r11, &(0x7f0000000500)=""/4096, 0x1000) splice(0xffffffffffffffff, 0x0, r12, 0x0, 0x400000008000f28, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r8}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES64=r6, @ANYRES64=r6, @ANYBLOB="2bad2092f20e087e3059e9df1c3e706cf7da4b6f45add7a514b6e9a35199d72cfa4a8c6cc7ffb698a1084a4a1ef65fc82e148a6cfcce98f3915970819ece82a6677ffeee9beb2e9d3d4fdc1477fcd58abcb51cef99d38651950e", @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0xc001) 17.160628827s ago: executing program 3 (id=4816): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x25, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25041100800c0002"], 0x114}], 0x1}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x0, 0x2c8, 0xffffffff, 0x0, 0x228, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'fsm\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @rand_addr=0x64010101, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x29}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a118001500060014c3ff0000120800030043000040a80019000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f6d7f3ef48286112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaac99eddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb06000000588a6364", 0xd8}], 0x1}, 0x0) 17.077927569s ago: executing program 3 (id=4817): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xac}}, 0x48004) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001740)={0x0, 0x6, &(0x7f0000001700)={&(0x7f0000000440)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) 17.035434688s ago: executing program 3 (id=4818): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000003c0)="2000000012005f0214f9f4070000fbe40a000000000085b5ca8d7c10277582b9", 0x20) recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000000000000008"], 0x14}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) 16.954990196s ago: executing program 3 (id=4819): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24018800}, 0x24000810) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x240, 0x0, 0xffffffff, 0x240, 0x1a0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @multicast2, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000540), 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@loopback, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x10000, 0x670e, 0x0, 0xffffffff}, 0x0, 0x200000, 0x7, 0x8, 0x0, 0x14, 0x0, 0x1b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x2, 0x10, 0x1000000}}}}]}, 0x78}}, 0xc090) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newlink={0x80, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, r12, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x1}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_LINK={0x0, 0x1, r12}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x101}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xc}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e20}]}}}, @IFLA_MASTER={0xfffffffffffffdf7, 0xa, r12}]}, 0x80}}, 0x880) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0xb4}}, 0x0) 16.904383841s ago: executing program 3 (id=4821): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = accept(r0, &(0x7f0000000040)=@qipcrtr, &(0x7f00000000c0)=0x80) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r1) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000002c0)=0x5, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x36000, 0x0) syz_extract_tcp_res(&(0x7f0000000340)={0x41424344}, 0xa, 0x3) write$tun(r3, &(0x7f0000000380)={@void, @val={0x1, 0x4, 0x100, 0x2, 0x7, 0x6}, @ipv6=@tcp={0x8, 0x6, "b4fe83", 0x10c, 0x6, 0x1, @mcast1, @local, {[@hopopts={0xff, 0x8, '\x00', [@hao={0xc9, 0x10, @private2}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x2}, @pad1, @calipso={0x7, 0x18, {0x2, 0x4, 0x5f, 0x95e3, [0x3, 0xffffffff]}}, @pad1]}], {{0x4e21, 0x4e22, r4, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x3, 0x0, 0x4}, {"110130db77a8717e5d82f53faeae217352c4e563c9b22f3a6dd473b00a4e24258f6979ae0bbc171c1507a4a6d460152a627f71be8a3f729a422d09632688966019d2f756db68fe440e43d5e757c38534f1f45a2d2cedb75146f55a380c8d7a6fcde8ffe03cf941fefda44ecdc57516a724e3854a49ae490bc5b35dcaeff68b717d75136055a7803f7a82daa4cac81621d30f03501f9421f5f32a443671891a758bf52eafa66ff50a"}}}}}, 0x13e) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f00000004c0)="407afe0746593b3f1b7f3e85ac3806a0894463", 0x13) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000500)={'veth1_to_bridge\x00', {0x2, 0x4e22, @loopback}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x18, r5, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x12}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x4804) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000780)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000000880)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast2, 0x4e20, 0x6b, 0x4e22, 0x8, 0xa, 0x20, 0x20, 0x5c, 0x0, r7}, {0x3f1b, 0x2, 0x3, 0x3000000000000, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x6, 0xd65}, {0x4, 0x4, 0x1ff, 0x1000000000}, 0x18000, 0x6e6bb3, 0x2, 0x0, 0x1, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x31}, 0x8001, 0x2b}, 0xa, @in=@broadcast, 0x3503, 0x4, 0x2, 0xb, 0xffffffff, 0x9, 0x632e4658}}, 0xe8) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000009c0)={'bridge0\x00', @broadcast}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000a40)=@raw=[@call={0x85, 0x0, 0x0, 0x71}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8001}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000a80)='GPL\x00', 0x80000001, 0xc5, &(0x7f0000000ac0)=""/197, 0x41000, 0xa, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000c00)={0x1, 0xd, 0x7fffffff, 0x99}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000c40)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000c80)=[{0x1, 0x2, 0xd, 0x3}, {0x5, 0x1, 0x8, 0xb}, {0x4, 0x3, 0xa, 0xb}, {0x5, 0x4, 0x6, 0x3}, {0x0, 0x3, 0x4, 0x9}, {0x0, 0x2, 0x1, 0xb}, {0x2, 0x3, 0xa, 0x1}], 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000a00)='ext4_evict_inode\x00', r8, 0x0, 0x2}, 0x18) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000e40), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x84200}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x38, r9, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008804}, 0x4000800) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000f40), 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x48, r5, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x5f}}}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8, 0x1, 0x0, 0x0, {0xf9e9, 0x5, 0x0, 0x5, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x1, 0x1, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x408}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x7c, r5, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x7f}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x9}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x6}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x1}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x14, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x7}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x97}]}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x9}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x3cc6934e}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'nicvf0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0xd27f622e212d657a}, 0x81) sendmsg$nl_generic(r1, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0x84, 0x12, 0x100, 0x70bd2b, 0x25dfdbfc, {0x8}, [@nested={0x68, 0x68, 0x0, 0x1, [@typed={0x4, 0x4a}, @generic="d520b58422edb91f1449d883ee5f2e82397840b1d589287d034695cd4c12e4702e669d0e5c56418ed63c30930c80f2fe8b9bbd650743809f4cf6dfd175b1a4de555f99f50f7de18560b51c3e672e06b4e9cb11707b02405027bf64b328093dce"]}, @typed={0x8, 0xa6, 0x0, 0x0, @ipv4=@empty}]}, 0x84}, 0x1, 0x0, 0x0, 0x8881}, 0x200000c1) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000001380)={'veth1\x00', @broadcast}) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x61, &(0x7f00000013c0)={'filter\x00', 0x4}, 0x68) bind$bt_sco(0xffffffffffffffff, &(0x7f0000001440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 16.784040634s ago: executing program 3 (id=4822): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f0000001100)=[{&(0x7f0000001140)="0725ee98e30fb0eded55c9140bf299700c2b87e3", 0x14}, {&(0x7f0000000100)="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", 0x1000}], 0x2) write$rfkill(r0, &(0x7f0000000040)={0xffdfffff, 0x5, 0x3, 0x1}, 0x8) 16.351768703s ago: executing program 4 (id=4831): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x81, 0xb, @private1, @mcast2, 0x700, 0x1, 0x8d, 0x6}}) syz_80211_inject_frame(&(0x7f0000000240), &(0x7f00000002c0)=ANY=[@ANYBLOB="94000200080211000000ffffffffffff065000807400abc19a34ae6511f100901700d890e830fb2bf5ce008066001d46a3ffbf270e4f00702600d74da025c5b0bee500e31b09689d64ceb8372c2b706a00eed7050165b5b19a0050a5ff385628fac20a8447"], 0x5a) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000940)}, 0x41) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x8800) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4005) socket$inet6(0xa, 0x800, 0x40) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0xe23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl0\x00', r1, 0x2f, 0x0, 0xf6, 0x73c6, 0x34, @local, @remote, 0x40, 0x700, 0x5, 0x6}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newspdinfo={0x5c, 0x24, 0x800, 0x70bd2a, 0x25dfdbfd, 0xc, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc001}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 15.715187523s ago: executing program 4 (id=4832): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8007d9197ddb9a8fb2e14fa393f3289fb00001600010000000000000000010000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000200"/176], 0xf8}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x4, r0}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633"], 0x6f4}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x40010) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010"], 0x80}}, 0x4814) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 15.673134856s ago: executing program 4 (id=4833): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x20003, 0x0, 0x0) 15.575850306s ago: executing program 4 (id=4834): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$can_raw(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x1, 0x1}, 0x6, 0x0, 0x0, 0x0, "b775838bee850282"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 15.568712816s ago: executing program 4 (id=4835): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000002871104e000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) close(0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x64}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd}, 0x94) 15.507803572s ago: executing program 4 (id=4836): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x2, {0x3}}, 0x18) sendto$unix(r1, &(0x7f0000000280)="0c3019eda073a024", 0x8, 0x4, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x478, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x40ff, 0x5, 0x3, 0x4, 0x4, {0x4, 0x1, 0x8, 0x8, 0x4, 0x5}, {0xe, 0x2, 0xfff, 0xff00, 0x10}, 0xb72, 0x8001, 0xdb}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x1, 0x2, 0x800, 0x40, 0xfffff801, 0x79, 0x8001, 0xf22, 0x0, 0x1, 0x4, 0x8, 0x4a7, 0x1, 0x2, 0x81, 0x4, 0x7, 0x2, 0xd5d, 0x5268, 0x7e, 0x3, 0x0, 0x6, 0x5, 0x8, 0x2, 0x4455, 0xffffffff, 0xfffeffff, 0x8, 0x45e, 0xff, 0x2, 0x0, 0x7f, 0x7fd, 0x2, 0x17, 0x8, 0xffffff45, 0x4, 0xc, 0x6, 0x6cff1733, 0xd39, 0x4, 0x7, 0x7, 0x8, 0x8001, 0x8, 0x3, 0x2, 0x1, 0x200, 0x12000000, 0x2, 0x9c, 0x7, 0x1, 0x2, 0x5, 0x2, 0x5, 0x9, 0x97, 0x37, 0xb6, 0x6, 0x1, 0x7, 0x7d, 0x2, 0xe2b, 0x10001, 0xfff, 0x3a, 0x100002, 0x10000, 0x81, 0x2, 0x7, 0x9, 0xd317, 0x9de, 0x6, 0x840, 0x1, 0x43, 0xff, 0x4, 0x0, 0x7fffffff, 0x8, 0x6, 0x8, 0x9, 0x5, 0x7, 0xd, 0x9e5, 0x0, 0x4, 0x76, 0x5, 0xffffffff, 0x7, 0x2, 0x5f, 0x0, 0x6, 0x865feb0b, 0x400002, 0x0, 0x1fb, 0x7fffffff, 0x401, 0x400, 0x6, 0xa2, 0x2, 0x195, 0x7, 0x3, 0x5, 0x6, 0xffff8c16, 0xfffffffb, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x6, 0x2, 0x7, 0x2, 0x4, 0x7a0, 0x1, 0x48, 0x10001, 0x5, 0x1, 0x6, 0x5, 0x7, 0x7f, 0x36800, 0x0, 0x0, 0x3, 0xfffffffe, 0x6, 0xe000, 0x6, 0x5, 0x8, 0x8001, 0xffffffff, 0x1000, 0x7ff, 0xb, 0x5, 0x1, 0x5, 0x80000000, 0x53, 0x6, 0x4, 0x0, 0x3ff, 0x838, 0x9, 0xfffffffc, 0x7, 0x9, 0x2, 0x2, 0x50001, 0x1, 0xfffffff8, 0x5, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x400, 0x800, 0x4, 0xfffff4bb, 0x8, 0x6, 0xc, 0x6, 0x2001, 0x2006, 0x9, 0x0, 0x944, 0x2, 0x6, 0x5, 0x10000, 0x5, 0x3, 0xb52f, 0xfe, 0x0, 0xa0, 0x8, 0x203, 0x4, 0x6, 0x0, 0xff, 0x3, 0x0, 0x5c, 0x6, 0x8, 0x1, 0x15, 0xffff, 0xfffffffe, 0x9, 0x7f, 0x4, 0x6, 0x6, 0x7, 0x3, 0xa, 0xff, 0x5, 0x4, 0x9, 0xfffc, 0x9d1, 0x1, 0xf, 0x8, 0x40, 0x10000, 0xd3ae, 0x5f5a, 0x1, 0x6, 0xcfe, 0x0, 0x24e00b6d, 0x8f3, 0x2]}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x9f0f}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r14, 0x94, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e20, 0xf3d, @private2, 0x524}, @in6={0xa, 0x4e20, 0x4b7, @mcast2, 0x9}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}]}, &(0x7f0000000180)=0x10) socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 5.478588408s ago: executing program 32 (id=4766): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x44, r1, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x44}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) syz_open_procfs$namespace(r4, &(0x7f0000001780)='ns/ipc\x00') r5 = socket$phonet(0x23, 0x2, 0x1) r6 = socket$netlink(0x10, 0x3, 0xc) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0}, &(0x7f0000002880)=0xc) sendmsg$netlink(r6, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000980)={0x10, 0x32, 0x4, 0x70bd25, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0, r7}}}], 0x20, 0x50}, 0x40880) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r11}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x11, 0x10d, 0x0, 0x1, [@generic="905176c518740da397a9423603"]}]}]}, 0x3c}], 0x1}, 0x0) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050000000200"/28], 0x50) r13 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_GET_FNAME(r13, 0x1, 0x53, &(0x7f0000000700)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000280)=0xffffffffffffff18) r14 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002680)=@mangle={'mangle\x00', 0x2, 0x6, 0x778, 0x2a0, 0x388, 0x2a0, 0x1b0, 0x388, 0x6a8, 0x6a8, 0x6a8, 0x6a8, 0x6a8, 0x6, 0x0, {[{{@ipv6={@mcast1, @mcast1, [], [0x0, 0xff000000], 'team0\x00', 'vlan1\x00', {}, {}, 0x11}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x5c, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [0x0, 0xff], [0x0, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xff]}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x4e20, 0x0, 0xfffd], [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0xfd, 0xfd]}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x18, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff000000, 0xffffff00], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xe8, 0x48000000}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x8, 0x4, @ipv6=@private0, 0x4e23}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1c}, @mcast1, [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffff00, 0xff], 'veth0_vlan\x00', 'veth1_to_bond\x00', {0x9865820c52afa8d5}, {0xff}, 0x84, 0x1, 0x0, 0x28}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x9, 0x0, 0x0, [@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7d8) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7fff, 0x7}, 0x48) r16 = accept$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @local}, &(0x7f0000000340)=0x10) r17 = openat$nci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r18 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0) sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)={0xe4, 0x12, 0x300, 0x70bd28, 0x25dfdbfe, "", [@nested={0xd4, 0x13, 0x0, 0x1, [@nested={0x4, 0x150}, @generic="23f13ccc4c3711e96f2c755e624efb67878c9bcc7419abb6d0e72355d01510202efcd3178db6506753cb6f53da5635a676f5d939ba1c59a43df041006c12c719fbcd4f16d257f1bae08c74eb30c1c33e9043a4dc53ca79a22cba28740000cfd42f492d", @typed={0x8, 0x133, 0x0, 0x0, @pid=r2}, @nested={0x4, 0xf8}, @generic="0b1470a201bca04556062a319f3c85a2187b86ff7f0aee657a2b41e7d355f5f884acdf0a248e6e8ea0ac7ecf4c65bdef825ae19f389fbb742d4545a28c6fcbaaab9c3769d93ca242ee28286cbcfbed7d0fdb548f71f4d9f6b448539dc1"]}]}, 0xe4}], 0x1, &(0x7f0000000680)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r4, r7, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r8, r11, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r12, r0, r13, r14, r0, r0, r0]}}, @rights={{0x10}}, @rights={{0x38, 0x1, 0x1, [r0, r0, r0, r0, r15, r0, r0, r0, r16, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r17, r18]}}], 0x108, 0x4040004}, 0x20040000) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000006c00)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x5, 0x37, 0x0, 0x0, @binary="1b"}]}, 0x28}], 0x1}, 0x0) 5.43468736s ago: executing program 33 (id=4765): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000001400)={'virt_wifi0\x00', @random="0600"}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r5, 0x401, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) write$nci(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="610202060502e505025dea30a8"], 0xc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x2, 0x0, 0x0, 0x2}, &(0x7f0000000500)=0x18) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r14 = syz_open_procfs$namespace(r11, &(0x7f0000001780)='ns/ipc\x00') sendmsg$NFT_BATCH(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELCHAIN={0x3c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x38, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x164, 0x8, 0xa, 0x600, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x94, 0x7, 0x1, 0x0, "387fd9136f01dd505fe8195f0fad4709b7c52e8c766b716e68d30b9e028a850e7de9b319c8036f8280f41994f28aa522492dcf565c98e26262cd4c6c8de8ef602e70de2ee77d4aad227b61cd489f801d2bc2651702168457e064a730a50bba76765435754ca1a87864bc70747377241e2719a208fb28a3f3494966b7988ac3ca954ea29142aa2f82613d3aefcb09a69f"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}]}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_USERDATA={0x3d, 0x7, 0x1, 0x0, "b737ca75e60cfcba7cf50d938be8cf93c68cddc10781a0c023e0e7504a9146bc3d818b10b6a34abc53b695052b5c2e33d844c4581d65db38e0"}]}, @NFT_MSG_NEWOBJ={0x40, 0x12, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_DATA={0x2c, 0x4, 0x0, 0x1, [@NFTA_TUNNEL_KEY_TTL={0x5, 0x6, 0xb}, @NFTA_TUNNEL_KEY_TTL={0x5}, @NFTA_TUNNEL_KEY_FLAGS={0x8}, @NFTA_TUNNEL_KEY_FLAGS={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_TUNNEL_KEY_ID={0x8, 0x1, 0x1, 0x0, 0x7788}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x240}, 0x1, 0x0, 0x0, 0xc010}, 0x20000000) r15 = getpid() sendmmsg$unix(r10, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r11, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r11, 0x0, r13}}}, @cred={{0x1c, 0x1, 0x2, {r15, r12}}}, @rights={{0x18, 0x1, 0x1, [r14, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) ioctl$TUNSETGROUP(r9, 0x400454ce, r13) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.429566836s ago: executing program 34 (id=4771): r0 = socket(0x400000000010, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="fedbdf2502000004fe00000600214279994cd64c54acaad3c3193400"/41], 0x1c}, 0x1, 0x0, 0x0, 0x50001}, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$isdn(0x22, 0x2, 0x11) close(r4) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040), &(0x7f00000000c0)=0x4) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r9}, 0x10) pipe(0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='mm_vmscan_lru_shrink_active\x00', r8, 0x0, 0xfffffffffffffff9}, 0x18) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r11, &(0x7f0000000500)=""/4096, 0x1000) splice(0xffffffffffffffff, 0x0, r12, 0x0, 0x400000008000f28, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r8}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES64=r6, @ANYRES64=r6, @ANYBLOB="2bad2092f20e087e3059e9df1c3e706cf7da4b6f45add7a514b6e9a35199d72cfa4a8c6cc7ffb698a1084a4a1ef65fc82e148a6cfcce98f3915970819ece82a6677ffeee9beb2e9d3d4fdc1477fcd58abcb51cef99d38651950e", @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0xc001) 1.02388244s ago: executing program 35 (id=4822): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f0000001100)=[{&(0x7f0000001140)="0725ee98e30fb0eded55c9140bf299700c2b87e3", 