last executing test programs: 2m16.477677962s ago: executing program 2 (id=451): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x7c, 0x30, 0x9, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x40}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x3c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c181}, 0x0) 2m16.025454989s ago: executing program 2 (id=457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, &(0x7f0000002180)) r2 = socket(0x10, 0x803, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r3, 0x20, &(0x7f0000000140)={&(0x7f0000000340)=""/224, 0xe0, 0x0, &(0x7f0000000000)=""/14, 0xe}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x718}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}], [{}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000060000000bf0900000000000055090100000000009500000000000000bf91000000000000b5020000000000008500000000000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r9, 0x8983, &(0x7f0000000040)) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000440)={'syz_tun\x00', {0x2, 0x0, @remote}}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xffe2}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {}, {0x3, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x2c, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0xf0, 0x7, 0x2}}}]}}]}]}]}}]}, 0x70}}, 0x20040054) 2m15.37022274s ago: executing program 2 (id=467): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="0201"], 0x70}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x37, 0x0, &(0x7f00000000c0)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000076000907000000000000000007020000", @ANYRES32=0x0, @ANYBLOB="0c000d800800030000bd"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000300)=ANY=[@ANYBLOB="00000200aaaaaa"]) close(r6) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'wg0\x00', @random="000300"}) r7 = socket(0x10, 0x803, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b70000000000000061111c0000000000c60000000000000095000000000000001eefadd6132b2142b7929349cc6f836b8cba9cc7d517ab051ae031806f86b1cb2abe8a9eb510f32d6ef48ac947e8b6896e7fdcce25c7be8ce0f3c170040f7133c787dae2805f7058c681d1d743460810169e1378acf56d92b8fe58da7b9aba4b306edfce0e66519ba3c034842244173b18f1156075de92c77cbf5a6eb7914ed0027f4909580679e7f344dcea34de837fd2cf89fa57eeb28ab43a80f7801b6f3fa4dc304306e4c949e55df08e5401001fc120583a6cf8c979f916c6cc89e115ce2ae54e00daceac3d5199af3ba48061c21742b4a2d837fa7db400d337"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) getsockopt$rose(r8, 0x104, 0x1, 0x0, &(0x7f00000001c0)) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001d000137440000000000487007"], 0x14}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmmsg(r9, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0) 2m14.868924885s ago: executing program 2 (id=472): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000006d12aa3c7e89960e2a7f4d1c27a5dce846a0421d7693ea734f5db71b9b6d2d8aba32d9bfbab9bd94a58e3d"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5, r4}, 0x38) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 2m14.696635664s ago: executing program 2 (id=475): r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000ac0), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000040)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e2a, 0xfffffffb, @local, 0x80009}, 0x1c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r3}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0xe325, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000000)={r1, 0x1, 0x100000000000000, 0x4006}) sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x2c, r0, 0x210, 0x70bd22, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x448c5}, 0x4) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r0, 0x1}, 0x14}}, 0x0) 2m14.452831749s ago: executing program 2 (id=479): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4000300}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x17, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f00000000c0)=0x5, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000"], 0xfdef) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r8, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4000300}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x17, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f00000000c0)=0x5, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000"], 0xfdef) (async) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r8, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) (async) 1m59.392535681s ago: executing program 32 (id=479): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4000300}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x17, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f00000000c0)=0x5, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000"], 0xfdef) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r8, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4000300}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x17, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f00000000c0)=0x5, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000"], 0xfdef) (async) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r8, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) (async) 1m41.752659516s ago: executing program 4 (id=681): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xe, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) listen(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000b40), &(0x7f0000000180)=@tcp}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r4, &(0x7f0000000340)}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) recvfrom$inet6(r5, &(0x7f00000002c0)=""/152, 0x98, 0x10020, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x4, 0xf) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xff, 0x0, 0x1, 0x41fd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r10 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r9}, 0x8) close(r10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r10, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @jmp={0x5, 0x1, 0xd, 0xa, 0x8, 0xfffffffffffffff8, 0x4}], &(0x7f0000000040)='GPL\x00', 0xff2, 0xb9, &(0x7f00000000c0)=""/185, 0x41000, 0x0, '\x00', r2, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x4, 0x9, 0xffff, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[r4, r6, r7, r0, r8, r10], &(0x7f00000003c0)=[{0x5, 0x3, 0xd, 0x1}, {0x2, 0x3, 0xf, 0x5}, {0x3, 0x4, 0xd, 0x4}, {0x0, 0x2, 0x9, 0x5}, {0x3, 0x2, 0x10, 0x3}, {0x1, 0x5, 0xf, 0x2}, {0x4, 0x5, 0xc}], 0x10, 0xe0bc, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) 1m26.145959773s ago: executing program 4 (id=681): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xe, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) listen(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000b40), &(0x7f0000000180)=@tcp}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r4, &(0x7f0000000340)}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) recvfrom$inet6(r5, &(0x7f00000002c0)=""/152, 0x98, 0x10020, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x4, 0xf) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xff, 0x0, 0x1, 0x41fd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r10 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r9}, 0x8) close(r10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r10, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @jmp={0x5, 0x1, 0xd, 0xa, 0x8, 0xfffffffffffffff8, 0x4}], &(0x7f0000000040)='GPL\x00', 0xff2, 0xb9, &(0x7f00000000c0)=""/185, 0x41000, 0x0, '\x00', r2, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x4, 0x9, 0xffff, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[r4, r6, r7, r0, r8, r10], &(0x7f00000003c0)=[{0x5, 0x3, 0xd, 0x1}, {0x2, 0x3, 0xf, 0x5}, {0x3, 0x4, 0xd, 0x4}, {0x0, 0x2, 0x9, 0x5}, {0x3, 0x2, 0x10, 0x3}, {0x1, 0x5, 0xf, 0x2}, {0x4, 0x5, 0xc}], 0x10, 0xe0bc, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) 1m17.072535122s ago: executing program 4 (id=681): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xe, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) listen(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000b40), &(0x7f0000000180)=@tcp}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r4, &(0x7f0000000340)}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) recvfrom$inet6(r5, &(0x7f00000002c0)=""/152, 0x98, 0x10020, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x4, 0xf) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xff, 0x0, 0x1, 0x41fd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r10 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r9}, 0x8) close(r10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r10, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @jmp={0x5, 0x1, 0xd, 0xa, 0x8, 0xfffffffffffffff8, 0x4}], &(0x7f0000000040)='GPL\x00', 0xff2, 0xb9, &(0x7f00000000c0)=""/185, 0x41000, 0x0, '\x00', r2, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x4, 0x9, 0xffff, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[r4, r6, r7, r0, r8, r10], &(0x7f00000003c0)=[{0x5, 0x3, 0xd, 0x1}, {0x2, 0x3, 0xf, 0x5}, {0x3, 0x4, 0xd, 0x4}, {0x0, 0x2, 0x9, 0x5}, {0x3, 0x2, 0x10, 0x3}, {0x1, 0x5, 0xf, 0x2}, {0x4, 0x5, 0xc}], 0x10, 0xe0bc, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) 1m5.112252619s ago: executing program 4 (id=681): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xe, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) listen(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000b40), &(0x7f0000000180)=@tcp}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r4, &(0x7f0000000340)}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) recvfrom$inet6(r5, &(0x7f00000002c0)=""/152, 0x98, 0x10020, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x4, 0xf) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xff, 0x0, 0x1, 0x41fd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r10 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r9}, 0x8) close(r10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r10, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @jmp={0x5, 0x1, 0xd, 0xa, 0x8, 0xfffffffffffffff8, 0x4}], &(0x7f0000000040)='GPL\x00', 0xff2, 0xb9, &(0x7f00000000c0)=""/185, 0x41000, 0x0, '\x00', r2, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x4, 0x9, 0xffff, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[r4, r6, r7, r0, r8, r10], &(0x7f00000003c0)=[{0x5, 0x3, 0xd, 0x1}, {0x2, 0x3, 0xf, 0x5}, {0x3, 0x4, 0xd, 0x4}, {0x0, 0x2, 0x9, 0x5}, {0x3, 0x2, 0x10, 0x3}, {0x1, 0x5, 0xf, 0x2}, {0x4, 0x5, 0xc}], 0x10, 0xe0bc, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) 53.069469881s ago: executing program 4 (id=681): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xe, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) listen(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000b40), &(0x7f0000000180)=@tcp}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r4, &(0x7f0000000340)}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) recvfrom$inet6(r5, &(0x7f00000002c0)=""/152, 0x98, 0x10020, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x4, 0xf) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xff, 0x0, 0x1, 0x41fd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r10 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r9}, 0x8) close(r10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r10, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @jmp={0x5, 0x1, 0xd, 0xa, 0x8, 0xfffffffffffffff8, 0x4}], &(0x7f0000000040)='GPL\x00', 0xff2, 0xb9, &(0x7f00000000c0)=""/185, 0x41000, 0x0, '\x00', r2, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x4, 0x9, 0xffff, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[r4, r6, r7, r0, r8, r10], &(0x7f00000003c0)=[{0x5, 0x3, 0xd, 0x1}, {0x2, 0x3, 0xf, 0x5}, {0x3, 0x4, 0xd, 0x4}, {0x0, 0x2, 0x9, 0x5}, {0x3, 0x2, 0x10, 0x3}, {0x1, 0x5, 0xf, 0x2}, {0x4, 0x5, 0xc}], 0x10, 0xe0bc, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) 37.280210283s ago: executing program 4 (id=681): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xe, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) listen(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000b40), &(0x7f0000000180)=@tcp}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r4, &(0x7f0000000340)}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) recvfrom$inet6(r5, &(0x7f00000002c0)=""/152, 0x98, 0x10020, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x4, 0xf) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xff, 0x0, 0x1, 0x41fd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r10 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r9}, 0x8) close(r10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r10, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @jmp={0x5, 0x1, 0xd, 0xa, 0x8, 0xfffffffffffffff8, 0x4}], &(0x7f0000000040)='GPL\x00', 0xff2, 0xb9, &(0x7f00000000c0)=""/185, 0x41000, 0x0, '\x00', r2, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x4, 0x9, 0xffff, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[r4, r6, r7, r0, r8, r10], &(0x7f00000003c0)=[{0x5, 0x3, 0xd, 0x1}, {0x2, 0x3, 0xf, 0x5}, {0x3, 0x4, 0xd, 0x4}, {0x0, 0x2, 