0x14}, {&(0x7f0000000100)="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", 0x1000}], 0x2) write$rfkill(r0, &(0x7f0000000040)={0xffdfffff, 0x5, 0x3, 0x1}, 0x8) 0s ago: executing program 36 (id=4836): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x2, {0x3}}, 0x18) sendto$unix(r1, &(0x7f0000000280)="0c3019eda073a024", 0x8, 0x4, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x478, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x40ff, 0x5, 0x3, 0x4, 0x4, {0x4, 0x1, 0x8, 0x8, 0x4, 0x5}, {0xe, 0x2, 0xfff, 0xff00, 0x10}, 0xb72, 0x8001, 0xdb}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x1, 0x2, 0x800, 0x40, 0xfffff801, 0x79, 0x8001, 0xf22, 0x0, 0x1, 0x4, 0x8, 0x4a7, 0x1, 0x2, 0x81, 0x4, 0x7, 0x2, 0xd5d, 0x5268, 0x7e, 0x3, 0x0, 0x6, 0x5, 0x8, 0x2, 0x4455, 0xffffffff, 0xfffeffff, 0x8, 0x45e, 0xff, 0x2, 0x0, 0x7f, 0x7fd, 0x2, 0x17, 0x8, 0xffffff45, 0x4, 0xc, 0x6, 0x6cff1733, 0xd39, 0x4, 0x7, 0x7, 0x8, 0x8001, 0x8, 0x3, 0x2, 0x1, 0x200, 0x12000000, 0x2, 0x9c, 0x7, 0x1, 0x2, 0x5, 0x2, 0x5, 0x9, 0x97, 0x37, 0xb6, 0x6, 0x1, 0x7, 0x7d, 0x2, 0xe2b, 0x10001, 0xfff, 0x3a, 0x100002, 0x10000, 0x81, 0x2, 0x7, 0x9, 0xd317, 0x9de, 0x6, 0x840, 0x1, 0x43, 0xff, 0x4, 0x0, 0x7fffffff, 0x8, 0x6, 0x8, 0x9, 0x5, 0x7, 0xd, 0x9e5, 0x0, 0x4, 0x76, 0x5, 0xffffffff, 0x7, 0x2, 0x5f, 0x0, 0x6, 0x865feb0b, 0x400002, 0x0, 0x1fb, 0x7fffffff, 0x401, 0x400, 0x6, 0xa2, 0x2, 0x195, 0x7, 0x3, 0x5, 0x6, 0xffff8c16, 0xfffffffb, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x6, 0x2, 0x7, 0x2, 0x4, 0x7a0, 0x1, 0x48, 0x10001, 0x5, 0x1, 0x6, 0x5, 0x7, 0x7f, 0x36800, 0x0, 0x0, 0x3, 0xfffffffe, 0x6, 0xe000, 0x6, 0x5, 0x8, 0x8001, 0xffffffff, 0x1000, 0x7ff, 0xb, 0x5, 0x1, 0x5, 0x80000000, 0x53, 0x6, 0x4, 0x0, 0x3ff, 0x838, 0x9, 0xfffffffc, 0x7, 0x9, 0x2, 0x2, 0x50001, 0x1, 0xfffffff8, 0x5, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x400, 0x800, 0x4, 0xfffff4bb, 0x8, 0x6, 0xc, 0x6, 0x2001, 0x2006, 0x9, 0x0, 0x944, 0x2, 0x6, 0x5, 0x10000, 0x5, 0x3, 0xb52f, 0xfe, 0x0, 0xa0, 0x8, 0x203, 0x4, 0x6, 0x0, 0xff, 0x3, 0x0, 0x5c, 0x6, 0x8, 0x1, 0x15, 0xffff, 0xfffffffe, 0x9, 0x7f, 0x4, 0x6, 0x6, 0x7, 0x3, 0xa, 0xff, 0x5, 0x4, 0x9, 0xfffc, 0x9d1, 0x1, 0xf, 0x8, 0x40, 0x10000, 0xd3ae, 0x5f5a, 0x1, 0x6, 0xcfe, 0x0, 0x24e00b6d, 0x8f3, 0x2]}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x9f0f}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r14, 0x94, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e20, 0xf3d, @private2, 0x524}, @in6={0xa, 0x4e20, 0x4b7, @mcast2, 0x9}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}]}, &(0x7f0000000180)=0x10) socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): 1: tx address claim with dlc 0 [ 267.270398][T15333] vxcan1: tx address claim with dlc 0 [ 267.278403][T15336] bond0: Caught tx_queue_len zero misconfig [ 267.295156][T15333] vxcan1: tx address claim with dlc 0 [ 267.746499][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 267.756296][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 267.764632][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 267.775442][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 267.784066][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 267.824432][T15357] syzkaller0 speed is unknown, defaulting to 1000 [ 267.850470][T15322] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 267.918469][T15363] netlink: 'syz.0.2813': attribute type 1 has an invalid length. [ 267.926261][T15363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.959077][T15371] netlink: 'syz.1.2814': attribute type 1 has an invalid length. [ 267.977251][T15371] netlink: 'syz.1.2814': attribute type 2 has an invalid length. [ 267.996129][T15371] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2814'. [ 268.032600][T15374] bridge_slave_1: left allmulticast mode [ 268.042110][T15374] bridge_slave_1: left promiscuous mode [ 268.057251][T15374] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.106192][T15374] `: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 268.198616][ T5823] syz_tun (unregistering): left allmulticast mode [ 268.252297][T15385] openvswitch: netlink: IP tunnel dst address not specified [ 268.422475][T15357] chnl_net:caif_netlink_parms(): no params data found [ 268.452989][T15405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.762923][T15414] veth0_macvtap: entered promiscuous mode [ 268.780819][T15414] macvtap2: entered allmulticast mode [ 268.792488][T15414] veth0_macvtap: entered allmulticast mode [ 268.888270][T15357] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.895713][T15357] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.903165][T15357] bridge_slave_0: entered allmulticast mode [ 268.914034][T15357] bridge_slave_0: entered promiscuous mode [ 268.930691][T15357] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.938483][T15357] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.951340][T15357] bridge_slave_1: entered allmulticast mode [ 268.990143][T15357] bridge_slave_1: entered promiscuous mode [ 269.095387][T15357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.123145][T15357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.226064][T15357] team0: Port device team_slave_0 added [ 269.261603][T15357] team0: Port device team_slave_1 added [ 269.338849][T15357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.345840][T15357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.373348][T15357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.392550][T15357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.401250][T15357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.429177][T15357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.563188][T15357] hsr_slave_0: entered promiscuous mode [ 269.584137][T15357] hsr_slave_1: entered promiscuous mode [ 269.670917][T15453] validate_nla: 3 callbacks suppressed [ 269.670935][T15453] netlink: 'syz.1.2839': attribute type 5 has an invalid length. [ 269.828078][ T5835] Bluetooth: hci5: command tx timeout [ 269.864269][T15449] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 269.941914][T15453] geneve2: entered promiscuous mode [ 269.954121][T15453] geneve2: entered allmulticast mode [ 270.010678][ T69] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 270.022783][ T69] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 270.054104][ T69] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 270.076596][ T69] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 270.283294][T15481] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 270.334281][T15484] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 270.399735][T15487] __nla_validate_parse: 7 callbacks suppressed [ 270.399752][T15487] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2847'. [ 270.499955][T15357] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.637064][T15357] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.793682][T15357] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.904258][T15519] netlink: 'syz.1.2855': attribute type 75 has an invalid length. [ 270.942330][T15357] bond0: (slave €Â): Releasing backup interface [ 270.950647][T15357] netdevsim netdevsim2 €Â (unregistering): left promiscuous mode [ 270.959227][T15357] netdevsim netdevsim2 €Â (unregistering): left allmulticast mode [ 270.988898][T15524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2857'. [ 271.225601][T15357] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 271.242870][T15357] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 271.274991][T15357] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 271.289898][T15357] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 271.443130][T15357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.490156][T15357] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.506408][ T6262] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.513674][ T6262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.542783][T15566] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2866'. [ 271.554763][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.562042][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.572294][T15569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2868'. [ 271.907498][T15594] x_tables: unsorted entry at hook 1 [ 271.912942][ T5835] Bluetooth: hci5: command tx timeout [ 271.962613][T15357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.000638][T15599] x_tables: unsorted entry at hook 1 [ 272.035583][T15357] veth0_vlan: entered promiscuous mode [ 272.123416][T15357] veth1_vlan: entered promiscuous mode [ 272.191887][T15357] veth0_macvtap: entered promiscuous mode [ 272.239827][T15357] veth1_macvtap: entered promiscuous mode [ 272.270525][T15610] netlink: 'syz.4.2875': attribute type 7 has an invalid length. [ 272.301937][T15614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2877'. [ 272.332444][T15357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.372482][T15357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.393371][ T8010] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.405442][ T8010] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.416817][ T8010] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.427418][ T8010] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.598874][ T6262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.606754][ T6262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.696635][ T8000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.715693][ T8000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.084867][T15653] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 273.120971][T15653] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 273.186615][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 273.197725][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 273.208333][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 273.220555][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 273.228502][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 273.317011][T15658] syzkaller0 speed is unknown, defaulting to 1000 [ 273.794016][T15678] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 273.810162][T15658] chnl_net:caif_netlink_parms(): no params data found [ 273.988785][ T52] Bluetooth: hci5: command tx timeout [ 274.072958][ T69] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.092663][ T69] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.111029][T15701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2899'. [ 274.129169][T15699] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2898'. [ 274.139143][T15699] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2898'. [ 274.172823][T15701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2899'. [ 274.196962][T15699] gretap0: entered promiscuous mode [ 274.204928][T15699] gretap0: left promiscuous mode [ 274.239637][T15658] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.247047][T15658] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.254946][T15658] bridge_slave_0: entered allmulticast mode [ 274.268103][T15658] bridge_slave_0: entered promiscuous mode [ 274.277050][T15658] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.284529][T15658] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.292298][T15658] bridge_slave_1: entered allmulticast mode [ 274.301551][T15658] bridge_slave_1: entered promiscuous mode [ 274.394665][ T69] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.406936][ T69] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.479554][T15658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.505561][T15715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2903'. [ 274.548606][T15717] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 274.614146][T15718] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 274.642205][T15658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.657412][ T69] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.696515][ T69] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.891869][ T69] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.912093][ T69] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.925748][T15745] netlink: 'syz.3.2909': attribute type 6 has an invalid length. [ 274.979460][T15658] team0: Port device team_slave_0 added [ 274.986739][T15746] netlink: 'syz.3.2909': attribute type 6 has an invalid length. [ 275.002142][T15658] team0: Port device team_slave_1 added [ 275.115053][T15658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.138951][T15658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.205577][T15658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.264889][T15658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.272429][ T52] Bluetooth: hci0: command tx timeout [ 275.290356][T15658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.318390][T15658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.532319][T15658] hsr_slave_0: entered promiscuous mode [ 275.551510][T15658] hsr_slave_1: entered promiscuous mode [ 275.563041][T15658] debugfs: 'hsr0' already exists in 'hsr' [ 275.577423][T15658] Cannot create hsr debugfs directory [ 275.640269][T15763] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 275.693367][T15766] __nla_validate_parse: 2 callbacks suppressed [ 275.693416][T15766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2917'. [ 275.738844][ T69] macsec0: left allmulticast mode [ 275.744273][ T69] veth1_macvtap: left allmulticast mode [ 275.750573][ T69] macsec0: left promiscuous mode [ 275.757088][ T69] bridge0: port 3(macsec0) entered disabled state [ 275.781985][T15766] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 275.796415][ T69] tipc: Resetting bearer [ 276.071334][ T52] Bluetooth: hci5: command tx timeout [ 276.729339][ T69] tipc: Disabling bearer [ 276.821340][ T69] bond5 (unregistering): (slave geneve2): Releasing active interface [ 276.966575][ T69] bond1 (unregistering): (slave bridge2): Releasing active interface [ 276.974865][ T69] bond1 (unregistering): (slave bridge2): the permanent HWaddr of slave - 76:3d:3c:e5:f5:12 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 277.017852][ T69] bond1 (unregistering): (slave bridge3): Releasing active interface [ 277.318087][ T69] bond0 (unregistering): Released all slaves [ 277.332071][ T69] bond1 (unregistering): Released all slaves [ 277.349637][ T52] Bluetooth: hci0: command tx timeout [ 277.429978][ T69] bond2 (unregistering): (slave veth5): Releasing active interface [ 277.443819][ T69] bond2 (unregistering): Released all slaves [ 277.456734][ T69] bond3 (unregistering): Released all slaves [ 277.545063][ T69] bond4 (unregistering): Released all slaves [ 277.630043][ T69] bond5 (unregistering): Released all slaves [ 277.642429][ T69] bond6 (unregistering): Released all slaves [ 277.728252][ T69] bond7 (unregistering): Released all slaves [ 277.741260][T15768] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 277.781915][T15766] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 277.806645][T15766] bond1 (unregistering): Released all slaves [ 277.857155][T15783] netlink: 'syz.4.2922': attribute type 1 has an invalid length. [ 277.867891][T15783] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2922'. [ 277.891749][ T69] tipc: Left network mode [ 278.120189][T15800] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2928'. [ 278.168508][T15798] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2926'. [ 278.177728][T15798] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2926'. [ 278.190268][T15795] netlink: 284 bytes leftover after parsing attributes in process `syz.3.2927'. [ 278.476816][T15822] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2932'. [ 278.746437][T15829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2938'. [ 278.756440][T15829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2938'. [ 278.767141][T15829] netlink: 'syz.3.2938': attribute type 11 has an invalid length. [ 278.811265][T15829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2938'. [ 278.821339][T15829] netlink: 'syz.3.2938': attribute type 11 has an invalid length. [ 278.842981][ T69] hsr_slave_0: left promiscuous mode [ 278.851548][T15834] netlink: 'syz.2.2939': attribute type 1 has an invalid length. [ 278.859728][ T69] hsr_slave_1: left promiscuous mode [ 278.859875][T15834] netlink: 'syz.2.2939': attribute type 1 has an invalid length. [ 278.910927][ T69] veth0_macvtap: left allmulticast mode [ 278.917089][ T69] veth0_macvtap: left promiscuous mode [ 278.924268][ T69] veth1_vlan: left allmulticast mode [ 278.930928][ T69] veth1_macvtap: left promiscuous mode [ 278.937386][ T69] veth1_vlan: left promiscuous mode [ 279.430581][ T52] Bluetooth: hci0: command tx timeout [ 279.928058][T15858] C: renamed from lo (while UP) [ 279.940023][T15858] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 280.031515][T15861] set match dimension is over the limit! [ 280.169778][T15864] netlink: 'syz.3.2949': attribute type 2 has an invalid length. [ 280.206656][T15864] netlink: 'syz.3.2949': attribute type 2 has an invalid length. [ 280.291988][T15658] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 280.355230][T15658] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 280.401451][T15658] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 280.429938][T15658] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 280.476484][ T69] IPVS: stop unused estimator thread 0... [ 280.596952][T15895] block nbd4: not configured, cannot reconfigure [ 280.783082][T15658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.790271][T15907] netlink: 'syz.2.2958': attribute type 16 has an invalid length. [ 280.800912][T15907] __nla_validate_parse: 5 callbacks suppressed [ 280.800929][T15907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2958'. [ 280.841887][T15913] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2960'. [ 280.857836][T15914] wg1: entered promiscuous mode [ 280.863559][T15914] wg1: entered allmulticast mode [ 280.914178][T15658] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.951157][ T8000] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.958392][ T8000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.008797][ T8000] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.016003][ T8000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.388954][T15945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2970'. [ 281.498581][T15658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.510947][ T52] Bluetooth: hci0: command tx timeout [ 281.550692][T15954] TCP: TCP_TX_DELAY enabled [ 281.595218][T15658] veth0_vlan: entered promiscuous mode [ 281.611922][T15658] veth1_vlan: entered promiscuous mode [ 281.716215][T15658] veth0_macvtap: entered promiscuous mode [ 281.742183][T15658] veth1_macvtap: entered promiscuous mode [ 281.791537][T15658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.829677][T15658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.870271][ T1002] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.898255][ T1002] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.920253][T15967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2978'. [ 281.936904][ T1002] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.971134][ T1002] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.020120][T15973] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2980'. [ 282.049718][T15973] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2980'. [ 282.159946][ T196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.185484][ T196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.211458][T15978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2981'. [ 282.261224][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.282256][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.343161][T15981] pim6reg1: entered promiscuous mode [ 282.353486][T15981] pim6reg1: entered allmulticast mode [ 282.962936][T16009] tipc: Enabling of bearer rejected, failed to enable media [ 282.980219][T16014] netlink: 'syz.2.2990': attribute type 21 has an invalid length. [ 282.988564][T16006] tipc: Enabling of bearer rejected, failed to enable media [ 283.180559][T16025] tipc: Can't bind to reserved service type 0 [ 283.244520][ T5943] IPVS: starting estimator thread 0... [ 283.367719][T16030] IPVS: using max 32 ests per chain, 76800 per kthread [ 283.441820][ T5148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 283.452163][ T5148] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 283.460516][ T5148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 283.468841][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 283.476562][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 283.486283][T16040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2998'. [ 283.651559][T16035] syzkaller0 speed is unknown, defaulting to 1000 [ 283.763219][T16055] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3001'. [ 283.848864][T16058] netlink: 404 bytes leftover after parsing attributes in process `syz.3.3003'. [ 283.988062][ T5835] Bluetooth: hci0: command 0x0405 tx timeout [ 284.018668][ T1002] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.127312][ T1002] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.334039][ T1002] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.526753][ T1002] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.644687][T16071] ip6gre1: entered promiscuous mode [ 284.662446][T16071] ip6gre1: entered allmulticast mode [ 284.872133][T16093] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 285.588615][ T5835] Bluetooth: hci2: command tx timeout [ 286.319205][T16110] __nla_validate_parse: 2 callbacks suppressed [ 286.319219][T16110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3014'. [ 286.365736][T16035] chnl_net:caif_netlink_parms(): no params data found [ 286.478954][T16117] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3016'. [ 286.540175][ T1002] veth0_to_bridge: left allmulticast mode [ 286.551566][ T1002] veth0_to_bridge: left promiscuous mode [ 286.563682][ T1002] bridge0: port 4(veth0_to_bridge) entered disabled state [ 286.580495][ T1002] bridge_slave_0: left allmulticast mode [ 286.588269][ T1002] bridge_slave_0: left promiscuous mode [ 286.596437][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.871063][ T1002] bond2 (unregistering): (slave gretap1): Releasing active interface [ 287.343046][ T1002] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.354002][ T1002] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.363752][ T1002] ` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 287.373507][ T1002] ` (unregistering): Released all slaves [ 287.386486][ T1002] bond1 (unregistering): Released all slaves [ 287.400139][ T1002] bond2 (unregistering): Released all slaves [ 287.495024][ T1002] bond3 (unregistering): (slave veth7): Releasing active interface [ 287.505595][ T1002] bond3 (unregistering): Released all slaves [ 287.519054][ T1002] bond4 (unregistering): Released all slaves [ 287.608340][ T1002] bond0 (unregistering): Released all slaves [ 287.620755][ T1002] bond5 (unregistering): Released all slaves [ 287.633261][ T1002] bond6 (unregistering): Released all slaves [ 287.669118][ T5835] Bluetooth: hci2: command tx timeout [ 287.980374][T16035] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.987539][T16141] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3023'. [ 287.998433][T16035] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.016798][T16035] bridge_slave_0: entered allmulticast mode [ 288.026077][T16035] bridge_slave_0: entered promiscuous mode [ 288.226039][T16035] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.250869][T16035] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.262135][T16035] bridge_slave_1: entered allmulticast mode [ 288.273877][T16035] bridge_slave_1: entered promiscuous mode [ 288.442292][T16162] ipt_REJECT: TCP_RESET invalid for non-tcp [ 288.455603][T16163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3028'. [ 288.490834][T16035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.562369][T16035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.577534][T16173] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3032'. [ 288.832152][T16035] team0: Port device team_slave_0 added [ 288.874218][T16035] team0: Port device team_slave_1 added [ 289.071721][T16203] netlink: 'syz.2.3038': attribute type 3 has an invalid length. [ 289.195425][T16035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.202532][T16035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.229831][T16035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.242805][T16035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.268550][T16035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.318470][T16035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.465239][T16213] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3041'. [ 289.502915][T16213] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3041'. [ 289.630268][ T1002] hsr_slave_0: left promiscuous mode [ 289.646069][ T1002] hsr_slave_1: left promiscuous mode [ 289.675656][ T1002] vlan0: left allmulticast mode [ 289.687802][ T1002] veth0_vlan: left allmulticast mode [ 289.697401][ T1002] vlan0: left promiscuous mode [ 289.748300][ T5835] Bluetooth: hci2: command tx timeout [ 289.895406][T16244] netlink: 'syz.3.3044': attribute type 12 has an invalid length. [ 290.166555][ T1002] team0 (unregistering): Port device team_slave_1 removed [ 290.202321][ T1002] team0 (unregistering): Port device team_slave_0 removed [ 290.523535][T16035] hsr_slave_0: entered promiscuous mode [ 290.530488][T16035] hsr_slave_1: entered promiscuous mode [ 290.536613][T16035] debugfs: 'hsr0' already exists in 'hsr' [ 290.542406][T16035] Cannot create hsr debugfs directory [ 290.640855][T16231] geneve0: left promiscuous mode [ 290.834960][T16231] vlan0: left promiscuous mode [ 290.840148][T16231] vlan0: left allmulticast mode [ 290.852435][T16231] veth0_vlan: left allmulticast mode [ 290.906943][T16231] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 290.964004][T16231] ip6gre1: left allmulticast mode [ 290.982292][T16231] geneve2: left allmulticast mode [ 290.998585][T16231] gtp0: left allmulticast mode [ 291.043094][T16231] bridge0: left allmulticast mode [ 291.060316][T16231] gtp2: left promiscuous mode [ 291.065048][T16231] gtp2: left allmulticast mode [ 291.088408][T16231] vlan1: left promiscuous mode [ 291.096220][T16231] vlan1: left allmulticast mode [ 291.101434][T16231] hsr_slave_1: left allmulticast mode [ 291.117523][T16231] bond5: left promiscuous mode [ 291.192314][T16244] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 291.288770][ T196] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.314883][ T196] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.336733][ T196] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 291.346328][ T196] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.358185][ T196] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.367284][ T196] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 291.378233][ T196] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.387259][ T196] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.398000][ T196] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 291.488400][ T196] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.502936][ T196] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.531744][ T196] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 291.639311][ T1002] IPVS: stop unused estimator thread 0... [ 291.654282][T16263] wireguard0: entered promiscuous mode [ 291.668335][T16263] wireguard0: entered allmulticast mode [ 291.684573][T16263] team0: Device wireguard0 is of different type [ 291.744393][T16272] macvtap0: Device is already in use. [ 291.815580][T16275] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3058'. [ 291.832225][T16274] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3058'. [ 291.841949][ T5835] Bluetooth: hci2: command tx timeout [ 291.850766][T16275] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3058'. [ 291.860944][T16274] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3058'. [ 292.034517][T16288] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3059'. [ 292.111953][T16292] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.3062'. [ 292.289736][T16303] netlink: 'syz.1.3064': attribute type 12 has an invalid length. [ 292.310190][T16303] netlink: 'syz.1.3064': attribute type 29 has an invalid length. [ 292.338746][T16303] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3064'. [ 292.353912][T16303] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3064'. [ 292.417397][T16309] x_tables: duplicate underflow at hook 3 [ 292.480979][T16314] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3068'. [ 292.557120][T16317] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3069'. [ 292.881184][T16329] syzkaller0: entered promiscuous mode [ 292.891735][T16329] syzkaller0: entered allmulticast mode [ 292.902779][T16035] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 292.957252][T16035] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 292.971738][T16035] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 292.983983][T16035] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 293.085431][T16035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.124426][T16035] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.139718][ T196] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.146948][ T196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.167136][ T196] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.174337][ T196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.331748][T16035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.505374][T16035] veth0_vlan: entered promiscuous mode [ 293.518359][T16035] veth1_vlan: entered promiscuous mode [ 293.545622][T16035] veth0_macvtap: entered promiscuous mode [ 293.554697][T16035] veth1_macvtap: entered promiscuous mode [ 293.571267][T16035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.586238][T16035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.602799][ T8019] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.611963][ T8019] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.622005][ T8019] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.631933][ T8019] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.694096][ T196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.709808][ T196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.733825][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.741944][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.104330][T16362] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode [ 311.143434][T16368] netlink: 'syz.1.3081': attribute type 29 has an invalid length. [ 311.228817][T16373] netlink: 'syz.1.3081': attribute type 29 has an invalid length. [ 311.261320][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 311.278026][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 311.286802][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 311.288980][T16368] __nla_validate_parse: 3 callbacks suppressed [ 311.288995][T16368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3081'. [ 311.322143][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 311.337236][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 311.462175][T16388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.471035][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.489785][T16368] bond6 (unregistering): Released all slaves [ 311.722047][T16401] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3088'. [ 311.767850][T16400] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3088'. [ 311.774965][T16407] netlink: 'syz.2.3088': attribute type 9 has an invalid length. [ 311.847733][T16407] netlink: 'syz.2.3088': attribute type 11 has an invalid length. [ 311.867804][T16407] netlink: 'syz.2.3088': attribute type 12 has an invalid length. [ 311.887261][T16415] syzkaller0: entered promiscuous mode [ 311.897924][T16407] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.3088'. [ 311.913790][T16407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3088'. [ 311.926526][T16415] syzkaller0: entered allmulticast mode [ 312.024007][T16415] bond1: Unable to set down delay as MII monitoring is disabled [ 312.047232][T16415] bond1 (unregistering): Released all slaves [ 312.264981][T16374] chnl_net:caif_netlink_parms(): no params data found [ 312.309533][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.441269][T16374] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.447981][T16450] sctp: [Deprecated]: syz.0.3102 (pid 16450) Use of int in maxseg socket option. [ 312.447981][T16450] Use struct sctp_assoc_value instead [ 312.463178][T16374] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.488509][T16374] bridge_slave_0: entered allmulticast mode [ 312.507047][T16374] bridge_slave_0: entered promiscuous mode [ 312.532797][T16374] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.543056][T16374] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.551442][ T7237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.565641][T16374] bridge_slave_1: entered allmulticast mode [ 312.581441][T16374] bridge_slave_1: entered promiscuous mode [ 312.624522][T16461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3103'. [ 312.656395][T16461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3103'. [ 312.718190][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.735899][T16467] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3105'. [ 312.753858][T16374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.775345][T16374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.893019][T16374] team0: Port device team_slave_0 added [ 312.902088][T16374] team0: Port device team_slave_1 added [ 312.965435][T16478] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 312.993630][T16374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.001052][T16374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.029083][T16374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.053317][T16374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.061376][T16374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.090361][T16374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.201185][T16374] hsr_slave_0: entered promiscuous mode [ 313.217840][T16374] hsr_slave_1: entered promiscuous mode [ 313.252969][T16374] debugfs: 'hsr0' already exists in 'hsr' [ 313.267871][T16374] Cannot create hsr debugfs directory [ 313.342721][T16494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3114'. [ 313.408726][T16502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3114'. [ 313.429548][T16503] netlink: 'syz.0.3113': attribute type 4 has an invalid length. [ 313.431043][ T52] Bluetooth: hci3: command tx timeout [ 313.761957][T16528] x_tables: duplicate underflow at hook 1 [ 314.001483][T16540] netlink: 'syz.0.3125': attribute type 7 has an invalid length. [ 314.078400][T16542] syzkaller0: entered promiscuous mode [ 314.083933][T16542] syzkaller0: entered allmulticast mode [ 314.227434][T16374] bond0: (slave netdevsim0): Releasing backup interface [ 314.411061][T16559] bridge_slave_1: left allmulticast mode [ 314.417993][T16559] bridge_slave_1: left promiscuous mode [ 314.423801][T16559] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.443038][T16559] bridge_slave_0: left allmulticast mode [ 314.449197][T16559] bridge_slave_0: left promiscuous mode [ 314.455150][T16559] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.629602][T16374] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 314.667408][T16374] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 314.688744][T16374] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 314.730678][T16374] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 314.753940][T16575] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 315.040586][T16595] IPv4: Oversized IP packet from 127.202.26.0 [ 315.042502][T16374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.103741][T16374] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.125080][ T8000] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.132296][ T8000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.189224][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.196424][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.334079][T16614] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 315.460443][T16620] gretap4: entered promiscuous mode [ 315.465777][T16620] gretap4: entered allmulticast mode [ 315.508962][ T52] Bluetooth: hci3: command tx timeout [ 315.609759][T16374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.686942][T16374] veth0_vlan: entered promiscuous mode [ 315.717529][T16374] veth1_vlan: entered promiscuous mode [ 315.811259][T16374] veth0_macvtap: entered promiscuous mode [ 315.835177][T16374] veth1_macvtap: entered promiscuous mode [ 315.872752][T16374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.895704][T16374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.925448][ T6262] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.936904][ T6262] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.947518][ T6262] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.950384][T16642] unsupported nlmsg_type 40 [ 315.988626][ T6262] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.191359][T16649] bond1: Removing last ns target with arp_interval on [ 316.274975][ T5976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.304169][T16665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.309194][ T5976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.330606][T16666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.358571][T16673] xt_cluster: node mask cannot exceed total number of nodes [ 316.376878][T16673] __nla_validate_parse: 12 callbacks suppressed [ 316.376895][T16673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3164'. [ 316.395216][T16674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3160'. [ 317.087691][ T196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.122706][ T196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.194767][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 317.196889][T16696] Cannot find set identified by id 1 to match [ 317.423033][T16693] netlink: 'syz.2.3170': attribute type 1 has an invalid length. [ 317.475139][T16693] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3170'. [ 317.589275][ T52] Bluetooth: hci3: command tx timeout [ 317.682351][T16723] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3179'. [ 317.728576][T16723] netlink: 'syz.4.3179': attribute type 1 has an invalid length. [ 317.736349][T16723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3179'. [ 317.779060][T16725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3180'. [ 317.805521][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.826878][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.840313][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.851495][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.870530][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.923209][T16730] gre1: entered promiscuous mode [ 317.978646][T16730] gre1: entered allmulticast mode [ 318.206137][T16747] netlink: 'syz.2.3187': attribute type 1 has an invalid length. [ 318.299042][T16756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3187'. [ 318.317030][T16747] bond2: entered promiscuous mode [ 318.326221][T16747] 8021q: adding VLAN 0 to HW filter on device bond2 [ 318.373762][T16756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3187'. [ 318.402414][T16747] bond2: (slave bridge2): making interface the new active one [ 318.428321][T16747] bridge2: entered promiscuous mode [ 318.439906][T16747] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 318.691570][T16774] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3193'. [ 318.744444][T16782] x_tables: duplicate underflow at hook 2 [ 318.778621][T16785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3196'. [ 318.800605][T16778] bond3: Unable to set down delay as MII monitoring is disabled [ 318.846135][T16778] bond3 (unregistering): Released all slaves [ 318.911687][T16385] udevd[16385]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 318.923385][T16789] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 318.954421][T16382] udevd[16382]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 318.973449][T16789] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 319.196546][T16726] chnl_net:caif_netlink_parms(): no params data found [ 319.434392][T16816] 8021q: VLANs not supported on wg1 [ 319.555515][T16726] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.573302][T16726] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.593609][T16726] bridge_slave_0: entered allmulticast mode [ 319.602415][T16726] bridge_slave_0: entered promiscuous mode [ 319.610405][T16823] syzkaller1: entered promiscuous mode [ 319.615989][T16823] syzkaller1: entered allmulticast mode [ 319.649934][T16726] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.658334][T16726] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.667970][ T5835] Bluetooth: hci3: command tx timeout [ 319.674860][T16726] bridge_slave_1: entered allmulticast mode [ 319.687420][T16726] bridge_slave_1: entered promiscuous mode [ 319.799680][T16726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.831809][T16726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.909088][ T5835] Bluetooth: hci4: command tx timeout [ 319.939860][T16726] team0: Port device team_slave_0 added [ 319.953835][T16726] team0: Port device team_slave_1 added [ 320.028039][T16726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.028773][T16842] IPVS: length: 62 != 8 [ 320.035689][T16726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.069762][T16726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.080955][T16842] tipc: Started in network mode [ 320.086243][T16842] tipc: Node identity 9, cluster identity 4711 [ 320.093552][T16842] tipc: Node number set to 9 [ 320.099902][T16726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.107282][T16726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.134051][T16726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.191680][T16726] hsr_slave_0: entered promiscuous mode [ 320.198965][T16726] hsr_slave_1: entered promiscuous mode [ 320.208019][T16726] debugfs: 'hsr0' already exists in 'hsr' [ 320.213885][T16726] Cannot create hsr debugfs directory [ 320.413260][T16726] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.424529][T16726] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.435387][T16726] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 320.479504][T16859] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.516399][T16726] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.538207][T16832] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 320.554264][T16726] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.574994][T16726] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 320.605129][T16863] syzkaller0: entered promiscuous mode [ 320.614108][T16863] syzkaller0: entered allmulticast mode [ 320.643109][T16726] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.657136][T16726] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.667427][T16726] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 320.742292][T16726] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.755885][T16726] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.784530][T16726] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 320.928219][T16881] netlink: 'syz.0.3226': attribute type 3 has an invalid length. [ 320.991897][T16726] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 321.021522][T16726] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 321.048224][T16726] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 321.076988][T16888] tipc: Started in network mode [ 321.087426][T16888] tipc: Node identity e0000002, cluster identity 4711 [ 321.095163][T16888] tipc: Enabling of bearer rejected, failed to enable media [ 321.103864][T16726] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 321.170793][ T5889] IPVS: starting estimator thread 0... [ 321.194132][T16891] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20002 [ 321.278605][T16901] IPVS: using max 28 ests per chain, 67200 per kthread [ 321.377718][T16726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.388511][T16908] veth0_macvtap: left promiscuous mode [ 321.424797][T16913] __nla_validate_parse: 8 callbacks suppressed [ 321.424814][T16913] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3235'. [ 321.434554][T16726] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.483364][ T8019] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.490616][ T8019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.524952][ T8019] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.532192][ T8019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.547396][T16917] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.3235'. [ 321.562618][T16917] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3235'. [ 321.618728][T16919] tipc: Enabling of bearer rejected, media not registered [ 321.732008][T16928] : entered promiscuous mode [ 321.758038][ T5835] Bluetooth: hci0: command 0x0405 tx timeout [ 321.821903][T16936] mac80211_hwsim hwsim30 wlan1: left allmulticast mode [ 321.835366][T16936] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3241'. [ 321.855864][T16936] netlink: 'syz.0.3241': attribute type 10 has an invalid length. [ 321.891362][T16936] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 321.989020][ T5835] Bluetooth: hci4: command tx timeout [ 322.060056][T16947] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3245'. [ 322.087551][T16947] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3245'. [ 322.106270][ T30] audit: type=1107 audit(1766936975.962:6): pid=16952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¸óà—,¬˜5;ŸÐë^\étú†' V¦xJ2äÁN5L¢V4r7+h z®œŽP}øk‡lÅ@›ò™|éÞ!ö' [ 322.231366][T16726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.367143][T16726] veth0_vlan: entered promiscuous mode [ 322.386758][T16726] veth1_vlan: entered promiscuous mode [ 322.446503][T16726] veth0_macvtap: entered promiscuous mode [ 322.463076][T16967] netlink: 'syz.4.3251': attribute type 1 has an invalid length. [ 322.465375][T16726] veth1_macvtap: entered promiscuous mode [ 322.514313][T16726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.554741][T16726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.601334][T16972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3252'. [ 322.642914][ T6262] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.686449][T16976] netlink: 'syz.4.3254': attribute type 1 has an invalid length. [ 322.714778][ T6262] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.772216][T16976] 8021q: adding VLAN 0 to HW filter on device bond1 [ 322.784069][ T6262] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.793233][ T6262] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.806972][T16977] bond1: option mode: unable to set because the bond device is up [ 322.866870][T16976] bond1: (slave ip6gretap1): making interface the new active one [ 322.886872][T16976] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 323.094424][T16993] netlink: 'syz.2.3257': attribute type 9 has an invalid length. [ 323.099119][ T8000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.122237][ T8000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.126494][T16993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3257'. [ 323.163687][T16993] netlink: 'syz.2.3257': attribute type 1 has an invalid length. [ 323.247283][T16997] bond3: (slave gretap1): making interface the new active one [ 323.258845][T16997] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 323.272786][ T5976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.289962][ T5976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.399978][T17008] netlink: 'syz.4.3261': attribute type 1 has an invalid length. [ 323.413078][T17008] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3261'. [ 323.497365][T17015] netlink: 'syz.4.3261': attribute type 2 has an invalid length. [ 323.636885][T17023] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3265'. [ 324.072171][ T5835] Bluetooth: hci4: command tx timeout [ 324.526048][T17075] netlink: 'syz.3.3279': attribute type 13 has an invalid length. [ 324.638295][T17075] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 324.681761][T17085] v: renamed from dummy0 (while UP) [ 325.105344][T17116] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 325.462373][T17146] netlink: 'syz.2.3300': attribute type 4 has an invalid length. [ 325.468614][T17143] netlink: 'syz.4.3298': attribute type 2 has an invalid length. [ 325.484865][T17146] netlink: 'syz.2.3300': attribute type 4 has an invalid length. [ 325.718424][T17156] 8021q: adding VLAN 0 to HW filter on device bond4 [ 325.742713][T17162] C: renamed from lo (while UP) [ 325.779538][T17162] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 326.011995][T17178] bond5: option coupled_control: invalid value (52) [ 326.073100][T17178] bond5 (unregistering): Released all slaves [ 326.166915][ T5835] Bluetooth: hci4: command tx timeout [ 326.226638][T17187] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 326.246225][T17187] bond2 (unregistering): Released all slaves [ 326.476658][T17200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.787838][T17220] __nla_validate_parse: 11 callbacks suppressed [ 326.787856][T17220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3319'. [ 326.891283][T17228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3319'. [ 326.991558][T17232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3322'. [ 327.050906][T17228] hsr_slave_1 (unregistering): left promiscuous mode [ 327.255547][T17242] syzkaller1: entered promiscuous mode [ 327.270540][T17242] syzkaller1: entered allmulticast mode [ 327.482104][T17250] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 327.559966][T17252] validate_nla: 1 callbacks suppressed [ 327.559983][T17252] netlink: 'syz.0.3330': attribute type 30 has an invalid length. [ 327.565515][T17254] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3329'. [ 327.586816][T17254] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 327.640149][T17254] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 327.759267][T17260] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3331'. [ 327.840780][T17266] netlink: 'syz.0.3334': attribute type 1 has an invalid length. [ 328.002235][T17271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.021810][T17272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3337'. [ 328.390365][T17293] netlink: 'syz.0.3343': attribute type 4 has an invalid length. [ 328.754817][T17318] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 328.839035][T17323] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3351'. [ 329.146555][T17336] netlink: 'syz.1.3355': attribute type 1 has an invalid length. [ 329.230113][T17339] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3355'. [ 329.241725][T17340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3356'. [ 329.267929][T17339] macvlan0: entered promiscuous mode [ 329.275485][T17339] macvlan0: entered allmulticast mode [ 329.301821][T17339] veth1_vlan: entered allmulticast mode [ 329.396944][T17341] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.433918][T17349] netlink: 'syz.3.3358': attribute type 1 has an invalid length. [ 329.485769][T17349] 8021q: adding VLAN 0 to HW filter on device bond1 [ 329.526010][T17341] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.600113][T17352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3359'. [ 329.720745][T17341] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.838693][T17341] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.910632][T17364] pim6reg1: entered promiscuous mode [ 329.928079][T17364] pim6reg1: entered allmulticast mode [ 330.023869][ T8028] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.056011][ T8028] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.079398][T17372] bridge1: entered promiscuous mode [ 330.084779][T17372] bridge1: entered allmulticast mode [ 330.097550][T17372] team0: Port device bridge1 added [ 330.131237][T17373] bridge0: port 3(team0) entered blocking state [ 330.138242][T17373] bridge0: port 3(team0) entered disabled state [ 330.144795][T17373] team0: entered allmulticast mode [ 330.150106][T17373] team_slave_0: entered allmulticast mode [ 330.155868][T17373] team_slave_1: entered allmulticast mode [ 330.164652][T17373] team0: entered promiscuous mode [ 330.170559][T17373] team_slave_0: entered promiscuous mode [ 330.176347][T17373] team_slave_1: entered promiscuous mode [ 330.183318][T17373] bridge0: port 3(team0) entered blocking state [ 330.189717][T17373] bridge0: port 3(team0) entered forwarding state [ 330.225680][ T8028] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.258504][ T8010] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.371018][T17387] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 330.759781][T17367] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 331.410851][T17463] geneve2: entered promiscuous mode [ 331.416259][T17463] geneve2: entered allmulticast mode [ 331.461152][T17464] ip6erspan0: entered promiscuous mode [ 331.466661][T17464] ip6erspan0: entered allmulticast mode [ 331.518877][ T6262] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 331.550056][ T6262] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 331.647771][ T6262] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 331.656620][ T6262] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 331.846680][T17494] openvswitch: netlink: Missing key (keys=40, expected=100) [ 331.929709][T17501] __nla_validate_parse: 8 callbacks suppressed [ 331.929727][T17501] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3402'. [ 331.990196][ T5835] Bluetooth: hci4: command 0x0401 tx timeout [ 332.194281][T17533] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3411'. [ 332.416390][T17545] syzkaller1: entered promiscuous mode [ 332.436597][T17545] syzkaller1: entered allmulticast mode [ 332.717049][T17568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3419'. [ 333.294165][T17599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3428'. [ 333.424902][T17609] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3432'. [ 333.682054][T17628] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3436'. [ 333.768751][T17638] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3437'. [ 333.932069][T17653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3443'. [ 334.192865][T17671] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 334.825144][T17710] openvswitch: netlink: IP tunnel dst address not specified [ 334.882639][T17710] geneve2: entered promiscuous mode [ 335.124771][T17733] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3469'. [ 335.310861][T17748] veth0: entered promiscuous mode [ 335.317281][T17748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3473'. [ 335.449412][T17754] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 335.639949][T17774] netlink: 'syz.0.3480': attribute type 11 has an invalid length. [ 335.970461][T17801] netlink: 'syz.0.3489': attribute type 1 has an invalid length. [ 335.990780][T17801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.008488][T17796] SET target dimension over the limit! [ 336.246545][T17811] bond5: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 336.593709][T17837] netlink: 'syz.1.3501': attribute type 9 has an invalid length. [ 336.907897][T17854] netlink: 'syz.2.3506': attribute type 4 has an invalid length. [ 336.954551][T17854] netlink: 'syz.2.3506': attribute type 1 has an invalid length. [ 336.989806][T17854] __nla_validate_parse: 3 callbacks suppressed [ 336.989822][T17854] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3506'. [ 337.200726][T17871] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3512'. [ 337.218386][T17874] netlink: 'syz.4.3513': attribute type 7 has an invalid length. [ 337.364988][T17889] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3517'. [ 337.396387][T17895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3517'. [ 337.615083][T17906] openvswitch: netlink: IPv6 tunnel dst address is zero [ 337.673591][T17914] IPv6: Can't replace route, no match found [ 338.959340][T17912] dvmrp0: entered allmulticast mode [ 339.060149][T17919] openvswitch: netlink: IP tunnel dst address not specified [ 339.085429][T17919] tipc: Started in network mode [ 339.095413][T17924] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3529'. [ 339.097909][T17919] tipc: Node identity 9aaede725cd9, cluster identity 4711 [ 339.111971][T17924] Bluetooth: MGMT ver 1.23 [ 339.134919][T17919] tipc: Enabled bearer , priority 11 [ 339.154206][T17919] netlink: 'syz.0.3528': attribute type 13 has an invalid length. [ 339.180234][T17928] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3530'. [ 339.202850][T17928] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3530'. [ 339.212528][T17928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3530'. [ 339.218238][T17924] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3529'. [ 339.234929][T17933] netlink: 'syz.1.3531': attribute type 2 has an invalid length. [ 339.245570][T17933] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3531'. [ 339.634018][T17951] netlink: 'syz.2.3537': attribute type 1 has an invalid length. [ 339.706446][T17952] sctp: [Deprecated]: syz.1.3536 (pid 17952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 339.706446][T17952] Use struct sctp_sack_info instead [ 339.837440][T17956] netlink: 'syz.4.3538': attribute type 1 has an invalid length. [ 340.096580][T17967] ip6gre1: entered promiscuous mode [ 340.114930][T17967] ip6gre1: entered allmulticast mode [ 340.140652][ T5937] tipc: Node number set to 3329744498 [ 340.560109][T18001] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 340.716302][T18005] netlink: 'syz.1.3553': attribute type 1 has an invalid length. [ 341.108525][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 341.127827][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 341.138400][ T5937] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 341.551757][T18062] validate_nla: 1 callbacks suppressed [ 341.551775][T18062] netlink: 'syz.1.3567': attribute type 6 has an invalid length. [ 341.618392][ T5936] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 341.717817][ T5936] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 341.966263][T18099] netlink: 'syz.1.3577': attribute type 16 has an invalid length. [ 342.011216][T18099] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 342.032154][T18099] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 342.046112][T18099] gretap1: entered promiscuous mode [ 342.053559][T18099] gretap1: entered allmulticast mode [ 342.204709][T18121] __nla_validate_parse: 11 callbacks suppressed [ 342.204723][T18121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3585'. [ 342.362027][T18134] xt_hashlimit: size too large, truncated to 1048576 [ 342.561140][T18145] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.3591'. [ 342.779644][T18156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3595'. [ 343.080038][T18166] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3599'. [ 343.092871][T18166] netlink: 'syz.2.3599': attribute type 30 has an invalid length. [ 343.122670][T18166] bond6: option arp_missed_max: invalid value (0) [ 343.129317][T18166] bond6: option arp_missed_max: allowed values 1 - 255 [ 343.149123][T18166] bond6 (unregistering): Released all slaves [ 343.766396][T18214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3614'. [ 343.775862][T18214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3614'. [ 343.810573][T18214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3614'. [ 343.812539][T18217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3613'. [ 343.820898][T18214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3614'. [ 343.840837][T18217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3613'. [ 344.521975][T18224] netlink: 'syz.0.3615': attribute type 1 has an invalid length. [ 344.538064][T18225] netlink: 'syz.0.3615': attribute type 1 has an invalid length. [ 344.894724][T18246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.909744][T18246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.921462][T18246] bond0 (unregistering): Released all slaves [ 345.000554][T18261] pim6reg1: entered promiscuous mode [ 345.005897][T18261] pim6reg1: entered allmulticast mode [ 345.071665][T18268] netlink: 'syz.3.3625': attribute type 21 has an invalid length. [ 345.183659][T18268] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 345.222518][T18268] bond2 (unregistering): Released all slaves [ 345.306815][T18289] wlan0 speed is unknown, defaulting to 1000 [ 345.351071][T18289] wlan0 speed is unknown, defaulting to 1000 [ 345.429805][T18289] wlan0 speed is unknown, defaulting to 1000 [ 345.437772][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 345.494877][T18299] netlink: 'syz.3.3637': attribute type 1 has an invalid length. [ 345.516234][T18289] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 345.561096][T18302] netlink: 'syz.2.3638': attribute type 21 has an invalid length. [ 345.592887][T18299] 8021q: adding VLAN 0 to HW filter on device bond2 [ 345.600460][T18302] netlink: 'syz.2.3638': attribute type 22 has an invalid length. [ 345.609836][T18302] netlink: 'syz.2.3638': attribute type 23 has an invalid length. [ 345.619598][T18289] wlan0 speed is unknown, defaulting to 1000 [ 345.689974][T18289] wlan0 speed is unknown, defaulting to 1000 [ 345.720948][T18306] 