0x9, 0x5}, {0x3, 0x2, 0x10, 0x3}, {0x1, 0x5, 0xf, 0x2}, {0x4, 0x5, 0xc}], 0x10, 0xe0bc, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) 27.100269079s ago: executing program 1 (id=1514): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) accept$ax25(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x284, r1, 0x5, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x268, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x3, 0x2}, {}, {0x7, 0xa}, {0x0, 0x3}, {0x1, 0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x7, 0x2}, {0x1, 0x8}, {0x2, 0x9}, {0x2, 0x7}, {0x6, 0x8}, {0x0, 0x1}, {0x5, 0xa}, {0x0, 0x5}, {0x6, 0x8}, {0x1, 0x3}, {0x4, 0x7}, {0x0, 0x1}, {0x6, 0x7}, {0x3, 0x4}, {0x5, 0x1}, {0x0, 0x5}, {0x6, 0x4}, {0x2, 0x3}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x2}, {0x0, 0x6}, {0x0, 0x2}, {0x0, 0x7}, {0x1, 0x2}, {0x0, 0xa}, {0x2}, {0x7, 0x4}, {0x0, 0x2}, {0x6, 0x8}, {0x5, 0x6}, {0x6, 0xa}, {0x2, 0x9}, {0x3, 0x2}, {0x0, 0x6}, {0x4, 0x2}, {0x0, 0x1}, {0x0, 0x5}, {0x6, 0x6}, {0x1, 0x5}, {0x1, 0x2}, {0x2, 0xa}, {0x0, 0x5}, {0x7, 0x9}, {0x0, 0x8}, {0x2, 0x9}, {0x0, 0x4}, {0x2, 0x4}, {0x0, 0x4}, {0x1, 0x3}, {0x5, 0x8}, {0x6, 0x7}, {0x7, 0x6}, {0x7, 0xa}, {0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x8}, {0x0, 0x5}, {0x3, 0x1}, {0x2, 0x7}, {0x1, 0x4}, {0x5, 0x3}, {}, {0x6, 0x3}, {0x1, 0x9}, {0x6, 0x9}, {0x6, 0x4}, {0x0, 0x4}, {0x3, 0x7}, {0x7, 0x2}, {0x4, 0x1}, {0x1, 0x9}, {0x6, 0x7}, {0x4, 0x5}, {0x1}, {0x7}, {0x5, 0x1}, {0x0, 0x8}, {0x3, 0x5}, {0x2, 0x2}, {0x4, 0x6}, {0x2, 0x1}, {0x6, 0x2}, {0x0, 0x5}, {0x1, 0x8}, {0x7, 0xa}, {0x1, 0x2}, {0x3, 0x9}, {0x0, 0x1}, {0x1}, {0x5, 0x6}, {0x2, 0xa}, {0x1, 0x6}, {0x5}]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x6, 0x2}, {0x1, 0x6}, {0x4, 0x2}, {0x0, 0x2}, {0x7, 0xa}, {0x1, 0x8}, {0x1}, {0x3}, {0x2, 0x7}, {0x2}, {0x1, 0xa}, {0x5, 0x1}, {0x1, 0x4}, {0x2, 0x6}, {0x3, 0x1}, {0x4, 0xa}, {0x3, 0x7}, {0x0, 0x2}, {}, {0x6, 0x2}, {0x2, 0xa}, {0x4, 0x6}, {0x5, 0x5}, {0x7, 0xa}, {0x5, 0x2}, {0x1, 0x3}, {0x6}, {0x1, 0x9}, {0x3, 0x1}, {0x4, 0x3}, {0x0, 0x3}, {0x0, 0xa}, {0x1, 0x1}, {0x7, 0x7}, {0x7, 0x5}, {0x6, 0x5}, {0x6, 0xa}, {0x1, 0x6}, {0x4, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x699a, 0x5, 0x800, 0x1000, 0xc, 0x1, 0xfffc, 0x566f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7d, 0xa, 0x7, 0x100, 0x8, 0x81, 0x100]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x200, 0x200, 0x2, 0x0, 0x333c, 0x1f85, 0x6]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x1}, {0x5, 0x1}, {0x1, 0x5}, {0x5, 0x8}, {0x1, 0x3}, {0x1, 0x7}, {0x7, 0x5}, {0x5, 0x3}, {0x4, 0x6}, {0x4, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x7, 0x7}, {0x5, 0x8}, {0x0, 0x1d}, {0x1, 0x6}, {0x3, 0x3}, {0x6, 0x8}, {0x3, 0x6}, {0x1, 0x8}, {}, {0x2, 0x5}, {0x2, 0x2}, {0x7, 0x2}, {0x3, 0x3}, {0x6, 0x4}, {0x5, 0x6}, {0x4, 0x9}, {0x1, 0x2}, {0x5}, {0x6, 0xa}, {0x6}, {}, {0x2, 0x2}, {0x5, 0x4}, {0x5, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x3, 0x1}, {0x7, 0x1}, {0x3, 0x7}, {0x6, 0xa}, {0x1, 0x7}, {0x7, 0x1}, {0x1, 0x4}, {0x0, 0x5}, {0x4}, {0x6, 0x7}, {0x1, 0xa}, {0x5, 0x3}, {0x4, 0x8}, {0x1, 0x9}, {0x4}, {0x1, 0x8}, {0x2, 0x4}, {0x5, 0x7}, {0x6, 0x3}, {0x1, 0x7}, {0x1, 0xa}, {0x5}, {0x7, 0x3}, {0x0, 0x7}, {0x3, 0x2}, {0x2, 0x2}, {0x2, 0x5}, {0x5, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0x6037, 0xffef, 0x9, 0x9, 0x6, 0x9, 0x5]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x48, 0x3, 0xb, 0x2, 0x16, 0x16, 0xb, 0x16, 0x5, 0x3, 0x1b, 0x0, 0x6c, 0x18, 0x3b, 0x24, 0x1, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xce, 0xf312, 0x1ff, 0x8, 0x4, 0x2b21, 0x0, 0x4]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x60, 0x12, 0x16, 0x16, 0xb, 0x3, 0x60, 0xb, 0x2, 0x6c, 0xb, 0x6c, 0x5, 0x30, 0x60, 0x48, 0x18]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x7, 0x0, 0x8, 0x7, 0x6, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x5, 0x5, 0xffff, 0x8001, 0x5, 0xac7, 0xfffc]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xb, 0x1, 0x48, 0xc, 0x30, 0x4, 0x24, 0xb, 0x5, 0x0, 0xb, 0x1b, 0xb, 0x30, 0x36, 0x47, 0x16, 0x3, 0x30, 0x5, 0x2, 0x2, 0x1b, 0xc2, 0x5, 0x16, 0x6, 0x6c, 0xc, 0x48, 0x24]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x2, 0x9, 0x3, 0x9, 0x4, 0x6]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x6, 0x2, 0x6, 0x8, 0x6, 0x1]}}]}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x20001000}, 0x0) 26.944189948s ago: executing program 1 (id=1515): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvfrom$phonet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0x801c581f, 0x30000002000005c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x7f, 0x2, 0x9, 0xd, 0x4, 0x7, 0x8, 0x5, 0x2, 0xc, 0x6, 0x40, 0x13, 0x48}, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f00000012c0)=@ethtool_gstrings={0x1b, 0x6}}) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) recvmmsg(r3, &(0x7f0000007400)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) write(r4, &(0x7f0000000000)="2aac344a3e4851be43137b1121ee34ff6576845baf1f40074e7cf33e1dc1444673e4c341742f81a407a8613bd35449bcf012bc57d8403e150a7c2b28370d227733b8a66e9fe5e5236d51ee2acfd89ce7b4d13a5f7d619bdd53d314", 0x5b) 26.241288247s ago: executing program 3 (id=1522): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x11, 0x4000}]}}]}, 0x38}}, 0x0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x30, r6, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000dadfed011922c9f48d967100000000000000060000009500000000002d0a000000"], &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@cgroup, r8, 0x2f, 0x34, r8, @void, @void, @void, @value}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000300)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x7fff, 0x1000, 0x3a, 0x0, 0xfffffffd}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x98}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 25.960870576s ago: executing program 5 (id=1524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0xc8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000080) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0104000000000000000002000000200004801c0001800b0001006e756d67656e00000c00028008000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000aa3454eacc0629c5ca68c068efde484f2a8e27a067cde7fa7f60ed7b26338375067a67408f8763ad8a2c4c1992f611f5be0a5fd8c25722ab97eb76f12f48c63b9b28136810007324424471251036ccb3a2a0cff5ad5aac553cdd507423ed8ed6fec5eb36bde1344f1b6058bd68a97ce30c0fc01735a52979e3294cb8992dffcfc6305631c30c5fe2490adf499fed0aa34a524ffb2209642f9b48b35f7b15bea7587259a331133965b496fee37aaac8e18e50369c3ad53a61701cda5184f05bcdb7305fab8780611324cc07154cc509d3a15500c44821bb5ce0f545d9a68c9d7cd7369df572adbe4638080ba09dc37df309ecc8e"], 0x74}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x1, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x2004c810) 25.932237535s ago: executing program 1 (id=1525): socket$inet6_dccp(0xa, 0x6, 0x0) (async) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x10004) (async) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x10004) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x1118}, 0x8040) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x160, 0x2b8, 0x182, 0x0, 0x0, 0x278, 0x3a8, 0x3a8, 0x278, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x160, 0x0, {0x0, 0xe0ffff00000000}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x268}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) 25.887168997s ago: executing program 0 (id=1526): r0 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x7, 0x0, 0x0, [0x0, 0x0]}]}}}], 0x38}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1e, &(0x7f0000000100)=ANY=[@ANYBLOB="1800020009000000000000000080080018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000002f60040000000000950000000000000019a301000100000018100000", @ANYRES32=r4, @ANYBLOB="0000000000000000a590c0ff0400000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000000480800050000009d65feff08000000950000000000000087214800ffffffffbf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000200)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x1, 0x0, 0xcf9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0xffffffffffffffff, r4], &(0x7f00000002c0)=[{0x5, 0x1, 0x3, 0x8}], 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000440)=r5, 0x4) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000001f00)) socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x40a40, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000002f80), &(0x7f0000003680)=0x8) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f00000000c0)=0x1) ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="280000002b000bf9dc0adc317e6f48250900000008000200040001000c0001"], 0x28}}, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r10, 0x8948, &(0x7f0000000000)={'vlan0\x00', 0x10001}) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f0000000480)=@x25, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/244, 0xf4}], 0x1, &(0x7f0000000640)=""/71, 0x47}, 0x10816ea3}, {{&(0x7f00000006c0)=@nl=@unspec, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000740)=""/118, 0x76}, {&(0x7f00000007c0)=""/228, 0xe4}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001900)=""/152, 0x98}, 0xd}, {{&(0x7f00000019c0)=@caif=@dbg, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001a40)=""/69, 0x45}, {&(0x7f0000001ac0)=""/152, 0x98}, {&(0x7f0000001b80)=""/66, 0x42}, {&(0x7f0000001c00)=""/120, 0x78}, {&(0x7f0000001c80)=""/81, 0x51}, {&(0x7f0000001d00)=""/97, 0x61}], 0x6, &(0x7f0000001f40)=""/4096, 0x1000}}, {{&(0x7f0000001e00)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000003180)=[{&(0x7f0000001e80)=""/84, 0x54}, {&(0x7f0000002f40)=""/6, 0x6}, {&(0x7f0000002f80)}, {&(0x7f0000002fc0)=""/89, 0x59}, {&(0x7f0000003040)=""/185, 0xb9}, {&(0x7f0000003100)=""/22, 0x16}, {&(0x7f0000003140)=""/18, 0x12}], 0x7, &(0x7f0000003200)=""/185, 0xb9}, 0x722}, {{&(0x7f00000032c0)=@tipc=@name, 0x80, &(0x7f0000003480)=[{&(0x7f0000003340)=""/100, 0x64}, {&(0x7f00000033c0)=""/19, 0x13}, {&(0x7f0000003400)=""/116, 0x74}], 0x3}, 0x1}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f00000034c0)=""/174, 0xae}], 0x1, &(0x7f00000035c0)=""/104, 0x68}, 0x6}], 0x6, 0x22, &(0x7f0000003640)={0x77359400}) write$tun(r2, &(0x7f0000000040)={@void, @void, @x25={0x1, 0xec, 0x17, "42d6f64679ff45c577552e01b43b9458e10c3ddb731e1206"}}, 0x1b) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000003740)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @remote}, 0x6, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 'wg1\x00'}) 25.624437982s ago: executing program 3 (id=1527): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="8df00000", @ANYRES16=0x0, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x400c1c0}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x6, 0x3, 0x7, 0x200, 0x10, 0xf, 0x40, 0x80, 0x6, 0xffffffffffff8000, 0x8, 0x1}, 0x8, [0x0]}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0xe0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x95, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000001500), &(0x7f0000001540), 0x8, 0xae, 0x8, 0x8, &(0x7f0000001580)}}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001700)={@local, @loopback, 0x0}, &(0x7f0000001740)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001a80)={'ip_vti0\x00', &(0x7f0000001780)={'tunl0\x00', 0x0, 0x10, 0x8000, 0x4, 0x3, {{0xe, 0x4, 0x3, 0x8, 0x38, 0x65, 0x0, 0x81, 0x29, 0x0, @broadcast, @broadcast, {[@lsrr={0x83, 0x23, 0x6a, [@empty, @remote, @empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2d}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000018c0)={'ip6tnl0\x00', &(0x7f0000001840)={'syztnl2\x00', 0x0, 0x2f, 0xe, 0x1, 0x9, 0x18, @private1, @mcast2, 0x7, 0x10, 0x4, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001900)={'batadv_slave_1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001940)=0x0, &(0x7f0000001980)=0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000019c0)={0x0, @dev, @multicast2}, &(0x7f0000001a00)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x58, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYRES16=r6, @ANYRES32=0x0, @ANYBLOB="20000000000000004000128008000100687372003400028008000200", @ANYRES32=r13, @ANYBLOB="050006000000000008000100", @ANYRES32=r2, @ANYBLOB="0500070001000000050003000000000005000700"], 0x60}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001b00)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001bc0)={'ip6_vti0\x00', &(0x7f0000001b40)={'ip6_vti0\x00', 0x0, 0x4, 0x8, 0x1, 0xb16, 0x0, @private1, @local, 0x20, 0x40, 0x3, 0x9}}) r16 = socket$unix(0x1, 0x1, 0x0) r17 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r17, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r18, {}, {0xf, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4000}}}, @TCA_STAB={0x4}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001c00)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001c40)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001d40)={'syztnl2\x00', &(0x7f0000001c80)={'erspan0\x00', 0x0, 0x8007, 0x7830, 0x3, 0xe, {{0x25, 0x4, 0x2, 0x6, 0x94, 0x66, 0x0, 0x0, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0xbd, 0x1, 0x5, [{@loopback, 0x6ad}, {@private=0xa010100, 