9: entered promiscuous mode [ 345.837029][T18289] wlan0 speed is unknown, defaulting to 1000 [ 345.889805][T18289] wlan0 speed is unknown, defaulting to 1000 [ 345.898353][T18316] syzkaller1: entered promiscuous mode [ 345.903969][T18316] syzkaller1: entered allmulticast mode [ 345.949659][T18289] wlan0 speed is unknown, defaulting to 1000 [ 346.047889][T18289] wlan0 speed is unknown, defaulting to 1000 [ 346.066136][T18289] wlan0 speed is unknown, defaulting to 1000 [ 346.100804][T18289] wlan0 speed is unknown, defaulting to 1000 [ 346.105587][T18331] .: renamed from bridge_slave_1 (while UP) [ 346.135977][T18289] wlan0 speed is unknown, defaulting to 1000 [ 346.236439][T18335] syzkaller1: entered promiscuous mode [ 346.259207][T18335] syzkaller1: entered allmulticast mode [ 346.454192][T18354] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 346.603048][T18352] team0: left allmulticast mode [ 346.633339][T18352] team_slave_0: left allmulticast mode [ 346.641070][T18352] team_slave_1: left allmulticast mode [ 346.647487][T18352] team0: left promiscuous mode [ 346.668816][T18352] team_slave_0: left promiscuous mode [ 346.674472][T18352] team_slave_1: left promiscuous mode [ 346.718444][T18352] bridge0: port 3(team0) entered disabled state [ 346.771736][T18352] bridge_slave_0: left allmulticast mode [ 346.777435][T18352] bridge_slave_0: left promiscuous mode [ 346.802935][T18352] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.841549][T18352] bridge_slave_1: left allmulticast mode [ 346.847347][T18352] bridge_slave_1: left promiscuous mode [ 346.866885][T18352] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.931848][T18352] team0: Port device team_slave_0 removed [ 346.956489][T18385] validate_nla: 6 callbacks suppressed [ 346.956507][T18385] netlink: 'syz.0.3663': attribute type 1 has an invalid length. [ 346.963582][T18352] team0: Port device team_slave_1 removed [ 346.982568][T18386] netlink: 'syz.2.3664': attribute type 5 has an invalid length. [ 346.992218][T18352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.004220][T18352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.021087][T18352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.031239][T18352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.043207][T18389] netlink: 'syz.2.3664': attribute type 11 has an invalid length. [ 347.054949][T18389] netlink: 'syz.2.3664': attribute type 13 has an invalid length. [ 347.064931][T18352] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 347.102170][T18390] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 347.173736][T18395] v: renamed from dummy0 (while UP) [ 347.363939][T18413] netlink: 'syz.2.3672': attribute type 1 has an invalid length. [ 347.406023][T18403] dvmrp0: entered allmulticast mode [ 347.452322][T18410] dvmrp0: left allmulticast mode [ 347.585196][T18422] __nla_validate_parse: 22 callbacks suppressed [ 347.585216][T18422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3675'. [ 347.602254][T18424] netlink: 'syz.0.3676': attribute type 26 has an invalid length. [ 347.611535][T18420] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3674'. [ 347.624291][T18425] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3674'. [ 347.655316][T18420] Bluetooth: MGMT ver 1.23 [ 347.885695][ T5937] IPVS: starting estimator thread 0... [ 347.988174][T18447] IPVS: using max 33 ests per chain, 79200 per kthread [ 348.197356][T18468] sock: sock_set_timeout: `syz.2.3689' (pid 18468) tries to set negative timeout [ 348.284922][T18468] bond7: Unable to set down delay as MII monitoring is disabled [ 348.296666][T18468] bond7 (unregistering): Released all slaves [ 348.372745][T18471] bond7: Unable to set down delay as MII monitoring is disabled [ 348.383604][T18471] bond7 (unregistering): Released all slaves [ 348.460962][T18482] netlink: 'syz.3.3693': attribute type 10 has an invalid length. [ 348.548576][T18482] batman_adv: batadv0: Adding interface: netdevsim0 [ 348.574776][T18482] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.648370][T18482] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 349.253303][T18516] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.466750][T18516] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.602239][T18516] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.750553][T18555] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 349.750803][T18516] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.012442][T18572] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 350.097693][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.114694][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.152857][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.196776][ T8000] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.341723][T18596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3725'. [ 350.691061][T18626] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3734'. [ 350.705873][T18626] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3734'. [ 350.758513][T18630] bridge0: port 1(macsec0) entered blocking state [ 350.793861][T18630] bridge0: port 1(macsec0) entered disabled state [ 350.803674][T18630] macsec0: entered allmulticast mode [ 350.811940][T18630] veth1_macvtap: entered allmulticast mode [ 350.820657][T18630] macsec0: entered promiscuous mode [ 351.121310][T18654] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 351.136335][T18654] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 351.211923][T18660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3743'. [ 351.226672][T18662] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3744'. [ 351.314609][T18660] can: request_module (can-proto-0) failed. [ 351.442773][T18674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3749'. [ 351.601324][T18683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3752'. [ 351.874767][T18709] bond3: option mode: invalid value (133) [ 351.883973][T18709] bond3 (unregistering): Released all slaves [ 352.185968][T18734] netlink: 'syz.4.3769': attribute type 9 has an invalid length. [ 352.195612][T18734] netlink: 'syz.4.3769': attribute type 6 has an invalid length. [ 352.209980][T18735] netlink: 'syz.4.3769': attribute type 9 has an invalid length. [ 352.223547][T18735] netlink: 'syz.4.3769': attribute type 6 has an invalid length. [ 352.249099][T18739] netlink: 'syz.0.3770': attribute type 27 has an invalid length. [ 352.286151][T18742] netlink: 'syz.3.3772': attribute type 1 has an invalid length. [ 352.299090][T18735] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 352.312776][T18742] syzkaller0: entered promiscuous mode [ 352.319846][T18742] syzkaller0: entered allmulticast mode [ 352.335456][T18739] netlink: 'syz.0.3770': attribute type 4 has an invalid length. [ 352.500966][T18750] delete_channel: no stack [ 352.650179][T18761] __nla_validate_parse: 3 callbacks suppressed [ 352.650198][T18761] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3776'. [ 352.711817][T18763] gtp0: entered promiscuous mode [ 352.738203][T18763] gtp0: entered allmulticast mode [ 352.782651][T18766] bond0: entered promiscuous mode [ 352.791057][T18766] bond_slave_0: entered promiscuous mode [ 352.797142][T18766] bond_slave_1: entered promiscuous mode [ 352.903476][T18775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3781'. [ 353.066695][T18787] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3785'. [ 353.225322][T18798] netlink: 'syz.0.3788': attribute type 1 has an invalid length. [ 353.258657][T18799] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3788'. [ 353.271808][T18798] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 353.358167][T18813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3793'. [ 353.628053][T18832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.640805][T18832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3798'. [ 353.659877][T18832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3798'. [ 353.677752][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 354.046363][ T8028] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 354.138967][T18855] netlink: 'syz.4.3805': attribute type 2 has an invalid length. [ 354.154323][T18855] 9: entered promiscuous mode [ 354.449708][T18875] netlink: 'syz.1.3811': attribute type 1 has an invalid length. [ 354.465972][T18874] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3812'. [ 354.482108][T18874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3812'. [ 354.492259][T18875] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 354.503937][T18875] bond0 (unregistering): Released all slaves [ 354.548626][T18878] block nbd4: server does not support multiple connections per device. [ 354.580064][T18878] block nbd4: shutting down sockets [ 354.593221][T18884] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3814'. [ 355.055228][T18918] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 355.254255][T18921] bond3 (unregistering): Released all slaves [ 355.648934][T18935] team0: entered promiscuous mode [ 355.690946][T18935] team_slave_0: entered promiscuous mode [ 355.737411][T18935] team_slave_1: entered promiscuous mode [ 355.753754][T18935] bridge0: port 3(team0) entered blocking state [ 355.762096][T18935] bridge0: port 3(team0) entered disabled state [ 355.770909][T18935] team0: entered allmulticast mode [ 355.797648][T18935] team_slave_0: entered allmulticast mode [ 355.803453][T18935] team_slave_1: entered allmulticast mode [ 355.816949][T18935] bridge0: port 3(team0) entered blocking state [ 355.823435][T18935] bridge0: port 3(team0) entered forwarding state [ 355.901922][T18955] sctp: [Deprecated]: syz.3.3832 (pid 18955) Use of int in maxseg socket option. [ 355.901922][T18955] Use struct sctp_assoc_value instead [ 356.420557][T18996] dvmrp0: entered allmulticast mode [ 356.440138][T18996] syzkaller0: entered promiscuous mode [ 356.445653][T18996] syzkaller0: entered allmulticast mode [ 356.685558][T19010] wlan0 speed is unknown, defaulting to 1000 [ 356.733396][T19008] wlan0 speed is unknown, defaulting to 1000 [ 357.030202][T19029] openvswitch: netlink: Message has 592 unknown bytes. [ 357.042665][T19029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.208657][T19031] chnl_net:caif_netlink_parms(): no params data found [ 357.236696][T19037] 8021q: VLANs not supported on ip_vti0 [ 357.261715][T19041] syzkaller0: entered promiscuous mode [ 357.286888][T19041] syzkaller0: entered allmulticast mode [ 357.509272][T19054] 8021q: adding VLAN 0 to HW filter on device bond3 [ 357.539700][T19056] gtp1: entered promiscuous mode [ 357.548586][T19056] gtp1: entered allmulticast mode [ 357.561568][T19059] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 357.733528][T19074] __nla_validate_parse: 12 callbacks suppressed [ 357.733548][T19074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3868'. [ 357.773693][T19070] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3867'. [ 357.796078][T19074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3868'. [ 357.815230][T19074] validate_nla: 5 callbacks suppressed [ 357.815247][T19074] netlink: 'syz.1.3868': attribute type 3 has an invalid length. [ 357.918765][T19082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3870'. [ 358.044808][T19087] syzkaller0: entered promiscuous mode [ 358.050579][T19087] syzkaller0: entered allmulticast mode [ 358.196638][T19101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3875'. [ 358.219883][T19102] xt_CT: You must specify a L4 protocol and not use inversions on it [ 358.294336][T19106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3877'. [ 358.307910][T19106] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3877'. [ 358.316900][T19106] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3877'. [ 358.493820][T19121] netlink: 'syz.0.3882': attribute type 6 has an invalid length. [ 358.498264][T19122] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3883'. [ 358.567168][T19127] netlink: 'syz.4.3885': attribute type 2 has an invalid length. [ 358.576310][T19127] netlink: 'syz.4.3885': attribute type 11 has an invalid length. [ 358.589332][T19127] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3885'. [ 358.661730][T19131] netlink: 'syz.3.3886': attribute type 21 has an invalid length. [ 358.674789][T19132] netlink: 'syz.4.3887': attribute type 11 has an invalid length. [ 358.683249][T19132] netlink: 'syz.4.3887': attribute type 11 has an invalid length. [ 358.708619][T19131] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 358.729499][T19131] bond3 (unregistering): Released all slaves [ 358.775917][T19138] tipc: Enabled bearer , priority 0 [ 358.785161][T19138] syzkaller0: MTU too low for tipc bearer [ 358.791988][T19138] tipc: Disabling bearer [ 359.142382][T19157] macvtap1: entered allmulticast mode [ 359.157648][T19157] veth0_macvtap: entered allmulticast mode [ 359.900586][T19206] IPVS: length: 157 != 297784399128 [ 360.263452][T19238] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 360.547043][T19261] xt_l2tp: unknown flags: 10 [ 360.705770][T19268] gtp0: entered promiscuous mode [ 360.921578][T19275] 8021q: adding VLAN 0 to HW filter on device bond2 [ 360.956128][T19275] netlink: 'syz.0.3935': attribute type 10 has an invalid length. [ 361.078545][T19292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.098985][T19292] bond2: (slave bond0): making interface the new active one [ 361.129833][T19292] bond2: (slave bond0): Enslaving as an active interface with an up link [ 361.142848][T19302] bridge0: port 2(syz_tun) entered blocking state [ 361.163798][T19302] bridge0: port 2(syz_tun) entered disabled state [ 361.183272][T19302] syz_tun: entered allmulticast mode [ 361.209679][T19302] syz_tun: entered promiscuous mode [ 361.443301][T19327] 8021q: VLANs not supported on ip_vti0 [ 361.958890][T19353] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 362.012563][T19381] 8021q: adding VLAN 0 to HW filter on device bond8 [ 362.064677][T19394] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 362.180920][T19402] delete_channel: no stack [ 362.593127][T19433] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 362.601812][T19434] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 362.809956][T19448] __nla_validate_parse: 14 callbacks suppressed [ 362.809976][T19448] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3982'. [ 362.863384][T19454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3983'. [ 362.963135][T19460] tap0: tun_chr_ioctl cmd 2148553947 [ 363.169138][T19474] bond0: entered allmulticast mode [ 363.174316][T19474] bond_slave_0: entered allmulticast mode [ 363.182332][T19474] bond_slave_1: entered allmulticast mode [ 363.189761][T19474] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode [ 363.448516][T19492] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3998'. [ 363.532658][T19498] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4000'. [ 363.588563][ T5835] Bluetooth: hci0: command 0x0405 tx timeout [ 363.684142][T19512] bond3: entered promiscuous mode [ 363.691719][T19512] bond3: entered allmulticast mode [ 363.698500][T19512] 8021q: adding VLAN 0 to HW filter on device bond3 [ 363.727081][T19512] team0: Cannot enslave team device to itself [ 363.840432][T19521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4006'. [ 364.149417][T19531] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 364.232783][T19535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4012'. [ 364.454201][T19542] bond4: option mode: invalid value (133) [ 364.462703][T19542] bond4 (unregistering): Released all slaves [ 364.515816][T19548] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 364.539965][T19548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4016'. [ 364.549824][T19547] syzkaller0: entered promiscuous mode [ 364.555567][T19547] syzkaller0: entered allmulticast mode [ 364.590332][T19548] netlink: 'syz.0.4016': attribute type 1 has an invalid length. [ 364.600284][T19548] netlink: 'syz.0.4016': attribute type 2 has an invalid length. [ 364.715967][T19559] netlink: 'syz.4.4019': attribute type 178 has an invalid length. [ 364.946277][T19569] netlink: 'syz.3.4021': attribute type 1 has an invalid length. [ 365.057312][T19569] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4021'. [ 365.087358][T19577] 8021q: adding VLAN 0 to HW filter on device bond5 [ 365.155988][T19577] bond4: (slave bond5): making interface the new active one [ 365.184652][T19577] bond4: (slave bond5): Enslaving as an active interface with an up link [ 365.219270][T19599] netlink: 'syz.0.4026': attribute type 39 has an invalid length. [ 365.243314][T19602] netlink: 'syz.1.4029': attribute type 1 has an invalid length. [ 365.259238][T19602] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4029'. [ 365.333441][T19599] syz_tun (unregistering): left allmulticast mode [ 365.344275][T19599] syz_tun (unregistering): left promiscuous mode [ 365.359979][T19599] bridge0: port 2(syz_tun) entered disabled state [ 365.471352][T19611] ipt_REJECT: TCP_RESET invalid for non-tcp [ 365.562818][T19615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4034'. [ 365.581884][T19615] netlink: 'syz.1.4034': attribute type 30 has an invalid length. [ 365.609096][ T69] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.631693][ T69] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.651642][ T69] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.673285][T19620] netlink: 'syz.0.4036': attribute type 3 has an invalid length. [ 365.682787][ T69] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.157049][T19660] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 366.479235][T19680] netlink: 'syz.1.4056': attribute type 12 has an invalid length. [ 366.811440][T19713] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 367.016492][T19723] can: request_module (can-proto-0) failed. [ 367.204940][T19741] openvswitch: netlink: Invalid VLAN frame [ 367.719904][T19760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.816869][T19768] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 367.896162][T19775] netlink: 'syz.2.4084': attribute type 4 has an invalid length. [ 367.960428][T19780] vxcan1 speed is unknown, defaulting to 1000 [ 368.004689][T19785] macvtap0: Device is already in use. [ 368.042635][T19787] bond4: entered promiscuous mode [ 368.049646][T19787] bond4: entered allmulticast mode [ 368.055407][T19787] 8021q: adding VLAN 0 to HW filter on device bond4 [ 368.063927][T19780] vxcan1 speed is unknown, defaulting to 1000 [ 368.072577][T19780] vxcan1 speed is unknown, defaulting to 1000 [ 368.256796][T19801] __nla_validate_parse: 74 callbacks suppressed [ 368.256814][T19801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4092'. [ 368.432556][ T5937] vxcan1 speed is unknown, defaulting to 1000 [ 368.445484][T19780] infiniband syz2: set active [ 368.459567][T19780] infiniband syz2: added vxcan1 [ 368.563475][T19780] RDS/IB: syz2: added [ 368.578182][T19780] smc: adding ib device syz2 with port count 1 [ 368.592499][T19813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4095'. [ 368.602159][T19780] smc: ib device syz2 port 1 has no pnetid [ 368.638411][ T7266] vxcan1 speed is unknown, defaulting to 1000 [ 368.656707][T19780] vxcan1 speed is unknown, defaulting to 1000 [ 369.063497][T19841] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4106'. [ 369.104996][T19780] vxcan1 speed is unknown, defaulting to 1000 [ 369.180836][T19843] openvswitch: netlink: Invalid VLAN frame [ 369.360952][T19780] vxcan1 speed is unknown, defaulting to 1000 [ 369.545323][T19780] vxcan1 speed is unknown, defaulting to 1000 [ 369.677824][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 369.689767][T19780] vxcan1 speed is unknown, defaulting to 1000 [ 369.820186][T19780] vxcan1 speed is unknown, defaulting to 1000 [ 369.951949][T19780] vxcan1 speed is unknown, defaulting to 1000 [ 370.082051][T19780] vxcan1 speed is unknown, defaulting to 1000 [ 370.237749][T19831] siw: device registration error -23 [ 370.350483][T19857] veth0: entered promiscuous mode [ 370.356796][T19857] veth0: left promiscuous mode [ 370.670156][T19886] netlink: 'syz.2.4117': attribute type 33 has an invalid length. [ 370.688675][T19888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4118'. [ 370.702427][T19886] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4117'. [ 370.736071][ T6262] bridge0: port 3(team0) entered disabled state [ 370.934490][T19899] netlink: 'syz.1.4119': attribute type 4 has an invalid length. [ 370.998912][T19899] tipc: Started in network mode [ 371.019762][T19899] tipc: Node identity a686b49e8e18, cluster identity 4711 [ 371.050665][T19899] tipc: Enabled bearer , priority 0 [ 371.124152][T19906] syzkaller0: entered promiscuous mode [ 371.130914][T19906] syzkaller0: entered allmulticast mode [ 371.182204][T19915] tipc: Resetting bearer [ 371.220835][T19918] netlink: 'syz.3.4127': attribute type 4 has an invalid length. [ 371.230914][T19894] tipc: Resetting bearer [ 371.236938][T19918] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4127'. [ 371.289629][T19928] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4128'. [ 371.301506][T19894] tipc: Disabling bearer [ 371.414517][T19934] netlink: 'syz.2.4130': attribute type 12 has an invalid length. [ 371.438370][T19934] netlink: 'syz.2.4130': attribute type 29 has an invalid length. [ 371.446229][T19934] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4130'. [ 371.464171][T19934] netlink: 59 bytes leftover after parsing attributes in process `syz.2.4130'. [ 371.538719][T19942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4134'. [ 371.563876][T19940] syzkaller0: entered promiscuous mode [ 371.592277][T19940] syzkaller0: entered allmulticast mode [ 371.606696][T19940] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 371.689289][T19952] pim6reg1: entered promiscuous mode [ 371.694781][T19952] pim6reg1: entered allmulticast mode [ 372.103005][T19979] netlink: 'syz.1.4145': attribute type 50 has an invalid length. [ 372.222659][T19986] rdma_rxe: rxe_newlink: failed to add lo [ 372.885499][ T7266] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x1 [ 372.940029][ T7266] hid-generic 0005:0C49:1012.0002: ignoring exceeding usage max [ 373.004859][ T7266] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x4 [ 373.045354][ T7266] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x5 [ 373.068545][ T7266] hid-generic 0005:0C49:1012.0002: reserved main item tag 0xd [ 373.094382][ T7266] hid-generic 0005:0C49:1012.0002: item fetching failed at offset 31/106 [ 373.105483][T20012] bridge2: port 1(veth3) entered blocking state [ 373.117317][ T7266] hid-generic 0005:0C49:1012.0002: probe with driver hid-generic failed with error -22 [ 373.136442][T20012] bridge2: port 1(veth3) entered disabled state [ 373.149799][T20012] veth3: entered allmulticast mode [ 373.164238][T20012] veth3: entered promiscuous mode [ 373.192130][T20015] bridge2: port 2(veth0_to_bond) entered blocking state [ 373.204245][T20015] bridge2: port 2(veth0_to_bond) entered disabled state [ 373.215898][T20015] veth0_to_bond: entered allmulticast mode [ 373.225617][T20015] veth0_to_bond: entered promiscuous mode [ 373.470311][T20038] __nla_validate_parse: 7 callbacks suppressed [ 373.470329][T20038] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4166'. [ 373.505543][T20040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4167'. [ 373.563508][T20042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4168'. [ 373.573236][T20042] netlink: 'syz.3.4168': attribute type 30 has an invalid length. [ 373.581547][T20042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4168'. [ 373.662320][T20045] netlink: 'syz.0.4169': attribute type 4 has an invalid length. [ 373.686228][T20045] netlink: 25 bytes leftover after parsing attributes in process `syz.0.4169'. [ 373.739825][T20050] netlink: 'syz.3.4171': attribute type 1 has an invalid length. [ 373.751440][T20050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4171'. [ 373.879468][T20053] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4172'. [ 374.059582][T20070] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 374.072113][T20070] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 374.081050][T20070] gretap1: entered promiscuous mode [ 374.086651][T20070] gretap1: entered allmulticast mode [ 374.154472][T20071] netlink: 'syz.3.4176': attribute type 9 has an invalid length. [ 374.187109][T20071] openvswitch: netlink: Flow actions attr not present in new flow. [ 374.201733][T20079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4179'. [ 374.733985][T20109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4186'. [ 374.954037][T20121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4190'. [ 375.109561][T20130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 375.433236][ T5835] Bluetooth: hci4: command 0x0401 tx timeout [ 375.823401][T20178] validate_nla: 2 callbacks suppressed [ 375.823417][T20178] netlink: 'syz.4.4210': attribute type 2 has an invalid length. [ 375.851964][T20178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.917701][T20185] netlink: 'syz.0.4213': attribute type 1 has an invalid length. [ 375.940005][T20185] netlink: 'syz.0.4213': attribute type 11 has an invalid length. [ 375.982770][T20178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.041823][T20192] netlink: 'syz.0.4215': attribute type 29 has an invalid length. [ 376.062379][T20189] bridge2: entered promiscuous mode [ 376.075220][T20189] bridge2: entered allmulticast mode [ 376.254952][T20203] ip6gre1: entered allmulticast mode [ 376.500736][ T6005] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.523776][ T6005] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.540558][ T6005] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.578315][T20232] team_slave_0: entered promiscuous mode [ 376.584037][T20232] team_slave_1: entered promiscuous mode [ 376.600095][T20232] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 376.620090][ T6005] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.668091][T20232] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 376.863326][T20257] netlink: 'syz.3.4236': attribute type 39 has an invalid length. [ 376.921321][T20258] netlink: 'syz.4.4237': attribute type 1 has an invalid length. [ 377.140862][T20270] netlink: 'syz.0.4239': attribute type 83 has an invalid length. [ 377.283482][T20284] xt_TPROXY: Can be used only with -p tcp or -p udp [ 377.335839][T20290] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 377.864021][T20318] netlink: 'syz.1.4258': attribute type 2 has an invalid length. [ 377.938256][T20320] syzkaller0: entered promiscuous mode [ 377.943841][T20320] syzkaller0: entered allmulticast mode [ 378.019372][T20332] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 378.522630][T20352] __nla_validate_parse: 17 callbacks suppressed [ 378.522648][T20352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4267'. [ 378.637350][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 379.688839][T20335] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 379.863817][T20366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4271'. [ 379.945386][T20366] 8021q: adding VLAN 0 to HW filter on device bond5 [ 380.016737][T20373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4273'. [ 380.050838][T20377] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4274'. [ 380.239292][T20389] netlink: 'syz.4.4282': attribute type 21 has an invalid length. [ 380.254417][T20389] netlink: 'syz.4.4282': attribute type 1 has an invalid length. [ 380.298096][T20396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4283'. [ 380.298096][T20391] syzkaller0: entered promiscuous mode [ 380.298119][T20391] syzkaller0: entered allmulticast mode [ 380.511208][T20406] syzkaller1: entered promiscuous mode [ 380.516727][T20406] syzkaller1: entered allmulticast mode [ 380.579330][T20411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4287'. [ 380.865382][ T5937] IPVS: starting estimator thread 0... [ 380.958622][T20431] IPVS: using max 34 ests per chain, 81600 per kthread [ 381.006112][T20439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4298'. [ 381.038572][T20439] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4298'. [ 381.141621][T20445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4301'. [ 381.212191][T20447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4302'. [ 381.492379][T20457] bond3: option xmit_hash_policy: invalid value (64) [ 381.508301][T20457] bond3 (unregistering): Released all slaves [ 382.198399][T20503] validate_nla: 1 callbacks suppressed [ 382.198417][T20503] netlink: 'syz.0.4317': attribute type 58 has an invalid length. [ 382.205074][T20501] sctp: [Deprecated]: syz.1.4319 (pid 20501) Use of int in max_burst socket option. [ 382.205074][T20501] Use struct sctp_assoc_value instead [ 382.249720][T20505] netlink: 'syz.0.4317': attribute type 12 has an invalid length. [ 382.257737][T20505] netlink: 'syz.0.4317': attribute type 11 has an invalid length. [ 382.925466][T20523] syzkaller0: entered promiscuous mode [ 382.951966][T20523] syzkaller0: entered allmulticast mode [ 383.051729][T20534] IPVS: Unknown mcast interface: vcan0 [ 383.069060][T20534] netlink: 'syz.4.4325': attribute type 29 has an invalid length. [ 383.142713][T20537] netlink: 'syz.0.4326': attribute type 1 has an invalid length. [ 383.163304][T20534] netlink: 'syz.4.4325': attribute type 29 has an invalid length. [ 383.394227][T20552] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20001 [ 383.548850][T20566] __nla_validate_parse: 10 callbacks suppressed [ 383.548870][T20566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4332'. [ 383.567140][T20563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4334'. [ 383.570675][T20566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4332'. [ 383.910852][T20595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4341'. [ 383.921346][T20593] netlink: 'syz.2.4342': attribute type 2 has an invalid length. [ 383.923738][T20598] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4343'. [ 383.948400][T20593] netlink: 'syz.2.4342': attribute type 8 has an invalid length. [ 383.956274][T20593] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4342'. [ 383.967933][T20596] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4341'. [ 384.103388][T20607] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4347'. [ 384.201475][T20613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4347'. [ 384.340881][T20621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4352'. [ 384.432642][T20629] netlink: 'syz.0.4352': attribute type 1 has an invalid length. [ 384.508102][T20633] veth0_to_bond: left allmulticast mode [ 384.548378][T20633] veth0_to_bond: left promiscuous mode [ 384.554151][T20633] bridge2: port 2(veth0_to_bond) entered disabled state [ 384.668780][T20641] netlink: 'syz.3.4358': attribute type 83 has an invalid length. [ 384.814413][T20647] bond0: entered promiscuous mode [ 384.822168][T20647] bond_slave_0: entered promiscuous mode [ 384.828691][T20647] bond_slave_1: entered promiscuous mode [ 384.925021][T20654] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 385.050577][T20659] nbd4: detected capacity change from 0 to 127 [ 385.063057][ T5835] block nbd4: Receive control failed (result -32) [ 386.204213][T20739] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 386.414481][T20753] bond9: entered promiscuous mode [ 386.420187][T20753] 8021q: adding VLAN 0 to HW filter on device bond9 [ 386.456633][T20753] bond9: (slave bridge4): making interface the new active one [ 386.464336][T20753] bridge4: entered promiscuous mode [ 386.493905][T20753] bridge4: left promiscuous mode [ 386.912928][T20784] syzkaller1: entered promiscuous mode [ 386.919021][T20784] syzkaller1: entered allmulticast mode [ 387.413920][T20812] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 387.534358][T20816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.564058][T20816] xt_CT: You must specify a L4 protocol and not use inversions on it [ 387.618237][T20819] dvmrp1: entered allmulticast mode [ 387.648709][T20821] FAULT_INJECTION: forcing a failure. [ 387.648709][T20821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.702290][T20821] CPU: 1 UID: 0 PID: 20821 Comm: syz.4.4415 Not tainted syzkaller #0 PREEMPT(full) [ 387.702315][T20821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 387.702329][T20821] Call Trace: [ 387.702336][T20821] [ 387.702344][T20821] dump_stack_lvl+0x189/0x250 [ 387.702369][T20821] ? __pfx____ratelimit+0x10/0x10 [ 387.702386][T20821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.702403][T20821] ? __pfx__printk+0x10/0x10 [ 387.702436][T20821] should_fail_ex+0x414/0x560 [ 387.702464][T20821] _copy_to_user+0x31/0xb0 [ 387.702486][T20821] simple_read_from_buffer+0xe1/0x170 [ 387.702511][T20821] proc_fail_nth_read+0x1b3/0x220 [ 387.702532][T20821] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 387.702551][T20821] ? rw_verify_area+0x2a6/0x4d0 [ 387.702566][T20821] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 387.702586][T20821] vfs_read+0x200/0xa30 [ 387.702600][T20821] ? fdget_pos+0x247/0x320 [ 387.702625][T20821] ? __pfx___mutex_lock+0x10/0x10 [ 387.702645][T20821] ? __pfx_vfs_read+0x10/0x10 [ 387.702663][T20821] ? __fget_files+0x2a/0x420 [ 387.702687][T20821] ? __fget_files+0x3a0/0x420 [ 387.702705][T20821] ? __fget_files+0x2a/0x420 [ 387.702734][T20821] ksys_read+0x145/0x250 [ 387.702752][T20821] ? __pfx_ksys_read+0x10/0x10 [ 387.702772][T20821] ? do_syscall_64+0xbe/0xf80 [ 387.702793][T20821] do_syscall_64+0xfa/0xf80 [ 387.702811][T20821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.702829][T20821] ? clear_bhb_loop+0x60/0xb0 [ 387.702849][T20821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.702872][T20821] RIP: 0033:0x7f82e8f8e15c [ 387.702889][T20821] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 387.702904][T20821] RSP: 002b:00007f82e9d5a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 387.702923][T20821] RAX: ffffffffffffffda RBX: 00007f82e91e5fa0 RCX: 00007f82e8f8e15c [ 387.702936][T20821] RDX: 000000000000000f RSI: 00007f82e9d5a0a0 RDI: 0000000000000003 [ 387.702947][T20821] RBP: 00007f82e9d5a090 R08: 0000000000000000 R09: 0000000000000000 [ 387.702957][T20821] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 387.702968][T20821] R13: 00007f82e91e6038 R14: 00007f82e91e5fa0 R15: 00007ffd43af7db8 [ 387.702999][T20821] [ 387.719198][T20819] ip6tnl0: Master is either lo or non-ether device [ 388.443552][T20868] bond3: Unable to set up delay as MII monitoring is disabled [ 388.472608][T20868] bond3 (unregistering): Released all slaves [ 388.524354][T20879] validate_nla: 11 callbacks suppressed [ 388.524372][T20879] netlink: 'syz.3.4433': attribute type 1 has an invalid length. [ 388.539958][T20864] wlan0: mtu less than device minimum [ 388.547545][T20881] netlink: 'syz.2.4434': attribute type 3 has an invalid length. [ 388.738041][T20883] bond6: (slave gretap1): making interface the new active one [ 388.771897][T20883] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 388.866504][T20906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.953170][T20915] __nla_validate_parse: 21 callbacks suppressed [ 388.953190][T20915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4444'. [ 389.061666][T20915] syzkaller1: entered promiscuous mode [ 389.067180][T20915] syzkaller1: entered allmulticast mode [ 389.330330][T20929] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4449'. [ 389.574190][T20948] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4454'. [ 389.597877][T20948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4454'. [ 389.776494][T20953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4456'. [ 389.786461][T20953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4456'. [ 390.048868][T20983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4466'. [ 390.097187][T20983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4466'. [ 390.223545][T21002] tipc: Enabled bearer , priority 0 [ 390.247696][T21002] syzkaller0: MTU too low for tipc bearer [ 390.253545][T21002] tipc: Disabling bearer [ 390.331203][T21006] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4473'. [ 390.484431][T21016] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 390.510855][T21020] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4478'. [ 390.528297][T21020] ksmbd: Unknown IPC event: 3, ignore. [ 390.553077][T21021] netlink: 'syz.4.4476': attribute type 1 has an invalid length. [ 390.561929][T21021] netlink: 'syz.4.4476': attribute type 2 has an invalid length. [ 390.780429][T21040] 8021q: VLANs not supported on ip_vti0 [ 390.821845][T21047] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 390.950529][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 391.519097][T21088] macvtap1: entered promiscuous mode [ 391.530471][T21088] macvtap1: entered allmulticast mode [ 391.543928][T21088] veth1_vlan: entered allmulticast mode [ 391.567916][T21094] macvtap2: entered promiscuous mode [ 391.573403][T21094] macvtap2: entered allmulticast mode [ 391.682341][T21096] bond10: (slave bridge4): Enslaving as an active interface with an up link [ 391.714482][T21096] macvlan2: entered promiscuous mode [ 391.721524][T21096] macvlan2: entered allmulticast mode [ 391.729303][T21096] bond10: entered promiscuous mode [ 391.734439][T21096] bridge4: entered promiscuous mode [ 391.740938][T21096] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 391.752413][T21096] bond10: left promiscuous mode [ 391.757314][T21096] bridge4: left promiscuous mode [ 391.811784][ T30] audit: type=1800 audit(1766937045.662:7): pid=21094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4502" name="memory.events" dev="tmpfs" ino=1851 res=0 errno=0 [ 391.932678][T21107] gretap0: refused to change device tx_queue_len [ 391.941121][T21107] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 392.093957][ T9998] IPVS: starting estimator thread 0... [ 392.197738][T21117] IPVS: using max 29 ests per chain, 69600 per kthread [ 392.239115][T21133] netlink: 'syz.2.4512': attribute type 12 has an invalid length. [ 392.252807][T21133] netlink: 'syz.2.4512': attribute type 12 has an invalid length. [ 392.486535][ T52] Bluetooth: hci4: link tx timeout [ 392.504552][ T52] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 392.517001][ T52] Bluetooth: hci4: link tx timeout [ 392.522341][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 392.648814][T21159] delete_channel: no stack [ 392.825593][T21171] xt_policy: neither incoming nor outgoing policy selected [ 393.062288][T21188] netlink: 'syz.3.4528': attribute type 21 has an invalid length. [ 393.323016][T21203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.747010][T21238] netlink: 'syz.1.4542': attribute type 1 has an invalid length. [ 393.772704][T21238] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 394.003935][T21256] __nla_validate_parse: 19 callbacks suppressed [ 394.003951][T21256] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4547'. [ 394.018744][T21250] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4546'. [ 394.058885][T21250] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.066737][T21250] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.142603][T21259] netlink: 'syz.0.4548': attribute type 5 has an invalid length. [ 394.336044][T21273] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 394.371141][T21273] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 394.419395][T21282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4550'. [ 394.488187][T21286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4555'. [ 394.552825][ T52] Bluetooth: hci4: command 0x0401 tx timeout [ 394.651755][T21299] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4559'. [ 394.661319][T21299] nbd: must specify at least one socket [ 395.159931][T21338] syzkaller1: entered promiscuous mode [ 395.165450][T21338] syzkaller1: entered allmulticast mode [ 395.262600][T21353] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4576'. [ 395.332972][T21348] ip6erspan0: entered promiscuous mode [ 395.350283][T21348] ip6erspan0: entered allmulticast mode [ 395.425910][T21355] SET target dimension over the limit! [ 395.439131][T21348] siw: device registration error -23 [ 395.590485][T21376] tipc: Enabling of bearer rejected, failed to enable media [ 395.633177][T21378] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4583'. [ 395.636821][T21376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4582'. [ 395.716737][T21385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4585'. [ 395.736430][T21387] sch_fq: defrate 0 ignored. [ 395.939753][T21399] syzkaller0: refused to change device tx_queue_len [ 395.960541][T21399] nft_compat: unsupported protocol 1 [ 396.145079][T21414] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4593'. [ 396.283546][T21429] netlink: 'syz.2.4600': attribute type 6 has an invalid length. [ 396.300947][T21429] netlink: 'syz.2.4600': attribute type 5 has an invalid length. [ 396.502586][T21445] openvswitch: netlink: IP tunnel dst address not specified [ 396.629369][ T52] Bluetooth: hci4: command 0x0401 tx timeout [ 396.784959][T21466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.040897][T21481] netlink: 'syz.3.4615': attribute type 1 has an invalid length. [ 397.067929][T21482] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 397.401616][T21507] syzkaller1: entered promiscuous mode [ 397.424993][T21507] syzkaller1: entered allmulticast mode [ 397.540419][T21520] netlink: 'syz.3.4626': attribute type 21 has an invalid length. [ 397.548995][T21523] netlink: 'syz.2.4627': attribute type 6 has an invalid length. [ 397.592979][ T7266] wlan0 speed is unknown, defaulting to 1000 [ 397.595212][T21526] Unknown options in mask b7f2 [ 397.600485][ T7266] syz0: Port: 1 Link DOWN [ 397.920918][T21547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.968939][T21552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.999438][T21551] netlink: 'syz.1.4634': attribute type 1 has an invalid length. [ 398.007214][T21551] netlink: 'syz.1.4634': attribute type 2 has an invalid length. [ 398.430545][T21560] v: renamed from vlan0 [ 398.663344][T21586] sch_tbf: burst 0 is lower than device lo mtu (1294) ! [ 399.061773][T21609] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 399.104834][T21608] __nla_validate_parse: 14 callbacks suppressed [ 399.104854][T21608] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4647'. [ 399.318190][T21627] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4656'. [ 399.365328][T21629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4655'. [ 399.419577][T21629] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4655'. [ 399.432715][T21629] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4655'. [ 399.494051][T21638] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4659'. [ 399.634784][T21652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.734870][T21655] tipc: Enabling of bearer rejected, failed to enable media [ 399.749447][T21655] nbd: must specify at least one socket [ 399.807189][T21657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4664'. [ 399.824032][T21661] syz_tun: mtu less than device minimum [ 399.963543][T21670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4668'. [ 400.029947][T21677] nbd: couldn't find a device at index 0 [ 400.232146][T21690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4673'. [ 400.263222][ T8025] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.263311][T21690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4673'. [ 400.284086][ T8025] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.310029][ T8025] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.335988][ T8025] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.387875][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 400.574916][T21717] !