0x10000}, {@broadcast, 0x2}, {@local, 0xe}, {@multicast2, 0x200}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}]}, @generic={0x86, 0x10, "59b3960c5be69fcc4699f84bb20d"}, @timestamp={0x44, 0x18, 0x95, 0x0, 0x7, [0x7fff, 0x81, 0x9, 0x8, 0xfffffffd]}, @timestamp={0x44, 0x10, 0x87, 0x0, 0x1, [0x2ee, 0x9, 0x7]}, @timestamp={0x44, 0x8, 0xa0, 0x0, 0x9, [0xffffffff]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000024c0)={&(0x7f0000002540)=ANY=[@ANYBLOB="04070000", @ANYRES16=r2, @ANYBLOB="000429bd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="cc01028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000700000008000100", @ANYRES32=0x0, @ANYBLOB="2c0202803c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c000400080003090000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400250000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=r7, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ffff000008000600", @ANYRES32=r9, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="34010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32=r13, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=r14, @ANYBLOB="38000100240001006e6f7469666572735f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000001050000040800060061afad0f2b5042f2c6a765d99ef1dd0727f8454c21c44c6e59ef28d03818fa3aa38c5829ce67a409728f31c6", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r18, @ANYBLOB="a4010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=r19, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ffffffff38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040005000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=r20, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r21, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400090000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x704}, 0x1, 0x0, 0x0, 0x20008800}, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000500)={r1, 0x4}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000000053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 25.128622973s ago: executing program 3 (id=1528): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000180), 0x4) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f0000000080)) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newae={0x5c, 0x1e, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@rand_addr=' \x01\x00', 0x4d6, 0x2, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x70bd2a, 0x70bd28, 0x70bd2c, 0x5}}]}, 0x5c}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r2}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r2}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 25.12693804s ago: executing program 3 (id=1529): syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r2 = socket(0x840000000002, 0x3, 0xff) (async) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmmsg$inet(r2, &(0x7f0000000400)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a905000064e6", 0x6}, {&(0x7f0000000600)="1746405d2961fda6f461a660cc08", 0xe}], 0x2}}], 0x1, 0x24008800) (async) setsockopt$ax25_int(r2, 0x101, 0x5, &(0x7f0000000040)=0x2c2, 0x4) 24.779770289s ago: executing program 5 (id=1530): r0 = socket(0x10, 0x3, 0x0) shutdown(r0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010000000000000000001c0000000c00070000"], 0x20}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x2, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000600], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x1a6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14144008000700e000030a08000a00", @ANYRES32], 0x48}}, 0x0) 24.779261771s ago: executing program 0 (id=1531): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@migrate={0x15c, 0x21, 0xd39, 0x0, 0x0, {{@in=@dev, @in6=@mcast2}}, [@algo_comp={0x10c, 0x3, {{'lzs\x00'}, 0x620, "fd335a241ad00e04f651e898803eaf25e5ddd95463e814d986dcc168e64c83b54a60b28746cb7b8f71ae842274c528c24275c8f8688940aed673a5d8e89acb493af7f910d9dd0eb0dc027220204aaa8318435386d592cb07cb44809f67b0e9d4b94e63b1921fa26afa1f1c9c5fc88926ad261e64e97ffa9d19aa8cfec1a546c7d55b19e3468c692edaa3c276b4ddfd7ea678814e0f1c5e91baab57528955bb81d27a046f5f552fc2e3dc782181b659646e09c9f4094731a98a2eb8fbc7b2556cd435fdb1"}}]}, 0x15c}}, 0x0) 24.77881974s ago: executing program 0 (id=1532): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005040a0017000000"], 0x3c}}, 0x0) 24.453415389s ago: executing program 1 (id=1533): r0 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0xb, 0x0, &(0x7f0000000100)=0x2be628de19587dbc) (async) getsockopt$packet_int(r3, 0x107, 0xb, 0x0, &(0x7f0000000100)=0x2be628de19587dbc) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2084de9", 0x4}], 0x1}, 0x4000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_getroute={0x24, 0x1a, 0x0, 0x0, 0x0, {0xa}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_getroute={0x24, 0x1a, 0x0, 0x0, 0x0, {0xa}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000019000100000000000000000023"], 0x24}}, 0x0) close(r0) 24.064375011s ago: executing program 3 (id=1534): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r0, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 23.326118195s ago: executing program 1 (id=1535): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1f}, 0x5c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x20, r2, 0x4, 0x804, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) 20.912269554s ago: executing program 3 (id=1536): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x0, 0xfffffff9, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x5ab2bda88c8829ca}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xff}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xfff}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0xa4}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x7, 0x1, 0x1000, 0xd, {{0xf, 0x4, 0x3, 0x9, 0x3c, 0x68, 0x0, 0xd, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x5, 0x10, "456c9f59780b62d2ff7ef48698db"}]}, @ssrr={0x89, 0xf, 0x3b, [@empty, @dev={0xac, 0x14, 0x14, 0x28}, @loopback]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x80, 0x24, 0x10, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x2, 0xffe0}, {0x4, 0x9}, {0xb, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x100}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x40, 0x8, 0x2, 0x6, 0x4}, 0x61db, 0x0, 0x7fffffff, 0x5, 0x8, 0x10, 0x9, 0xf, 0x3, 0x3, {0x0, 0x0, 0x6, 0x7, 0x1, 0x9}}}}]}, 0x80}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x42041}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x44, 0x0, 0x9, 0x3, 0x0, 0x0, {0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x44, 0x11, 0x43d, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r5, {0x10}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x5}, {0x8}, {0x8, 0xb, 0x2}]}, 0x44}}, 0x0) 20.91199858s ago: executing program 0 (id=1537): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x2, 0x6, 0x2, 0x2, 0x5, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_address={0x3, 0x17, 0x2b, 0x80, 0x0, @in={0x2, 0x4e22, @loopback}}]}, 0x28}}, 0x40c0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)="e99ed66a87ee040000000000e009850ee423b8ff62725b00000000001a35d6a1a06a9e60c0fa80b608e1ca6e320dc09f0e773043d3c84bcb589e35fb46066ae4c63875a8a6fddaaac23f94160e7059217cd6403ced7d7418f4b607681ccfb51c0ceac67a4dddea44cf62acd05ceabae250843c357ad3646dfc8ff8f0ce777978458a09b9dc81a07078a36362ff3fcbe9b45100dd13e685dbab4c93f829cd2ecee01d65f61bdb8bc2ebc351f6fa42236f8accc6ca25a1899b2b227127483268907aa6e44e9c1618ca4a0dd877ab03bff8f086195ebf9b07f851be3c140439", 0xde}, 0x1, 0x0, 0x0, 0x2000c0a3}, 0x40040d0) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x14) accept$packet(r2, 0x0, &(0x7f0000000200)) 20.511918509s ago: executing program 1 (id=1538): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}]}]}], {0x14}}, 0x98}}, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x14, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x2, 0x892f}, {}, {}, {0xa888}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000068002000000000000000ff7f00000000040000000000000006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="850000000800000076000000000001003d0000000000000095000000000000000000a58fc9093e220f8900f3c474313bd69170d74a50a7eaa3da9dbfc07698cc25105bd66a97a236bc41073b6ecef48f25609e4a2ac44b7eb68c77a63aa393ad73bc897e0049e4b4fe"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8e, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r3) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xac, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0xac}}, 0x800) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r5, @ANYBLOB="1c005e80060005"], 0x38}}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44cb", @ANYRES16=r7, @ANYBLOB="04002cbd7000fcdbdf250d000000080004000700000008000400080000000800050000000000080004000700000008000600060000000800050000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x20040851) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000)=0xd, 0x4) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001bc0)=@newtfilter={0xf20, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0xef4, 0x2, [@TCA_BPF_NAME={0xef0, 0x7, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}}]}, 0xf20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 20.190597492s ago: executing program 0 (id=1539): r0 = socket(0x23, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1089}, [@IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a0001000000000000000000022000000000b8"], 0x2c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a0001000000000000000000022000000000b8"], 0x2c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) 18.464898868s ago: executing program 0 (id=1540): r0 = socket$igmp6(0xa, 0x3, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map, r2, 0x37, 0x0, 0x0, @void, @value}, 0x20) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xe}, 0x1c) (async) listen(r4, 0x50) (async) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) listen(r5, 0x50) (async) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x24}}, 0x0) (async) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @private1, [@hopopts={0x11}], "fafb17c103001c193eb46558f48ce6b9"}}}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan1\x00', &(0x7f0000000000)=@ethtool_ringparam={0x34}}) 15.752798295s ago: executing program 5 (id=1541): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, r1, 0x2, 0x70b525, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8821}, 0x4810) 15.75236924s ago: executing program 5 (id=1542): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff060000000100000045000000250000001900040004", 0x25}], 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000100000004000480080002000100000008000b"], 0x28}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f088471fff290000003b0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7472ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 15.750959187s ago: executing program 5 (id=1543): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000020000004000000000000000000900010073797a30"], 0xd8}}, 0x0) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0xbe, @remote, 0x5, 0x1}, 0x20) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) (async) sendmsg$tipc(r5, &(0x7f0000000000)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 14.873001065s ago: executing program 5 (id=1544): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb9}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000)={0x2, 0xffffffff, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x95, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x4d, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fdffffff0f0000003000078008000100050000000800020007"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x3}, 0x10) 5.451610269s ago: executing program 33 (id=1538): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}]}]}], {0x14}}, 0x98}}, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x14, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x2, 0x892f}, {}, {}, {0xa888}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000068002000000000000000ff7f00000000040000000000000006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="850000000800000076000000000001003d0000000000000095000000000000000000a58fc9093e220f8900f3c474313bd69170d74a50a7eaa3da9dbfc07698cc25105bd66a97a236bc41073b6ecef48f25609e4a2ac44b7eb68c77a63aa393ad73bc897e0049e4b4fe"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8e, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r3) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xac, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0xac}}, 0x800) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r5, @ANYBLOB="1c005e80060005"], 0x38}}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44cb", @ANYRES16=r7, @ANYBLOB="04002cbd7000fcdbdf250d000000080004000700000008000400080000000800050000000000080004000700000008000600060000000800050000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x20040851) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000)=0xd, 0x4) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001bc0)=@newtfilter={0xf20, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0xef4, 