€ÿ: renamed from bond_slave_0 (while UP) [ 400.694667][T21723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.903948][T21741] netlink: 'syz.2.4687': attribute type 1 has an invalid length. [ 400.913879][T21739] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 400.921172][T21739] IPv6: NLM_F_CREATE should be set when creating new route [ 401.153403][T21756] tipc: Enabled bearer , priority 13 [ 401.415676][T21776] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 401.806950][T21804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 401.931961][T21811] netlink: 'syz.2.4710': attribute type 21 has an invalid length. [ 402.119386][T21830] tipc: Enabled bearer , priority 0 [ 402.127005][T21828] syzkaller0: entered promiscuous mode [ 402.132974][T21828] syzkaller0: entered allmulticast mode [ 402.168326][T21828] tipc: Resetting bearer [ 402.199523][T21828] tipc: Disabling bearer [ 402.269083][ T7266] tipc: Node number set to 3758096386 [ 402.339592][T21842] netlink: 'syz.1.4719': attribute type 1 has an invalid length. [ 402.393399][T21842] 8021q: adding VLAN 0 to HW filter on device bond4 [ 403.462852][T21912] veth0_to_team: entered promiscuous mode [ 403.516206][T21920] netlink: 'syz.2.4742': attribute type 9 has an invalid length. [ 406.309332][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 407.827900][ T7266] page_pool_release_retry() stalled pool shutdown: id 78, 1 inflight 60 sec [ 419.602268][ T8002] bridge_slave_1: left allmulticast mode [ 419.608076][ T8002] bridge_slave_1: left promiscuous mode [ 419.613795][ T8002] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.623342][ T8002] bridge_slave_0: left promiscuous mode [ 419.629304][ T8002] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.680221][ T8002] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 419.762920][ T8002] tipc: Disabling bearer [ 419.812371][ T8002] bond4 (unregistering): (slave gretap2): Releasing active interface [ 420.131063][ T8002] bond0 (unregistering): left promiscuous mode [ 420.137258][ T8002] bond_slave_0: left promiscuous mode [ 420.143124][ T8002] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 420.152988][ T8002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.162147][ T8002] bond_slave_0: left allmulticast mode [ 420.169298][ T8002] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 420.178162][ T8002] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 420.190074][ T8002] bond0 (unregistering): Released all slaves [ 420.204122][ T8002] bond1 (unregistering): Released all slaves [ 420.217522][ T8002] bond2 (unregistering): Released all slaves [ 420.325308][ T8002] bond3 (unregistering): Released all slaves [ 420.337373][ T8002] bond4 (unregistering): Released all slaves [ 420.434769][ T8002] bond5 (unregistering): Released all slaves [ 420.528395][ T8002] bond6 (unregistering): Released all slaves [ 420.541744][ T8002] bond7 (unregistering): (slave veth5): Releasing active interface [ 420.551503][ T8002] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 420.564949][ T8002] bond7 (unregistering): Released all slaves [ 420.577953][ T8002] bond8 (unregistering): Released all slaves [ 420.684048][ T8002] tipc: Disabling bearer [ 420.692104][ T8002] tipc: Left network mode [ 421.116314][ T8002] veth0_to_batadv: left promiscuous mode [ 421.151791][T21950] netlink: 'syz.3.4750': attribute type 1 has an invalid length. [ 421.175279][ T8002] hsr_slave_0: left promiscuous mode [ 421.190774][ T8002] hsr_slave_1: left promiscuous mode [ 421.200913][T21956] __nla_validate_parse: 17 callbacks suppressed [ 421.200930][T21956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4751'. [ 421.218287][ T8002] veth0_macvtap: left allmulticast mode [ 421.260827][T21960] netlink: 'syz.1.4751': attribute type 1 has an invalid length. [ 421.364677][ T8002] pimreg3 (unregistering): left allmulticast mode [ 421.387191][ T8002] pim6reg527 (unregistering): left allmulticast mode [ 421.580501][ T8002] team0 (unregistering): Port device veth0_virt_wifi removed [ 421.719725][ T8002] team0 (unregistering): Port device team_slave_1 removed [ 421.759206][ T8002] team0 (unregistering): Port device team_slave_0 removed [ 422.131580][T21950] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 422.152184][T21960] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 422.292105][T21971] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 422.556070][T21986] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4760'. [ 422.559027][T21984] netlink: 'syz.4.4759': attribute type 27 has an invalid length. [ 422.719081][T21995] bridge_slave_0: invalid flags given to default FDB implementation [ 422.741345][ T8002] IPVS: stop unused estimator thread 0... [ 422.826871][ T8028] nci: nci_ntf_packet: unknown ntf opcode 0x102 [ 422.851667][T22004] netlink: 'syz.2.4765': attribute type 8 has an invalid length. [ 423.129424][T22033] delete_channel: no stack [ 423.562011][T22039] netlink: 'syz.4.4772': attribute type 2 has an invalid length. [ 423.872808][T22058] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4778'. [ 423.909110][T22033] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 423.916933][T22033] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 423.995254][T22033] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 424.004709][T22033] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 424.033879][T22033] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 424.040136][T22033] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 424.081920][T22033] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 424.092211][T22033] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 424.420227][T22078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4783'. [ 424.683394][T22097] netlink: 'syz.4.4789': attribute type 1 has an invalid length. [ 424.717754][T22097] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4789'. [ 425.122135][T22128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4798'. [ 425.176840][T22131] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4799'. [ 425.275033][T22136] netlink: 216 bytes leftover after parsing attributes in process `syz.3.4799'. [ 425.316367][T22139] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 425.391516][T22142] netlink: 'syz.4.4803': attribute type 1 has an invalid length. [ 425.420080][T22142] bond7: entered promiscuous mode [ 425.425702][T22142] 8021q: adding VLAN 0 to HW filter on device bond7 [ 425.475594][T22145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4804'. [ 425.485047][T22145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4804'. [ 425.500061][T22147] ip6_vti0: entered promiscuous mode [ 425.706397][T22155] netlink: 'syz.3.4808': attribute type 1 has an invalid length. [ 425.731810][T22155] bond7: entered promiscuous mode [ 425.736884][T22155] bond7: entered allmulticast mode [ 425.742823][T22155] 8021q: adding VLAN 0 to HW filter on device bond7 [ 425.759095][T22155] macvlan3: entered promiscuous mode [ 425.764679][T22155] macvlan3: entered allmulticast mode [ 425.771801][T22155] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 425.979687][T22166] netlink: 'syz.3.4811': attribute type 4 has an invalid length. [ 426.190338][T22179] netlink: 'syz.3.4815': attribute type 3 has an invalid length. [ 426.231710][T22181] netlink: 'syz.3.4816': attribute type 2 has an invalid length. [ 426.239805][T22181] __nla_validate_parse: 5 callbacks suppressed [ 426.239816][T22181] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4816'. [ 426.256695][T22181] C: renamed from team_slave_0 (while UP) [ 426.265105][T22181] netlink: 'syz.3.4816': attribute type 1 has an invalid length. [ 426.273214][T22181] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 426.323219][T22183] netlink: 'syz.3.4817': attribute type 3 has an invalid length. [ 426.401377][T22187] xt_nat: multiple ranges no longer supported [ 426.425588][T22187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4819'. [ 426.435561][T22187] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4819'. [ 426.744147][T22214] netlink: 'syz.4.4825': attribute type 62 has an invalid length. [ 426.881788][T22220] netlink: 'syz.4.4827': attribute type 21 has an invalid length. [ 427.006448][T22232] netlink: 'syz.4.4830': attribute type 39 has an invalid length. [ 427.043989][T22235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.683814][T22241] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4832'. [ 427.775398][T22245] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4834'. [ 465.667896][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 578.319044][ T31] INFO: task kworker/1:6:5937 blocked for more than 143 seconds. [ 578.327256][ T31] Not tainted syzkaller #0 [ 578.332405][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.341221][ T31] task:kworker/1:6 state:D stack:23832 pid:5937 tgid:5937 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 578.353353][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 578.360185][ T31] Call Trace: [ 578.363465][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 578.366382][ T31] __schedule+0x14bc/0x5000 [ 578.371570][ T31] ? __pfx___schedule+0x10/0x10 [ 578.376818][ T31] ? schedule+0x91/0x360 [ 578.381328][ T31] schedule+0x165/0x360 [ 578.385501][ T31] schedule_preempt_disabled+0x13/0x30 [ 578.407753][ T31] __mutex_lock+0x7e6/0x1350 [ 578.412444][ T31] ? __mutex_lock+0x5bb/0x1350 [ 578.417240][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 578.443185][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 578.457740][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 578.463509][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 578.469725][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 578.475824][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 578.484066][ T31] process_scheduled_works+0xad1/0x1770 [ 578.490385][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 578.496372][ T31] worker_thread+0x8a0/0xda0 [ 578.501136][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 578.507489][ T31] ? __kthread_parkme+0x7b/0x200 [ 578.512593][ T31] kthread+0x711/0x8a0 [ 578.516675][ T31] ? __pfx_worker_thread+0x10/0x10 [ 578.522444][ T31] ? __pfx_kthread+0x10/0x10 [ 578.527055][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 578.532393][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 578.537697][ T31] ? __pfx_kthread+0x10/0x10 [ 578.542290][ T31] ret_from_fork+0x599/0xb30 [ 578.546869][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 578.552748][ T31] ? __switch_to_asm+0x39/0x70 [ 578.557529][ T31] ? __switch_to_asm+0x33/0x70 [ 578.562402][ T31] ? __pfx_kthread+0x10/0x10 [ 578.566980][ T31] ret_from_fork_asm+0x1a/0x30 [ 578.571850][ T31] [ 578.574959][ T31] INFO: task syz.2.4765:21996 blocked for more than 143 seconds. [ 578.583047][ T31] Not tainted syzkaller #0 [ 578.588192][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.596885][ T31] task:syz.2.4765 state:D stack:25752 pid:21996 tgid:21996 ppid:15357 task_flags:0x400040 flags:0x00080002 [ 578.609047][ T31] Call Trace: [ 578.612336][ T31] [ 578.615253][ T31] __schedule+0x14bc/0x5000 [ 578.619963][ T31] ? __pfx___schedule+0x10/0x10 [ 578.624839][ T31] ? schedule+0x91/0x360 [ 578.629411][ T31] schedule+0x165/0x360 [ 578.633615][ T31] schedule_preempt_disabled+0x13/0x30 [ 578.639285][ T31] __mutex_lock+0x7e6/0x1350 [ 578.643884][ T31] ? __mutex_lock+0x5bb/0x1350 [ 578.648701][ T31] ? rfkill_unregister+0xc8/0x220 [ 578.653728][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 578.658891][ T31] ? __pfx_device_del+0x10/0x10 [ 578.663751][ T31] ? __cancel_work_sync+0x5c/0x110 [ 578.669010][ T31] rfkill_unregister+0xc8/0x220 [ 578.673871][ T31] nfc_unregister_device+0x96/0x300 [ 578.679114][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 578.684837][ T31] virtual_ncidev_close+0x56/0x90 [ 578.689941][ T31] __fput+0x44c/0xa70 [ 578.693941][ T31] task_work_run+0x1d4/0x260 [ 578.698658][ T31] ? __pfx_task_work_run+0x10/0x10 [ 578.703780][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 578.709413][ T31] exit_to_user_mode_loop+0xff/0x4f0 [ 578.714717][ T31] ? rcu_is_watching+0x15/0xb0 [ 578.719660][ T31] do_syscall_64+0x2d0/0xf80 [ 578.724261][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.730380][ T31] ? clear_bhb_loop+0x60/0xb0 [ 578.735060][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.741075][ T31] RIP: 0033:0x7f7f5718f749 [ 578.745501][ T31] RSP: 002b:00007ffff0b8ce98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 578.754237][ T31] RAX: 0000000000000000 RBX: 00007f7f573e7da0 RCX: 00007f7f5718f749 [ 578.762356][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 578.770448][ T31] RBP: 00007f7f573e7da0 R08: 0000000000000238 R09: 0000001ef0b8d18f [ 578.778511][ T31] R10: 00007f7f573e7cb0 R11: 0000000000000246 R12: 0000000000067653 [ 578.786497][ T31] R13: 00007f7f573e6090 R14: ffffffffffffffff R15: 00007ffff0b8cfb0 [ 578.794689][ T31] [ 578.797787][ T31] INFO: task syz.0.4766:22001 blocked for more than 143 seconds. [ 578.805512][ T31] Not tainted syzkaller #0 [ 578.810513][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.819251][ T31] task:syz.0.4766 state:D stack:25752 pid:22001 tgid:22001 ppid:15658 task_flags:0x400040 flags:0x00080002 [ 578.831381][ T31] Call Trace: [ 578.834669][ T31] [ 578.837667][ T31] __schedule+0x14bc/0x5000 [ 578.842195][ T31] ? __pfx___schedule+0x10/0x10 [ 578.847047][ T31] ? schedule+0x91/0x360 [ 578.851374][ T31] schedule+0x165/0x360 [ 578.855531][ T31] schedule_preempt_disabled+0x13/0x30 [ 578.861065][ T31] __mutex_lock+0x7e6/0x1350 [ 578.865668][ T31] ? __mutex_lock+0x5bb/0x1350 [ 578.870717][ T31] ? rfkill_unregister+0xc8/0x220 [ 578.875759][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 578.880861][ T31] ? __pfx_device_del+0x10/0x10 [ 578.885717][ T31] ? __cancel_work_sync+0x5c/0x110 [ 578.890893][ T31] rfkill_unregister+0xc8/0x220 [ 578.895747][ T31] nfc_unregister_device+0x96/0x300 [ 578.901009][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 578.906748][ T31] virtual_ncidev_close+0x56/0x90 [ 578.911955][ T31] __fput+0x44c/0xa70 [ 578.915973][ T31] task_work_run+0x1d4/0x260 [ 578.920637][ T31] ? __pfx_task_work_run+0x10/0x10 [ 578.925766][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 578.931321][ T31] exit_to_user_mode_loop+0xff/0x4f0 [ 578.936619][ T31] ? rcu_is_watching+0x15/0xb0 [ 578.941437][ T31] do_syscall_64+0x2d0/0xf80 [ 578.946039][ T31] ? rcu_is_watching+0x15/0xb0 [ 578.951104][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.957207][ T31] ? clear_bhb_loop+0x60/0xb0 [ 578.961972][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.967980][ T31] RIP: 0033:0x7ffbd4f8f749 [ 578.972418][ T31] RSP: 002b:00007ffd7e6f4c58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 578.980911][ T31] RAX: 0000000000000000 RBX: 00007ffbd51e7da0 RCX: 00007ffbd4f8f749 [ 578.989102][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 578.997090][ T31] RBP: 00007ffbd51e7da0 R08: 00000000000001fc R09: 0000001d7e6f4f4f [ 579.005647][ T31] R10: 00000000003ffbe0 R11: 0000000000000246 R12: 00000000000676a5 [ 579.013863][ T31] R13: 00007ffbd51e6090 R14: ffffffffffffffff R15: 00007ffd7e6f4d70 [ 579.022009][ T31] [ 579.025246][ T31] INFO: task syz.1.4771:22033 blocked for more than 144 seconds. [ 579.039332][ T31] Not tainted syzkaller #0 [ 579.046150][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 579.055157][ T31] task:syz.1.4771 state:D stack:24744 pid:22033 tgid:22026 ppid:16726 task_flags:0x400140 flags:0x00080002 [ 579.067147][ T31] Call Trace: [ 579.070533][ T31] [ 579.073475][ T31] __schedule+0x14bc/0x5000 [ 579.078064][ T31] ? __pfx___schedule+0x10/0x10 [ 579.082929][ T31] ? schedule+0x91/0x360 [ 579.087160][ T31] schedule+0x165/0x360 [ 579.091387][ T31] schedule_preempt_disabled+0x13/0x30 [ 579.096851][ T31] __mutex_lock+0x7e6/0x1350 [ 579.101516][ T31] ? __mutex_lock+0x5bb/0x1350 [ 579.106289][ T31] ? nfc_dev_down+0x3b/0x290 [ 579.111034][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 579.116070][ T31] ? do_raw_spin_lock+0x121/0x290 [ 579.121165][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 579.127101][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 579.132375][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 579.138147][ T31] nfc_dev_down+0x3b/0x290 [ 579.142550][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 579.148348][ T31] nfc_rfkill_set_block+0x2d/0x100 [ 579.153464][ T31] rfkill_set_block+0x1d2/0x440 [ 579.158454][ T31] rfkill_fop_write+0x44b/0x570 [ 579.163325][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 579.168799][ T31] ? security_kernfs_init_security+0x220/0x290 [ 579.174965][ T31] ? rw_verify_area+0x255/0x4d0 [ 579.179910][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 579.185296][ T31] vfs_write+0x27e/0xb30 [ 579.189711][ T31] ? __pfx_vfs_write+0x10/0x10 [ 579.194486][ T31] ? __fget_files+0x2a/0x420 [ 579.199147][ T31] ? __fget_files+0x2a/0x420 [ 579.203742][ T31] ? __fget_files+0x3a0/0x420 [ 579.208473][ T31] ? __fget_files+0x2a/0x420 [ 579.213071][ T31] ksys_write+0x145/0x250 [ 579.217384][ T31] ? __pfx_ksys_write+0x10/0x10 [ 579.222333][ T31] ? do_syscall_64+0xbe/0xf80 [ 579.227018][ T31] do_syscall_64+0xfa/0xf80 [ 579.231610][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.237756][ T31] ? clear_bhb_loop+0x60/0xb0 [ 579.242442][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.248396][ T31] RIP: 0033:0x7f223898f749 [ 579.252816][ T31] RSP: 002b:00007f223983f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 579.261332][ T31] RAX: ffffffffffffffda RBX: 00007f2238be6090 RCX: 00007f223898f749 [ 579.269610][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000009 [ 579.277704][ T31] RBP: 00007f2238a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 579.285700][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.293766][ T31] R13: 00007f2238be6128 R14: 00007f2238be6090 R15: 00007ffe74586d08 [ 579.301845][ T31] [ 579.304887][ T31] INFO: task syz.3.4822:22197 blocked for more than 144 seconds. [ 579.312791][ T31] Not tainted syzkaller #0 [ 579.317798][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 579.326480][ T31] task:syz.3.4822 state:D stack:28040 pid:22197 tgid:22196 ppid:16374 task_flags:0x400040 flags:0x00080002 [ 579.339142][ T31] Call Trace: [ 579.342476][ T31] [ 579.345404][ T31] __schedule+0x14bc/0x5000 [ 579.353766][ T31] ? __pfx___schedule+0x10/0x10 [ 579.358714][ T31] ? schedule+0x91/0x360 [ 579.362965][ T31] schedule+0x165/0x360 [ 579.367107][ T31] schedule_preempt_disabled+0x13/0x30 [ 579.372629][ T31] __mutex_lock+0x7e6/0x1350 [ 579.377224][ T31] ? __mutex_lock+0x5bb/0x1350 [ 579.382049][ T31] ? rfkill_fop_open+0x12d/0x820 [ 579.386993][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 579.392096][ T31] ? rfkill_fop_open+0x5a/0x820 [ 579.396959][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 579.402326][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 579.407780][ T31] rfkill_fop_open+0x12d/0x820 [ 579.412560][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 579.417926][ T31] misc_open+0x2d5/0x350 [ 579.422183][ T31] chrdev_open+0x4cc/0x5e0 [ 579.426600][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 579.431714][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 579.438150][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 579.443109][ T31] do_dentry_open+0x7ce/0x1420 [ 579.447985][ T31] vfs_open+0x3b/0x340 [ 579.452065][ T31] ? path_openat+0x33f3/0x3dd0 [ 579.456839][ T31] path_openat+0x340e/0x3dd0 [ 579.461546][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 579.466927][ T31] ? stack_depot_save_flags+0x40/0x850 [ 579.472509][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 579.478203][ T31] ? getname_flags+0xb8/0x540 [ 579.482873][ T31] ? __pfx_path_openat+0x10/0x10 [ 579.487866][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 579.492818][ T31] do_filp_open+0x1fa/0x410 [ 579.497315][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 579.502461][ T31] ? _raw_spin_unlock+0x28/0x50 [ 579.507322][ T31] ? alloc_fd+0x64c/0x6c0 [ 579.511938][ T31] do_sys_openat2+0x121/0x200 [ 579.516634][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 579.521933][ T31] ? exc_page_fault+0x82/0x100 [ 579.526711][ T31] __x64_sys_openat+0x138/0x170 [ 579.531699][ T31] do_syscall_64+0xfa/0xf80 [ 579.536214][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.542359][ T31] ? clear_bhb_loop+0x60/0xb0 [ 579.547044][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.553022][ T31] RIP: 0033:0x7fe26e58f749 [ 579.557448][ T31] RSP: 002b:00007fe26f4c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 579.565955][ T31] RAX: ffffffffffffffda RBX: 00007fe26e7e5fa0 RCX: 00007fe26e58f749 [ 579.574084][ T31] RDX: 0000000000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 579.582108][ T31] RBP: 00007fe26e613f91 R08: 0000000000000000 R09: 0000000000000000 [ 579.590281][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.598431][ T31] R13: 00007fe26e7e6038 R14: 00007fe26e7e5fa0 R15: 00007fff8afde858 [ 579.606440][ T31] [ 579.609599][ T31] INFO: task syz.3.4822:22203 blocked for more than 144 seconds. [ 579.617343][ T31] Not tainted syzkaller #0 [ 579.622365][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 579.631138][ T31] task:syz.3.4822 state:D stack:28152 pid:22203 tgid:22196 ppid:16374 task_flags:0x400040 flags:0x00080002 [ 579.643162][ T31] Call Trace: [ 579.646451][ T31] [ 579.649460][ T31] __schedule+0x14bc/0x5000 [ 579.653986][ T31] ? __pfx___schedule+0x10/0x10 [ 579.658903][ T31] ? schedule+0x91/0x360 [ 579.663150][ T31] schedule+0x165/0x360 [ 579.667299][ T31] schedule_preempt_disabled+0x13/0x30 [ 579.672944][ T31] __mutex_lock+0x7e6/0x1350 [ 579.677609][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 579.682559][ T31] ? __mutex_lock+0x5bb/0x1350 [ 579.687401][ T31] ? misc_open+0x51/0x350 [ 579.691800][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 579.696842][ T31] misc_open+0x51/0x350 [ 579.701068][ T31] chrdev_open+0x4cc/0x5e0 [ 579.705493][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 579.710490][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 579.716832][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 579.721827][ T31] do_dentry_open+0x7ce/0x1420 [ 579.726621][ T31] vfs_open+0x3b/0x340 [ 579.730830][ T31] ? path_openat+0x33f3/0x3dd0 [ 579.735607][ T31] path_openat+0x340e/0x3dd0 [ 579.740309][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 579.745704][ T31] ? stack_depot_save_flags+0x40/0x850 [ 579.751293][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 579.757037][ T31] ? getname_flags+0xb8/0x540 [ 579.761803][ T31] ? __pfx_path_openat+0x10/0x10 [ 579.766756][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 579.771784][ T31] do_filp_open+0x1fa/0x410 [ 579.776308][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 579.781437][ T31] ? _raw_spin_unlock+0x28/0x50 [ 579.786305][ T31] ? alloc_fd+0x64c/0x6c0 [ 579.790741][ T31] do_sys_openat2+0x121/0x200 [ 579.795432][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 579.800722][ T31] ? exc_page_fault+0x82/0x100 [ 579.805506][ T31] __x64_sys_openat+0x138/0x170 [ 579.810417][ T31] do_syscall_64+0xfa/0xf80 [ 579.814996][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.821167][ T31] ? clear_bhb_loop+0x60/0xb0 [ 579.825852][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.832024][ T31] RIP: 0033:0x7fe26e58f749 [ 579.836431][ T31] RSP: 002b:00007fe26f4a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 579.844916][ T31] RAX: ffffffffffffffda RBX: 00007fe26e7e6090 RCX: 00007fe26e58f749 [ 579.852981][ T31] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 579.861057][ T31] RBP: 00007fe26e613f91 R08: 0000000000000000 R09: 0000000000000000 [ 579.869144][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.877140][ T31] R13: 00007fe26e7e6128 R14: 00007fe26e7e6090 R15: 00007fff8afde858 [ 579.885208][ T31] [ 579.888331][ T31] INFO: task syz.4.4836:22249 blocked for more than 144 seconds. [ 579.896107][ T31] Not tainted syzkaller #0 [ 579.901148][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 579.910475][ T31] task:syz.4.4836 state:D stack:27904 pid:22249 tgid:22248 ppid:16035 task_flags:0x400140 flags:0x00080002 [ 579.922513][ T31] Call Trace: [ 579.925795][ T31] [ 579.928795][ T31] __schedule+0x14bc/0x5000 [ 579.933336][ T31] ? __pfx___schedule+0x10/0x10 [ 579.938247][ T31] ? schedule+0x91/0x360 [ 579.942535][ T31] schedule+0x165/0x360 [ 579.946678][ T31] schedule_preempt_disabled+0x13/0x30 [ 579.952210][ T31] __mutex_lock+0x7e6/0x1350 [ 579.956804][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 579.961802][ T31] ? __mutex_lock+0x5bb/0x1350 [ 579.966577][ T31] ? misc_open+0x51/0x350 [ 579.970993][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 579.976064][ T31] misc_open+0x51/0x350 [ 579.980321][ T31] chrdev_open+0x4cc/0x5e0 [ 579.984746][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 579.989864][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 579.996216][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 580.001409][ T31] do_dentry_open+0x7ce/0x1420 [ 580.006190][ T31] vfs_open+0x3b/0x340 [ 580.010339][ T31] ? path_openat+0x33f3/0x3dd0 [ 580.015107][ T31] path_openat+0x340e/0x3dd0 [ 580.019779][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 580.025166][ T31] ? stack_depot_save_flags+0x40/0x850 [ 580.030700][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 580.036342][ T31] ? getname_flags+0xb8/0x540 [ 580.041093][ T31] ? __pfx_path_openat+0x10/0x10 [ 580.046037][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 580.051065][ T31] do_filp_open+0x1fa/0x410 [ 580.055639][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 580.060748][ T31] ? _raw_spin_unlock+0x28/0x50 [ 580.065612][ T31] ? alloc_fd+0x64c/0x6c0 [ 580.070187][ T31] do_sys_openat2+0x121/0x200 [ 580.074882][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 580.080127][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 580.085336][ T31] __x64_sys_openat+0x138/0x170 [ 580.090255][ T31] do_syscall_64+0xfa/0xf80 [ 580.094766][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.100899][ T31] ? clear_bhb_loop+0x60/0xb0 [ 580.105579][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.111536][ T31] RIP: 0033:0x7f82e8f8f749 [ 580.115955][ T31] RSP: 002b:00007f82e9d5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 580.124465][ T31] RAX: ffffffffffffffda RBX: 00007f82e91e5fa0 RCX: 00007f82e8f8f749 [ 580.132565][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 580.140621][ T31] RBP: 00007f82e9013f91 R08: 0000000000000000 R09: 0000000000000000 [ 580.148653][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.156637][ T31] R13: 00007f82e91e6038 R14: 00007f82e91e5fa0 R15: 00007ffd43af7db8 [ 580.164721][ T31] [ 580.167824][ T31] INFO: task syz.4.4836:22252 blocked for more than 145 seconds. [ 580.175557][ T31] Not tainted syzkaller #0 [ 580.180570][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 580.189370][ T31] task:syz.4.4836 state:D stack:26936 pid:22252 tgid:22248 ppid:16035 task_flags:0x400140 flags:0x00080002 [ 580.201386][ T31] Call Trace: [ 580.204668][ T31] [ 580.207668][ T31] __schedule+0x14bc/0x5000 [ 580.212201][ T31] ? __pfx___schedule+0x10/0x10 [ 580.217047][ T31] ? schedule+0x91/0x360 [ 580.221375][ T31] schedule+0x165/0x360 [ 580.225532][ T31] schedule_preempt_disabled+0x13/0x30 [ 580.231130][ T31] __mutex_lock+0x7e6/0x1350 [ 580.235727][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 580.240796][ T31] ? __mutex_lock+0x5bb/0x1350 [ 580.245577][ T31] ? misc_open+0x51/0x350 [ 580.249973][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 580.255016][ T31] misc_open+0x51/0x350 [ 580.259241][ T31] chrdev_open+0x4cc/0x5e0 [ 580.263665][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 580.268669][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 580.275012][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 580.280405][ T31] do_dentry_open+0x7ce/0x1420 [ 580.285189][ T31] vfs_open+0x3b/0x340 [ 580.289330][ T31] ? path_openat+0x33f3/0x3dd0 [ 580.294134][ T31] path_openat+0x340e/0x3dd0 [ 580.298915][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 580.304306][ T31] ? stack_depot_save_flags+0x40/0x850 [ 580.310634][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 580.316302][ T31] ? getname_flags+0xb8/0x540 [ 580.321110][ T31] ? __pfx_path_openat+0x10/0x10 [ 580.326060][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 580.331100][ T31] do_filp_open+0x1fa/0x410 [ 580.335622][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 580.340759][ T31] ? _raw_spin_unlock+0x28/0x50 [ 580.345625][ T31] ? alloc_fd+0x64c/0x6c0 [ 580.350073][ T31] do_sys_openat2+0x121/0x200 [ 580.354763][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 580.360061][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 580.365278][ T31] __x64_sys_openat+0x138/0x170 [ 580.370225][ T31] do_syscall_64+0xfa/0xf80 [ 580.374740][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.380887][ T31] ? clear_bhb_loop+0x60/0xb0 [ 580.385574][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.394533][ T31] RIP: 0033:0x7f82e8f8f749 [ 580.399082][ T31] RSP: 002b:00007f82e71f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 580.407604][ T31] RAX: ffffffffffffffda RBX: 00007f82e91e6090 RCX: 00007f82e8f8f749 [ 580.415587][ T31] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 580.423763][ T31] RBP: 00007f82e9013f91 R08: 0000000000000000 R09: 0000000000000000 [ 580.431843][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.439904][ T31] R13: 00007f82e91e6128 R14: 00007f82e91e6090 R15: 00007ffd43af7db8 [ 580.447948][ T31] [ 580.450994][ T31] [ 580.450994][ T31] Showing all locks held in the system: [ 580.458832][ T31] 1 lock held by khungtaskd/31: [ 580.463691][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 580.473733][ T31] 2 locks held by getty/5583: [ 580.478489][ T31] #0: ffff88814daaa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 580.488310][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 580.498473][ T31] 3 locks held by kworker/1:6/5937: [ 580.503664][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 580.514684][ T31] #1: ffffc900050efb80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 580.528288][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 580.540072][ T31] 5 locks held by kworker/u8:12/5976: [ 580.545454][ T31] #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 580.556466][ T31] #1: ffffc90005257b80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 580.567102][ T31] #2: ffffffff8f304bf0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 580.576464][ T31] #3: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 580.585617][ T31] #4: ffffffff8df47578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 580.596584][ T31] 2 locks held by syz.2.4765/21996: [ 580.601829][ T31] #0: ffff888077d2e100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x300 [ 580.611669][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 580.621827][ T31] 2 locks held by syz.0.4766/22001: [ 580.627008][ T31] #0: ffff888065058100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x300 [ 580.636828][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 580.647001][ T31] 2 locks held by syz.1.4771/22033: [ 580.652259][ T31] #0: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 580.662491][ T31] #1: ffff888077d2e100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x3b/0x290 [ 580.671621][ T31] 2 locks held by syz.3.4822/22197: [ 580.676823][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 580.685482][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 580.695576][ T31] 1 lock held by syz.3.4822/22203: [ 580.700783][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 580.709358][ T31] 1 lock held by syz.4.4836/22249: [ 580.714464][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 580.723001][ T31] 1 lock held by syz.4.4836/22252: [ 580.728173][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 580.736609][ T31] 1 lock held by syz-executor/22262: [ 580.741984][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 580.750507][ T31] 1 lock held by syz-executor/22263: [ 580.755794][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 580.764334][ T31] 1 lock held by syz-executor/22265: [ 580.769749][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 580.778460][ T31] 1 lock held by syz-executor/22267: [ 580.783806][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 580.792401][ T31] 1 lock held by syz-executor/22269: [ 580.797744][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 580.806226][ T31] 1 lock held by syz-executor/22271: [ 580.811701][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 580.820252][ T31] 1 lock held by syz-executor/22273: [ 580.825533][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 580.834083][ T31] 1 lock held by syz-executor/22275: [ 580.839400][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 580.847887][ T31] 1 lock held by syz-executor/22277: [ 580.853166][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 580.861673][ T31] 1 lock held by syz-executor/22279: [ 580.866954][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 580.875604][ T31] 1 lock held by syz-executor/22281: [ 580.880943][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 580.889431][ T31] 1 lock held by syz-executor/22283: [ 580.894738][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 580.903268][ T31] 1 lock held by syz-executor/22285: [ 580.908609][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 580.917046][ T31] 1 lock held by syz-executor/22287: [ 580.922421][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 580.930939][ T31] 1 lock held by syz-executor/22289: [ 580.936231][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 580.944819][ T31] [ 580.947149][ T31] ============================================= [ 580.947149][ T31] [ 580.955745][ T31] NMI backtrace for cpu 1 [ 580.955764][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 580.955781][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 580.955789][ T31] Call Trace: [ 580.955796][ T31] [ 580.955804][ T31] dump_stack_lvl+0x189/0x250 [ 580.955827][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 580.955844][ T31] ? __pfx__printk+0x10/0x10 [ 580.955875][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 580.955898][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 580.955919][ T31] ? __pfx__printk+0x10/0x10 [ 580.955966][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 580.955989][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 580.956017][ T31] sys_info+0x135/0x170 [ 580.956032][ T31] watchdog+0xf95/0xfe0 [ 580.956056][ T31] ? watchdog+0x20a/0xfe0 [ 580.956081][ T31] kthread+0x711/0x8a0 [ 580.956102][ T31] ? __pfx_watchdog+0x10/0x10 [ 580.956119][ T31] ? __pfx_kthread+0x10/0x10 [ 580.956138][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 580.956157][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 580.956171][ T31] ? __pfx_kthread+0x10/0x10 [ 580.956188][ T31] ret_from_fork+0x599/0xb30 [ 580.956205][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 580.956228][ T31] ? __switch_to_asm+0x39/0x70 [ 580.956245][ T31] ? __switch_to_asm+0x33/0x70 [ 580.956260][ T31] ? __pfx_kthread+0x10/0x10 [ 580.956279][ T31] ret_from_fork_asm+0x1a/0x30 [ 580.956311][ T31] [ 580.956317][ T31] Sending NMI from CPU 1 to CPUs 0: [ 581.105495][ C0] NMI backtrace for cpu 0 [ 581.105511][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 581.105528][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 581.105537][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 581.105558][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 90 0c 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 581.105571][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 581.105585][ C0] RAX: d265e334118b9a00 RBX: ffffffff81978fda RCX: d265e334118b9a00 [ 581.105597][ C0] RDX: 0000000000000001 RSI: ffffffff8d7925ee RDI: ffffffff8bc08360 [ 581.105608][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 581.105619][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822070 [ 581.105630][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 581.105640][ C0] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 581.105653][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 581.105664][ C0] CR2: 00007f0a51917d60 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 581.105678][ C0] Call Trace: [ 581.105686][ C0] [ 581.105692][ C0] default_idle+0x13/0x20 [ 581.105709][ C0] default_idle_call+0x73/0xb0 [ 581.105726][ C0] do_idle+0x1ea/0x520 [ 581.105743][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 581.105763][ C0] ? __pfx_do_idle+0x10/0x10 [ 581.105783][ C0] ? do_idle+0xc/0x520 [ 581.105799][ C0] cpu_startup_entry+0x44/0x60 [ 581.105815][ C0] rest_init+0x2de/0x300 [ 581.105834][ C0] start_kernel+0x3a7/0x400 [ 581.105851][ C0] x86_64_start_reservations+0x24/0x30 [ 581.105870][ C0] x86_64_start_kernel+0x143/0x1c0 [ 581.105888][ C0] common_startup_64+0x13e/0x147 [ 581.105915][ C0] [ 581.291711][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 581.298610][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 581.307720][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 581.317762][ T31] Call Trace: [ 581.321029][ T31] [ 581.323945][ T31] dump_stack_lvl+0x99/0x250 [ 581.328529][ T31] ? __asan_memcpy+0x40/0x70 [ 581.333099][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 581.338278][ T31] ? __pfx__printk+0x10/0x10 [ 581.342894][ T31] vpanic+0x237/0x6d0 [ 581.346862][ T31] ? __pfx_vpanic+0x10/0x10 [ 581.351359][ T31] ? preempt_schedule_common+0x83/0xd0 [ 581.356829][ T31] panic+0xb9/0xc0 [ 581.360545][ T31] ? __pfx_panic+0x10/0x10 [ 581.364952][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 581.370318][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 581.376464][ T31] watchdog+0xfdf/0xfe0 [ 581.380623][ T31] ? watchdog+0x20a/0xfe0 [ 581.384948][ T31] kthread+0x711/0x8a0 [ 581.389013][ T31] ? __pfx_watchdog+0x10/0x10 [ 581.393681][ T31] ? __pfx_kthread+0x10/0x10 [ 581.398267][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 581.403469][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 581.408652][ T31] ? __pfx_kthread+0x10/0x10 [ 581.413233][ T31] ret_from_fork+0x599/0xb30 [ 581.417811][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 581.422915][ T31] ? __switch_to_asm+0x39/0x70 [ 581.427666][ T31] ? __switch_to_asm+0x33/0x70 [ 581.432417][ T31] ? __pfx_kthread+0x10/0x10 [ 581.436995][ T31] ret_from_fork_asm+0x1a/0x30 [ 581.441761][ T31] [ 581.445221][ T31] Kernel Offset: disabled [ 581.449532][ T31] Rebooting in 86400 seconds..