0x2, [@TCA_BPF_NAME={0xef0, 0x7, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}}]}, 0xf20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 5.136386503s ago: executing program 34 (id=1536): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x0, 0xfffffff9, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x5ab2bda88c8829ca}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xff}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xfff}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0xa4}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x7, 0x1, 0x1000, 0xd, {{0xf, 0x4, 0x3, 0x9, 0x3c, 0x68, 0x0, 0xd, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @loopback, {[@cipso={0x86, 0x16, 0x0, [{0x5, 0x10, "456c9f59780b62d2ff7ef48698db"}]}, @ssrr={0x89, 0xf, 0x3b, [@empty, @dev={0xac, 0x14, 0x14, 0x28}, @loopback]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x80, 0x24, 0x10, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x2, 0xffe0}, {0x4, 0x9}, {0xb, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x100}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x40, 0x8, 0x2, 0x6, 0x4}, 0x61db, 0x0, 0x7fffffff, 0x5, 0x8, 0x10, 0x9, 0xf, 0x3, 0x3, {0x0, 0x0, 0x6, 0x7, 0x1, 0x9}}}}]}, 0x80}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x42041}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x44, 0x0, 0x9, 0x3, 0x0, 0x0, {0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x44, 0x11, 0x43d, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r5, {0x10}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x5}, {0x8}, {0x8, 0xb, 0x2}]}, 0x44}}, 0x0) 3.162301844s ago: executing program 35 (id=1540): r0 = socket$igmp6(0xa, 0x3, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map, r2, 0x37, 0x0, 0x0, @void, @value}, 0x20) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xe}, 0x1c) (async) listen(r4, 0x50) (async) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) listen(r5, 0x50) (async) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x24}}, 0x0) (async) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @private1, [@hopopts={0x11}], "fafb17c103001c193eb46558f48ce6b9"}}}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan1\x00', &(0x7f0000000000)=@ethtool_ringparam={0x34}}) 0s ago: executing program 36 (id=1544): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb9}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000)={0x2, 0xffffffff, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x95, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x4d, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fdffffff0f0000003000078008000100050000000800020007"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x3}, 0x10) kernel console output (not intermixed with test programs): ering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.322645][ T8297] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.340846][ T8297] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.348759][ T8297] bridge_slave_1: entered allmulticast mode [ 145.369692][ T8297] bridge_slave_1: entered promiscuous mode [ 145.410262][ T7991] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.585301][ T5850] Bluetooth: hci5: command tx timeout [ 145.630676][ T7991] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.670259][ T8297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.703004][ T8297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.858164][ T8392] tipc: New replicast peer: 255.255.255.255 [ 145.865742][ T8392] tipc: Enabled bearer , priority 10 [ 145.905394][ T8297] team0: Port device team_slave_0 added [ 145.982953][ T8297] team0: Port device team_slave_1 added [ 146.009610][ T8398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.687'. [ 146.023340][ T7662] IPVS: starting estimator thread 0... [ 146.043930][ T8398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.687'. [ 146.053343][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.053370][ T8398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.687'. [ 146.092205][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.100088][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.108881][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.116983][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.124156][ T8403] IPVS: using max 32 ests per chain, 76800 per kthread [ 146.274458][ T8415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.691'. [ 146.309410][ T8297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.330904][ T8419] netlink: 32 bytes leftover after parsing attributes in process `syz.1.691'. [ 146.342502][ T8297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.389035][ T8297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.418697][ T8420] netlink: 32 bytes leftover after parsing attributes in process `syz.1.691'. [ 146.452081][ T8297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.468843][ T8297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.503616][ T8297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.799408][ T8297] hsr_slave_0: entered promiscuous mode [ 146.824827][ T8297] hsr_slave_1: entered promiscuous mode [ 146.831213][ T8297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.882725][ T8297] Cannot create hsr debugfs directory [ 146.953900][ T8442] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 147.635017][ T7991] bond0 (unregistering): Released all slaves [ 147.652617][ T7991] bond1 (unregistering): Released all slaves [ 147.664625][ T5843] Bluetooth: hci5: command tx timeout [ 148.221335][ T8476] netlink: 'syz.0.701': attribute type 1 has an invalid length. [ 148.239057][ T5843] Bluetooth: hci3: command tx timeout [ 148.531917][ T8476] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.643326][ T8481] bond1: (slave ip6gretap1): making interface the new active one [ 148.660585][ T8481] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 148.671771][ T8481] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 148.690407][ T8481] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 148.756961][ T8488] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 148.820237][ T7991] hsr_slave_0: left promiscuous mode [ 148.831407][ T7991] hsr_slave_1: left promiscuous mode [ 149.634261][ T3519] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 149.656355][ T7990] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 149.744083][ T5843] Bluetooth: hci5: command tx timeout [ 149.820668][ T8518] xt_SECMARK: invalid mode: 0 [ 149.942976][ T8297] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 150.066883][ T8297] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 150.182432][ T8297] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 150.270754][ T8297] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 150.303739][ T5843] Bluetooth: hci3: command tx timeout [ 150.373044][ T7992] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 150.440181][ T8404] chnl_net:caif_netlink_parms(): no params data found [ 150.544008][ T3519] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 150.763492][ T8536] __nla_validate_parse: 2 callbacks suppressed [ 150.763510][ T8536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 150.837065][ T8536] netlink: 'syz.1.713': attribute type 4 has an invalid length. [ 150.842374][ T7990] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 151.024754][ T8553] netlink: 24 bytes leftover after parsing attributes in process `syz.1.713'. [ 151.148655][ T8404] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.166120][ T8404] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.196607][ T8404] bridge_slave_0: entered allmulticast mode [ 151.207684][ T8563] netlink: 'syz.0.716': attribute type 39 has an invalid length. [ 151.209432][ T8404] bridge_slave_0: entered promiscuous mode [ 151.298685][ T8404] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.317227][ T8404] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.352688][ T8404] bridge_slave_1: entered allmulticast mode [ 151.398760][ T8404] bridge_slave_1: entered promiscuous mode [ 151.480156][ T6370] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 151.495310][ T6370] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 151.610521][ T8404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.622017][ T8576] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.720'. [ 151.661599][ T8580] netlink: 'syz.1.721': attribute type 10 has an invalid length. [ 151.662390][ T8404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.786680][ T8404] team0: Port device team_slave_0 added [ 151.800035][ T8580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.808687][ T8580] batadv0: entered allmulticast mode [ 151.815360][ T8580] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 151.824038][ T5843] Bluetooth: hci5: command tx timeout [ 151.853197][ T8584] netlink: 68 bytes leftover after parsing attributes in process `syz.3.723'. [ 151.893297][ T8404] team0: Port device team_slave_1 added [ 152.019379][ T8404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.030955][ T8404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.077306][ T6370] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 152.102494][ T8404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.148090][ T8297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.190222][ T8404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.216935][ T8404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.249914][ T8404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.279881][ T8604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.726'. [ 152.384349][ T5843] Bluetooth: hci3: command tx timeout [ 152.410267][ T8404] hsr_slave_0: entered promiscuous mode [ 152.455794][ T8404] hsr_slave_1: entered promiscuous mode [ 152.462139][ T8404] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.487760][ T8404] Cannot create hsr debugfs directory [ 152.558905][ T8619] netlink: 224 bytes leftover after parsing attributes in process `syz.3.730'. [ 152.607619][ T8297] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.889147][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.896370][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.973388][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.733'. [ 152.983784][ T8633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.733'. [ 153.044834][ T7994] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.052047][ T7994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.850677][ T8661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.740'. [ 154.070999][ T8675] Cannot find add_set index 0 as target [ 154.171890][ T8297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.374260][ T7662] IPVS: starting estimator thread 0... [ 154.403838][ T7993] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 154.403855][ T7993] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 154.466134][ T5843] Bluetooth: hci3: command tx timeout [ 154.483775][ T8691] IPVS: using max 28 ests per chain, 67200 per kthread [ 154.643777][ T8404] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 154.695291][ T8404] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 154.752770][ T8404] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 154.779638][ T8404] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 154.865700][ T8703] tipc: Invalid UDP bearer configuration [ 154.865760][ T8703] tipc: Enabling of bearer rejected, failed to enable media [ 155.139446][ T8297] veth0_vlan: entered promiscuous mode [ 155.161878][ T8404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.189568][ T8297] veth1_vlan: entered promiscuous mode [ 155.226743][ T8718] netlink: 'syz.0.751': attribute type 1 has an invalid length. [ 155.295791][ T8404] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.340300][ T7993] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.342594][ T8722] netlink: 80 bytes leftover after parsing attributes in process `syz.1.752'. [ 155.347618][ T7993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.386821][ T7993] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.394026][ T7993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.423272][ T8297] veth0_macvtap: entered promiscuous mode [ 155.443146][ T8297] veth1_macvtap: entered promiscuous mode [ 155.562437][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.584140][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 155.594126][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.615077][ T7990] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 155.658261][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.703745][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.733500][ T8297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.795155][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.833123][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.845974][ T8739] sctp: [Deprecated]: syz.3.756 (pid 8739) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.845974][ T8739] Use struct sctp_sack_info instead [ 155.880259][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.901659][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.938528][ T8297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.956972][ T8746] netlink: 'syz.1.757': attribute type 1 has an invalid length. [ 155.990519][ T8746] netlink: 48 bytes leftover after parsing attributes in process `syz.1.757'. [ 156.020216][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'. [ 156.026805][ T8297] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.044307][ T8297] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.053085][ T8297] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.062034][ T8297] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.313564][ T7993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.349819][ T7993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.365257][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.759'. [ 156.404152][ T8757] macvlan0: left allmulticast mode [ 156.409519][ T8757] netlink: 'syz.3.759': attribute type 1 has an invalid length. [ 156.419949][ T7993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.444747][ T8757] netlink: 'syz.3.759': attribute type 2 has an invalid length. [ 156.445733][ T7993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.734567][ T7993] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 157.001452][ T8404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.710581][ T8811] bridge_slave_0: left allmulticast mode [ 157.724815][ T8811] bridge_slave_0: left promiscuous mode [ 157.740308][ T8811] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.782722][ T8811] bridge_slave_1: left allmulticast mode [ 157.813904][ T8811] bridge_slave_1: left promiscuous mode [ 157.819821][ T8811] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.865336][ T8811] bond0: (slave bond_slave_0): Releasing backup interface [ 157.893454][ T8811] bond0: (slave bond_slave_1): Releasing backup interface [ 157.907413][ T7994] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 157.946002][ T8833] netlink: 'syz.3.773': attribute type 7 has an invalid length. [ 157.977296][ T8811] team0: Port device team_slave_0 removed [ 158.006632][ T8811] team0: Port device team_slave_1 removed [ 158.013510][ T8811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.022062][ T8811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.031971][ T8811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.039898][ T8811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.275500][ T8404] veth0_vlan: entered promiscuous mode [ 158.351327][ T8404] veth1_vlan: entered promiscuous mode [ 158.496661][ T8404] veth0_macvtap: entered promiscuous mode [ 158.524289][ T8404] veth1_macvtap: entered promiscuous mode [ 158.602878][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.622247][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.679525][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.706429][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.735395][ T8404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.757198][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.777543][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.787480][ T5843] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 158.811555][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.822277][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.845344][ T8404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.868925][ T8404] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.893952][ T8404] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.931457][ T8404] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.941977][ T8868] IPVS: persistence engine module ip_vs_pe_À not found [ 158.983873][ T8404] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.077202][ T6370] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 159.255757][ T8881] net_ratelimit: 396 callbacks suppressed [ 159.255775][ T8881] dccp_close: ABORT with 32 bytes unread [ 159.312867][ T6370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.333305][ T6370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.409975][ T8889] netlink: 'syz.3.789': attribute type 21 has an invalid length. [ 159.462173][ T8889] netlink: 'syz.3.789': attribute type 11 has an invalid length. [ 159.472142][ T7993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.506217][ T7993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.228312][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 160.872373][ T8940] xt_HMARK: proto mask must be zero with L3 mode [ 161.168131][ T8955] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 161.236600][ T8955] netlink: 'syz.0.804': attribute type 2 has an invalid length. [ 161.389491][ T6370] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 161.671063][ T8971] x_tables: duplicate entry at hook 3 [ 161.704951][ T30] audit: type=1800 audit(1744542406.740:2): pid=8971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.807" name="blkio.bfq.io_wait_time" dev="tmpfs" ino=1054 res=0 errno=0 [ 161.917023][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 161.926133][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 161.944192][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 161.952945][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 161.961139][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 162.161680][ T8993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.812'. [ 162.419355][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.814'. [ 162.587633][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 162.674362][ T9011] x_tables: duplicate underflow at hook 2 [ 162.745792][ T9017] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 163.009272][ T9028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.820'. [ 163.261066][ T9036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.822'. [ 163.299733][ T9036] netlink: 16 bytes leftover after parsing attributes in process `syz.3.822'. [ 163.351392][ T8981] chnl_net:caif_netlink_parms(): no params data found [ 163.744868][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 163.747167][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.824'. [ 163.790255][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.824'. [ 163.817963][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.824'. [ 163.941548][ T8981] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.984555][ T5843] Bluetooth: hci3: command tx timeout [ 164.003345][ T8981] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.014177][ T8981] bridge_slave_0: entered allmulticast mode [ 164.033266][ T8981] bridge_slave_0: entered promiscuous mode [ 164.047948][ T8981] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.055560][ T8981] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.062799][ T8981] bridge_slave_1: entered allmulticast mode [ 164.069264][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 164.080368][ T9069] xt_hashlimit: size too large, truncated to 1048576 [ 164.116075][ T8981] bridge_slave_1: entered promiscuous mode [ 164.544362][ T8981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.616052][ T8981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.784267][ T5850] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 164.846387][ T973] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 164.893561][ T9103] : renamed from wg1 (while UP) [ 164.956630][ T8981] team0: Port device team_slave_0 added [ 164.978040][ T8981] team0: Port device team_slave_1 added [ 165.159309][ T9122] xt_hashlimit: size too large, truncated to 1048576 [ 165.202325][ T9124] netlink: 20 bytes leftover after parsing attributes in process `syz.0.840'. [ 165.301250][ T9125] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 165.326589][ T9122] syz.1.838: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 165.348423][ T9122] CPU: 1 UID: 0 PID: 9122 Comm: syz.1.838 Not tainted 6.15.0-rc1-syzkaller-00177-g8c941f14a694 #0 PREEMPT(full) [ 165.348452][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 165.348465][ T9122] Call Trace: [ 165.348473][ T9122] [ 165.348494][ T9122] dump_stack_lvl+0x241/0x360 [ 165.348532][ T9122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.348562][ T9122] ? __pfx__printk+0x10/0x10 [ 165.348589][ T9122] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 165.348621][ T9122] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 165.348649][ T9122] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 165.348682][ T9122] warn_alloc+0x27c/0x410 [ 165.348728][ T9122] ? __pfx_warn_alloc+0x10/0x10 [ 165.348757][ T9122] ? htable_create+0x10c/0x890 [ 165.348776][ T9122] ? __get_vm_area_node+0x1c8/0x2d0 [ 165.348805][ T9122] ? __get_vm_area_node+0x25c/0x2d0 [ 165.348843][ T9122] __vmalloc_node_range_noprof+0x634/0x1390 [ 165.348897][ T9122] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 165.348918][ T9122] ? __kasan_kmalloc_large+0x1a/0xa0 [ 165.348950][ T9122] ? htable_create+0x10c/0x890 [ 165.348971][ T9122] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 165.349002][ T9122] ? htable_create+0x10c/0x890 [ 165.349019][ T9122] ? htable_create+0x10c/0x890 [ 165.349036][ T9122] ? hashlimit_pernet+0x23/0x240 [ 165.349070][ T9122] htable_create+0x10c/0x890 [ 165.349098][ T9122] hashlimit_mt_check_common+0x763/0xa50 [ 165.349129][ T9122] hashlimit_mt_check_v1+0x2ec/0x550 [ 165.349164][ T9122] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 165.349201][ T9122] ? xt_find_match+0x1e5/0x240 [ 165.349234][ T9122] ? __mutex_unlock_slowpath+0x229/0x800 [ 165.349265][ T9122] xt_check_match+0x36a/0xa40 [ 165.349297][ T9122] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 165.349325][ T9122] ? __pfx_xt_check_match+0x10/0x10 [ 165.349371][ T9122] ? xt_find_match+0x1e5/0x240 [ 165.349410][ T9122] translate_table+0x1721/0x24b0 [ 165.349436][ T9122] ? __x64_sys_setsockopt+0x1ee/0x280 [ 165.349455][ T9122] ? do_syscall_64+0xf3/0x230 [ 165.349479][ T9122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.349531][ T9122] ? __pfx_translate_table+0x10/0x10 [ 165.349590][ T9122] ? copy_from_sockptr_offset+0x60/0xb0 [ 165.349622][ T9122] do_ip6t_set_ctl+0xe53/0x1270 [ 165.349657][ T9122] ? __pfx___mutex_trylock_common+0x10/0x10 [ 165.349686][ T9122] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 165.349734][ T9122] ? __mutex_unlock_slowpath+0x229/0x800 [ 165.349771][ T9122] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 165.349806][ T9122] ? futex_wait+0x287/0x370 [ 165.349835][ T9122] nf_setsockopt+0x295/0x2c0 [ 165.349874][ T9122] rawv6_setsockopt+0x2b3/0x6d0 [ 165.349910][ T9122] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 165.349943][ T9122] ? aa_sock_opt_perm+0x79/0x120 [ 165.349973][ T9122] ? sock_common_setsockopt+0x37/0xc0 [ 165.350005][ T9122] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 165.350057][ T9122] do_sock_setsockopt+0x3b1/0x710 [ 165.350086][ T9122] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 165.350104][ T9122] ? __fget_files+0x2a/0x420 [ 165.350128][ T9122] ? __fget_files+0x39d/0x420 [ 165.350145][ T9122] ? __fget_files+0x2a/0x420 [ 165.350173][ T9122] __x64_sys_setsockopt+0x1ee/0x280 [ 165.350203][ T9122] do_syscall_64+0xf3/0x230 [ 165.350228][ T9122] ? clear_bhb_loop+0x45/0xa0 [ 165.350253][ T9122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.350272][ T9122] RIP: 0033:0x7fb23bd8d169 [ 165.350291][ T9122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.350308][ T9122] RSP: 002b:00007fb23cca8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 165.350329][ T9122] RAX: ffffffffffffffda RBX: 00007fb23bfa6080 RCX: 00007fb23bd8d169 [ 165.350344][ T9122] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 165.350356][ T9122] RBP: 00007fb23be0e990 R08: 00000000000004c0 R09: 0000000000000000 [ 165.350368][ T9122] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 165.350381][ T9122] R13: 0000000000000000 R14: 00007fb23bfa6080 R15: 00007fff2a63d568 [ 165.350414][ T9122] [ 165.350422][ T9122] Mem-Info: [ 165.583249][ T9125] bond1: entered promiscuous mode [ 165.606561][ T9122] active_anon:5247 inactive_anon:0 isolated_anon:0 [ 165.606561][ T9122] active_file:1163 inactive_file:38335 isolated_file:0 [ 165.606561][ T9122] unevictable:768 dirty:56 writeback:0 [ 165.606561][ T9122] slab_reclaimable:10099 slab_unreclaimable:108724 [ 165.606561][ T9122] mapped:36720 shmem:1413 pagetables:878 [ 165.606561][ T9122] sec_pagetables:0 bounce:0 [ 165.606561][ T9122] kernel_misc_reclaimable:0 [ 165.606561][ T9122] free:1319402 free_pcp:1120 free_cma:0 [ 165.619443][ T9125] bond1: entered allmulticast mode [ 165.664983][ T9122] Node 0 active_anon:20988kB inactive_anon:0kB active_file:4652kB inactive_file:153268kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:146880kB dirty:224kB writeback:0kB shmem:4116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12956kB pagetables:3512kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 165.669343][ T9125] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.692710][ T9122] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 165.734780][ T8981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.743020][ T9122] Node 0 [ 165.863907][ T8981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.900527][ T9122] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 165.958286][ T9122] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 165.964367][ T8981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.977857][ T9122] Node 0 DMA32 free:1359828kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:20948kB inactive_anon:0kB active_file:4652kB inactive_file:153184kB unevictable:1536kB writepending:228kB present:3129332kB managed:2547232kB mlocked:0kB bounce:0kB free_pcp:820kB local_pcp:428kB free_cma:0kB [ 165.988403][ T8981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.053172][ T9122] lowmem_reserve[]: 0 0 0 0 0 [ 166.058776][ T9122] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 166.086413][ T973] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 166.095686][ T8981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.105963][ T5850] Bluetooth: hci3: command tx timeout [ 166.128599][ T9122] lowmem_reserve[]: 0 0 0 0 0 [ 166.137111][ T9122] Node 1 Normal free:3905484kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:128kB local_pcp:128kB free_cma:0kB [ 166.142421][ T8981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.181532][ T9122] lowmem_reserve[]: 0 0 0 0 0 [ 166.189115][ T9122] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 166.203410][ T9122] Node 0 DMA32: 1*4kB (E) 35*8kB (UME) 58*16kB (UME) 68*32kB (UME) 63*64kB (UME) 32*128kB (UME) 12*256kB (UME) 7*512kB (M) 4*1024kB (UME) 5*2048kB (UME) 324*4096kB (UM) = 1359612kB [ 166.230923][ T9122] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 166.243933][ T9122] Node 1 Normal: 209*4kB (UE) 61*8kB (UME) 42*16kB (UME) 220*32kB (UME) 84*64kB (UME) 33*128kB (UME) 11*256kB (UM) 6*512kB (UME) 6*1024kB (UME) 4*2048kB (UE) 944*4096kB (M) = 3905484kB [ 166.299514][ T9122] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 166.353766][ T9122] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 166.373987][ T9122] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 166.392959][ T9122] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 166.406011][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.845'. [ 166.412812][ T9122] 40915 total pagecache pages [ 166.438398][ T8981] hsr_slave_0: entered promiscuous mode [ 166.444207][ T9122] 0 pages in swap cache [ 166.448387][ T9122] Free swap = 124996kB [ 166.452547][ T9122] Total swap = 124996kB [ 166.464705][ T8981] hsr_slave_1: entered promiscuous mode [ 166.474495][ T9122] 2097051 pages RAM [ 166.478310][ T9122] 0 pages HighMem/MovableOnly [ 166.483017][ T9122] 428585 pages reserved [ 166.488119][ T8981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.495791][ T8981] Cannot create hsr debugfs directory [ 166.501306][ T9122] 0 pages cma reserved [ 166.519855][ T9138] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 166.951839][ T9176] netlink: 'syz.3.850': attribute type 11 has an invalid length. [ 167.001987][ T9176] netlink: 'syz.3.850': attribute type 11 has an invalid length. [ 167.076085][ T9182] SET target dimension over the limit! [ 167.195803][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 167.400684][ T9193] __nla_validate_parse: 2 callbacks suppressed [ 167.400704][ T9193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.855'. [ 167.507981][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.854'. [ 167.522674][ T9202] x_tables: duplicate underflow at hook 1 [ 167.584939][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.855'. [ 167.861594][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.859'. [ 167.938700][ T8981] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.144582][ T5850] Bluetooth: hci3: command tx timeout [ 168.176598][ T8981] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.227235][ T9238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.862'. [ 168.355871][ T973] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 168.410930][ T8981] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.421097][ T9244] netlink: 292 bytes leftover after parsing attributes in process `syz.0.864'. [ 168.656239][ T8981] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.675325][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.864'. [ 168.692699][ T9253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.864'. [ 168.935763][ T9258] netlink: 'syz.1.867': attribute type 1 has an invalid length. [ 169.003920][ T9258] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.311600][ T9275] delete_channel: no stack [ 169.397474][ T8981] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 169.430140][ T9251] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 169.514752][ T8981] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 169.528828][ T9277] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 169.578495][ T8981] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 169.637273][ T8981] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 169.654395][ T9307] xt_NFQUEUE: number of total queues is 0 [ 169.848702][ T9312] gtp0: entered promiscuous mode [ 169.864965][ T9312] gtp0: entered allmulticast mode [ 170.196952][ T9335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.879'. [ 170.227391][ T5850] Bluetooth: hci3: command tx timeout [ 170.252915][ T8981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.287289][ T8981] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.358935][ T9277] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.366129][ T9277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.446976][ T973] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.454486][ T973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.734868][ T9277] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 170.998867][ T9369] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 171.040038][ T9369] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 171.081528][ T9373] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 171.082103][ T9370] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 171.138759][ T9369] netlink: 60 bytes leftover after parsing attributes in process `syz.1.888'. [ 171.238722][ T9378] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 171.270320][ T9378] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 171.625447][ T9394] netlink: 'syz.3.895': attribute type 1 has an invalid length. [ 171.763455][ T8981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.810464][ T9403] netlink: 'syz.0.897': attribute type 1 has an invalid length. [ 171.860619][ T9403] netlink: 'syz.0.897': attribute type 1 has an invalid length. [ 171.874989][ T1319] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 171.926689][ T9403] netlink: 'syz.0.897': attribute type 2 has an invalid length. [ 172.248614][ T9424] IPVS: length: 58 != 24 [ 172.285381][ T9429] x_tables: unsorted entry at hook 2 [ 172.291723][ T9430] x_tables: unsorted entry at hook 2 [ 172.631523][ T9447] netlink: 'syz.3.905': attribute type 10 has an invalid length. [ 172.680506][ T9450] tipc: Started in network mode [ 172.704369][ T9450] tipc: Node identity ac14140f, cluster identity 4711 [ 172.747308][ T9450] tipc: New replicast peer: 255.255.255.255 [ 172.773981][ T9450] tipc: Enabled bearer , priority 10 [ 172.842826][ T9458] netlink: 'syz.3.909': attribute type 2 has an invalid length. [ 172.940137][ T9454] syzkaller0: create flow: hash 1492825180 index 2 [ 173.102637][ T9446] syzkaller0: delete flow: hash 1492825180 index 2 [ 173.111471][ T973] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 173.126276][ T8981] veth0_vlan: entered promiscuous mode [ 173.219071][ T9478] netlink: 'syz.3.915': attribute type 1 has an invalid length. [ 173.867289][ T9] tipc: Node number set to 2886997007 [ 174.234720][ T9279] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 174.471797][ T8981] veth1_vlan: entered promiscuous mode [ 174.490196][ T9483] netlink: 'syz.3.917': attribute type 10 has an invalid length. [ 174.520794][ T9483] batadv0: left allmulticast mode [ 174.535510][ T9483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.566547][ T9483] batadv0: entered allmulticast mode [ 174.572346][ T9483] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 174.601003][ T9488] netlink: 'syz.5.918': attribute type 6 has an invalid length. [ 174.603809][ T9483] netlink: 'syz.3.917': attribute type 39 has an invalid length. [ 174.630481][ T8981] veth0_macvtap: entered promiscuous mode [ 174.680993][ T9495] __nla_validate_parse: 6 callbacks suppressed [ 174.681013][ T9495] netlink: 40 bytes leftover after parsing attributes in process `syz.0.919'. [ 174.751877][ T8981] veth1_macvtap: entered promiscuous mode [ 174.765149][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.920'. [ 174.779438][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.919'. [ 174.821921][ T8981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.844027][ T8981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.873798][ T8981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.885000][ T8981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.894881][ T8981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.907087][ T8981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.925316][ T8981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.941792][ T8981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.963276][ T8981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.977504][ T8981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.994972][ T8981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.013023][ T8981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.029393][ T8981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.041049][ T8981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.063506][ T8981] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.093712][ T8981] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.110500][ T8981] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.124483][ T8981] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.145999][ T9512] netlink: 32 bytes leftover after parsing attributes in process `syz.3.923'. [ 175.161051][ T9512] netlink: 32 bytes leftover after parsing attributes in process `syz.3.923'. [ 175.263980][ T9517] bridge_slave_0: default FDB implementation only supports local addresses [ 175.280337][ T1319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.299747][ T1319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.341628][ T9279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.357659][ T7990] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 175.381597][ T9279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.863421][ T9538] netlink: 32 bytes leftover after parsing attributes in process `syz.1.927'. [ 176.493995][ T9277] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 176.606817][ T9559] xt_CT: No such helper "pptp" [ 176.819203][ T9570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.936'. [ 176.819630][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.837144][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.845466][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.856189][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.864646][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.978054][ T9575] netlink: 44 bytes leftover after parsing attributes in process `syz.0.937'. [ 176.987244][ T9575] netlink: 43 bytes leftover after parsing attributes in process `syz.0.937'. [ 176.996636][ T9575] netlink: 'syz.0.937': attribute type 5 has an invalid length. [ 177.004616][ T9575] netlink: 43 bytes leftover after parsing attributes in process `syz.0.937'. [ 177.279993][ T9587] [H: renamed from veth0_vlan (while UP) [ 177.353753][ T9569] chnl_net:caif_netlink_parms(): no params data found [ 177.365183][ T9562] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 177.638523][ T9277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.651132][ T9277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.675504][ T1319] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 177.788423][ T9569] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.817230][ T9569] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.834523][ T9569] bridge_slave_0: entered allmulticast mode [ 177.856913][ T9569] bridge_slave_0: entered promiscuous mode [ 177.880760][ T9569] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.895456][ T9569] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.915362][ T9569] bridge_slave_1: entered allmulticast mode [ 177.929113][ T9569] bridge_slave_1: entered promiscuous mode [ 177.951629][ T9616] syzkaller1: entered promiscuous mode [ 177.963834][ T9616] syzkaller1: entered allmulticast mode [ 178.132471][ T9569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.178847][ T9569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.322423][ T9569] team0: Port device team_slave_0 added [ 178.354705][ T9569] team0: Port device team_slave_1 added [ 178.484864][ T9647] netlink: 'syz.1.959': attribute type 10 has an invalid length. [ 178.539194][ T9569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.554695][ T9569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.581981][ T9569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.617667][ T9647] team0: Device hsr_slave_0 failed to register rx_handler [ 178.634956][ T5843] Bluetooth: hci4: command 0x0401 tx timeout [ 178.667745][ T9651] tipc: Enabling of bearer rejected, failed to enable media [ 178.684483][ T9569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.718780][ T9569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.815113][ T9569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.823827][ T7990] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 178.911543][ T9659] 0ªÃøÂFNð¡: renamed from bond_slave_0 (while UP) [ 178.954490][ T5843] Bluetooth: hci3: command tx timeout [ 178.964344][ T9659] 0ªÃøÂFNð¡: entered allmulticast mode [ 179.104977][ T9569] hsr_slave_0: entered promiscuous mode [ 179.120484][ T9569] hsr_slave_1: entered promiscuous mode [ 179.129791][ T9569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.147842][ T9569] Cannot create hsr debugfs directory [ 179.188852][ T9673] openvswitch: netlink: Actions may not be safe on all matching packets [ 179.553412][ T9695] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 179.737575][ T9569] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.798323][ T9705] __nla_validate_parse: 6 callbacks suppressed [ 179.798342][ T9705] netlink: 32 bytes leftover after parsing attributes in process `syz.3.976'. [ 179.858304][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.976'. [ 179.898224][ T9705] netlink: 244 bytes leftover after parsing attributes in process `syz.3.976'. [ 179.916911][ T9569] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.963367][ T9713] netlink: 20 bytes leftover after parsing attributes in process `syz.1.979'. [ 179.966267][ T7990] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 179.982706][ T9713] netlink: 20 bytes leftover after parsing attributes in process `syz.1.979'. [ 180.069572][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 180.106938][ T9569] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.200091][ T9569] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.351051][ T9729] openvswitch: netlink: Flow actions attr not present in new flow. [ 180.382368][ T9731] x_tables: duplicate underflow at hook 1 [ 180.418473][ T9728] xt_nat: multiple ranges no longer supported [ 180.527070][ T9735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.986'. [ 180.530348][ T9569] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 180.585107][ T9569] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 180.613018][ T9569] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 180.724055][ T9569] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 181.024054][ T5843] Bluetooth: hci3: command tx timeout [ 181.060116][ T9762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.994'. [ 181.107837][ T7996] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 181.292300][ T9569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.346286][ T9569] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.400049][ T9279] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.407260][ T9279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.450086][ T9279] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.457294][ T9279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.973026][ T9809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1007'. [ 182.091728][ T9569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.188365][ T9818] raw_sendmsg: syz.1.1009 forgot to set AF_INET. Fix it! [ 182.282561][ T7990] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 182.420438][ T9828] netlink: 'syz.1.1012': attribute type 39 has an invalid length. [ 182.475214][ T9831] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1013'. [ 182.488560][ T9831] xt_bpf: check failed: parse error [ 182.877988][ T9569] veth0_vlan: entered promiscuous mode [ 182.928242][ T9569] veth1_vlan: entered promiscuous mode [ 183.044624][ T9569] veth0_macvtap: entered promiscuous mode [ 183.099091][ T9569] veth1_macvtap: entered promiscuous mode [ 183.105326][ T5843] Bluetooth: hci3: command tx timeout [ 183.178945][ T9858] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 183.182526][ T9569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.237097][ T9858] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1021'. [ 183.253889][ T9569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.283619][ T9569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.302345][ T9569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.313129][ T9569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.337110][ T9569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.358409][ T9569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.389089][ T9569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.403463][ T9569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.447037][ T9569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.450463][ T1319] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 183.481904][ T9569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.514510][ T9569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.535292][ T9569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.563750][ T9569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.598028][ T9569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.618083][ T9569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.651912][ T9569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.681482][ T9569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.748627][ T9569] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.757588][ T9569] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.772720][ T9569] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.788886][ T9569] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.082441][ T973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.110115][ T973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.210127][ T9279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.248636][ T9279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.249310][ T9900] xt_CONNSECMARK: invalid mode: 0 [ 184.523926][ T9911] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.537232][ T9910] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.588232][ T9279] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 185.754579][ T973] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 186.006761][ T9953] __nla_validate_parse: 9 callbacks suppressed [ 186.006782][ T9953] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1040'. [ 186.077877][ T9953] gretap0: entered promiscuous mode [ 186.099813][ T9949] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1040'. [ 186.171664][ T9949] 0ªî{X¹¦: renamed from gretap0 [ 186.198693][ T9949] 0ªî{X¹¦: left promiscuous mode [ 186.206664][ T9949] 0ªî{X¹¦: entered allmulticast mode [ 186.216100][ T9949] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 186.242189][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 186.301758][ T9964] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1045'. [ 186.647785][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 186.668247][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 186.686616][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 186.705324][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 186.713735][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 186.721399][ T9987] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1051'. [ 186.815346][ T9981] can: request_module (can-proto-0) failed. [ 186.894079][ T9279] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 187.010207][ T9993] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.018920][ T9993] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.151415][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1057'. [ 187.162913][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1057'. [ 187.164203][ T9999] netlink: 'syz.0.1054': attribute type 1 has an invalid length. [ 187.211410][T10002] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1057'. [ 187.590905][ T9983] chnl_net:caif_netlink_parms(): no params data found [ 187.736936][T10028] netlink: 'syz.1.1063': attribute type 5 has an invalid length. [ 187.993957][ T7990] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 188.029404][ T9983] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.053534][ T9983] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.071143][ T9983] bridge_slave_0: entered allmulticast mode [ 188.094693][ T9983] bridge_slave_0: entered promiscuous mode [ 188.115662][ T9983] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.133838][ T9983] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.141062][ T9983] bridge_slave_1: entered allmulticast mode [ 188.157353][ T9983] bridge_slave_1: entered promiscuous mode [ 188.326147][T10025] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1062'. [ 188.431165][ T9983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.466853][ T9983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.589903][ T9983] team0: Port device team_slave_0 added [ 188.616643][ T9983] team0: Port device team_slave_1 added [ 188.740950][ T9983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.778148][ T9983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.816338][ T5843] Bluetooth: hci3: command tx timeout [ 188.832471][ T9983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.908396][T10074] netlink: 'syz.1.1078': attribute type 64 has an invalid length. [ 188.912588][T10062] bond2: entered promiscuous mode [ 188.921946][T10062] bond2: entered allmulticast mode [ 188.937584][ T9983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.955447][ T9983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.964051][T10074] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1078'. [ 189.014558][ T9983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.164679][ T1319] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 189.249203][ T9983] hsr_slave_0: entered promiscuous mode [ 189.287895][ T9983] hsr_slave_1: entered promiscuous mode [ 189.295917][ T9983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.303512][ T9983] Cannot create hsr debugfs directory [ 189.335116][T10093] team_slave_0: entered promiscuous mode [ 189.341018][T10093] team_slave_1: entered promiscuous mode [ 189.382525][T10093] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 189.400397][T10093] team0: Device macvtap1 is already an upper device of the team interface [ 189.412992][T10093] team_slave_0: left promiscuous mode [ 189.418516][T10093] team_slave_1: left promiscuous mode [ 189.871368][T10119] netlink: 'syz.5.1091': attribute type 11 has an invalid length. [ 189.881293][T10119] sctp: [Deprecated]: syz.5.1091 (pid 10119) Use of struct sctp_assoc_value in delayed_ack socket option. [ 189.881293][T10119] Use struct sctp_sack_info instead [ 190.126664][T10139] netlink: 'syz.5.1095': attribute type 5 has an invalid length. [ 190.317311][ T9279] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 190.434923][ T9983] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.599288][ T9983] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.791170][ T9983] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.875954][ T5843] Bluetooth: hci3: command tx timeout [ 190.956391][ T9983] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.041104][T10192] veth1_macvtap: left promiscuous mode [ 191.055782][T10192] macsec0: entered allmulticast mode [ 191.091896][T10195] veth1_macvtap: entered promiscuous mode [ 191.105118][T10195] veth1_macvtap: entered allmulticast mode [ 191.123751][T10195] macsec0: left allmulticast mode [ 191.128810][T10195] veth1_macvtap: left allmulticast mode [ 191.328869][T10205] netlink: zone id is out of range [ 191.354136][T10205] netlink: zone id is out of range [ 191.359306][T10205] netlink: zone id is out of range [ 191.382549][T10205] netlink: zone id is out of range [ 191.397614][ T9983] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 191.403743][T10205] netlink: zone id is out of range [ 191.426240][T10205] netlink: zone id is out of range [ 191.427154][T10208] lo speed is unknown, defaulting to 1000 [ 191.431366][T10205] netlink: zone id is out of range [ 191.431379][T10205] netlink: zone id is out of range [ 191.431387][T10205] netlink: zone id is out of range [ 191.440379][ T9983] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 191.465334][ T1319] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 191.475687][T10205] netlink: zone id is out of range [ 191.515908][ T9983] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 191.547656][ T9983] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 191.623792][T10208] lo speed is unknown, defaulting to 1000 [ 191.654278][T10215] netlink: 'syz.1.1116': attribute type 2 has an invalid length. [ 191.670485][T10208] lo speed is unknown, defaulting to 1000 [ 191.676591][T10215] __nla_validate_parse: 10 callbacks suppressed [ 191.676607][T10215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1116'. [ 191.896284][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'. [ 191.921144][ T9983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.945206][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'. [ 192.002945][ T9983] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.043686][ T9279] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.050917][ T9279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.120585][T10230] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1120'. [ 192.132380][ T9279] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.139599][ T9279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.294946][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1121'. [ 192.353433][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1121'. [ 192.440904][T10208] infiniband syz0: set down [ 192.447260][ T7650] lo speed is unknown, defaulting to 1000 [ 192.479577][T10208] infiniband syz0: added lo [ 192.495998][T10208] syz0: rxe_create_cq: returned err = -12 [ 192.502101][T10208] infiniband syz0: Couldn't create ib_mad CQ [ 192.593924][T10208] infiniband syz0: Couldn't open port 1 [ 192.650060][ T6370] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 192.746458][T10208] RDS/IB: syz0: added [ 192.764358][T10208] smc: adding ib device syz0 with port count 1 [ 192.789950][T10208] smc: ib device syz0 port 1 has pnetid [ 192.800609][T10208] lo speed is unknown, defaulting to 1000 [ 192.834776][ T7648] lo speed is unknown, defaulting to 1000 [ 192.926906][ T9983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.947277][ T5843] Bluetooth: hci3: command tx timeout [ 193.031374][T10264] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1125'. [ 193.283431][T10274] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1130'. [ 193.625793][T10287] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1132'. [ 193.847222][ T6370] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 193.910585][T10287] bond0 (unregistering): (slave 00ªÃøÂFNð¡): Releasing backup interface [ 193.932902][T10287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.950777][T10287] bond0 (unregistering): Released all slaves [ 194.003590][T10208] lo speed is unknown, defaulting to 1000 [ 194.154646][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.160988][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.219498][ T9983] veth0_vlan: entered promiscuous mode [ 194.239222][ T9983] veth1_vlan: entered promiscuous mode [ 194.281668][T10308] netlink: 'syz.0.1136': attribute type 11 has an invalid length. [ 194.338443][T10308] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1136'. [ 194.352112][ T9983] veth0_macvtap: entered promiscuous mode [ 194.376572][ T9983] veth1_macvtap: entered promiscuous mode [ 194.450131][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.471958][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.496350][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.527084][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.557608][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.599683][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.649521][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.683733][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.713791][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.742406][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.766510][ T9983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.813270][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.839113][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.866170][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.901501][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.934409][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.954703][ T7990] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 194.976024][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.000581][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.014858][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.024393][ T5843] Bluetooth: hci3: command tx timeout [ 195.074345][ T9983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.100055][ T9983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.128290][ T9983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.204572][T10208] lo speed is unknown, defaulting to 1000 [ 195.246788][ T9983] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.264133][ T9983] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.306574][ T9983] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.323726][ T9983] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.763911][ T9279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.806824][ T9279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.920166][T10365] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 195.935103][ T9279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.951297][ T9279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.093818][ T6370] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 196.182082][T10208] lo speed is unknown, defaulting to 1000 [ 196.999366][T10410] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 197.047089][T10410] __nla_validate_parse: 4 callbacks suppressed [ 197.047108][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1156'. [ 197.155049][T10410] bridge_slave_1: left allmulticast mode [ 197.165587][T10410] bridge_slave_1: left promiscuous mode [ 197.215377][T10410] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.246822][ T973] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 197.293177][T10410] bridge_slave_0: left allmulticast mode [ 197.313734][T10410] bridge_slave_0: left promiscuous mode [ 197.334206][T10410] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.456659][T10208] lo speed is unknown, defaulting to 1000 [ 197.801859][T10208] lo speed is unknown, defaulting to 1000 [ 198.108982][T10461] SET target dimension over the limit! [ 198.185554][T10468] veth0: entered promiscuous mode [ 198.275025][T10468] veth0: left promiscuous mode [ 198.281578][T10208] lo speed is unknown, defaulting to 1000 [ 198.408331][T10472] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 ! [ 198.427448][T10413] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 198.822204][T10484] netlink: 'syz.1.1169': attribute type 4 has an invalid length. [ 198.834738][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 198.852327][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 198.860375][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 198.869197][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 198.877167][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 199.073585][T10485] lo speed is unknown, defaulting to 1000 [ 199.135868][T10500] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20000 [ 199.188359][T10501] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20000 [ 199.445438][T10509] netlink: 'syz.1.1178': attribute type 4 has an invalid length. [ 199.613818][ T7990] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 199.662065][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1182'. [ 199.694337][T10518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1182'. [ 199.720286][T10520] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1181'. [ 199.741620][T10208] lo speed is unknown, defaulting to 1000 [ 199.909456][T10527] x_tables: duplicate underflow at hook 2 [ 200.320284][T10540] lo: entered promiscuous mode [ 200.342227][T10540] netlink: 'syz.0.1188': attribute type 2 has an invalid length. [ 200.376345][T10540] net_ratelimit: 394 callbacks suppressed [ 200.376361][T10540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.408069][T10541] netlink: 'syz.0.1188': attribute type 2 has an invalid length. [ 200.419799][T10541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.440502][T10485] chnl_net:caif_netlink_parms(): no params data found [ 200.478307][T10208] lo speed is unknown, defaulting to 1000 [ 200.541077][T10551] IPVS: set_ctl: invalid protocol: 22 172.30.0.1:0 [ 200.744241][T10432] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 200.775880][T10561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1191'. [ 200.943865][ T5843] Bluetooth: hci3: command tx timeout [ 201.004296][T10576] vxcan1: tx address claim with dlc 0 [ 201.067985][T10485] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.084359][T10485] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.107295][T10485] bridge_slave_0: entered allmulticast mode [ 201.136506][T10485] bridge_slave_0: entered promiscuous mode [ 201.157952][T10485] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.189994][T10485] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.217401][T10485] bridge_slave_1: entered allmulticast mode [ 201.245628][T10485] bridge_slave_1: entered promiscuous mode [ 201.422594][T10485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.439202][T10208] lo speed is unknown, defaulting to 1000 [ 201.451577][T10485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.637234][T10595] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1198'. [ 201.659323][T10485] team0: Port device team_slave_0 added [ 201.682308][T10485] team0: Port device team_slave_1 added [ 201.801013][T10485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.816106][T10485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.856484][T10413] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 201.868219][T10485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.902911][T10485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.925235][T10485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.968295][T10485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.991946][T10602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1200'. [ 202.150017][T10208] lo speed is unknown, defaulting to 1000 [ 202.158865][T10485] hsr_slave_0: entered promiscuous mode [ 202.165998][T10485] hsr_slave_1: entered promiscuous mode [ 202.172478][T10485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.181521][T10485] Cannot create hsr debugfs directory [ 202.392068][T10614] team0: No ports can be present during mode change [ 202.687578][T10623] xt_socket: unknown flags 0x50 [ 202.797412][T10485] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.860987][T10208] lo speed is unknown, defaulting to 1000 [ 202.990284][T10485] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.003140][T10413] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 203.023940][ T5843] Bluetooth: hci3: command tx timeout [ 203.196128][T10485] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.322555][T10649] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1215'. [ 203.378526][T10649] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1215'. [ 203.416642][T10485] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.449922][T10649] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1215'. [ 203.498186][T10208] lo speed is unknown, defaulting to 1000 [ 203.708952][T10664] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 203.882527][T10485] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 203.928352][T10485] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 203.996621][T10485] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 204.007221][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1221'. [ 204.024202][T10673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1221'. [ 204.051969][T10485] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 204.125984][T10676] openvswitch: netlink: EtherType 0 is less than min 600 [ 204.154791][ T973] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 204.200487][T10678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1224'. [ 204.210344][T10678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1224'. [ 204.442415][T10485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.471422][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1229'. [ 204.489826][T10695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1230'. [ 204.523584][T10485] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.537317][T10696] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 204.556778][T10691] vlan2: entered allmulticast mode [ 204.566865][T10691] mac80211_hwsim hwsim15 wlan0: entered allmulticast mode [ 204.582266][T10418] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.589465][T10418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.648636][T10429] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.655845][T10429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.904171][T10711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1235'. [ 205.104405][ T5843] Bluetooth: hci3: command tx timeout [ 205.278368][T10485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.286948][ T973] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 205.349133][T10728] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 206.009716][T10485] veth0_vlan: entered promiscuous mode [ 206.085483][T10485] veth1_vlan: entered promiscuous mode [ 206.238261][T10485] veth0_macvtap: entered promiscuous mode [ 206.299750][T10768] netlink: 'syz.3.1249': attribute type 1 has an invalid length. [ 206.314837][T10768] netlink: 'syz.3.1249': attribute type 3 has an invalid length. [ 206.327036][T10485] veth1_macvtap: entered promiscuous mode [ 206.359212][T10772] tipc: Enabled bearer , priority 0 [ 206.423805][T10429] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 206.428243][T10772] syzkaller0: entered promiscuous mode [ 206.457146][T10772] syzkaller0: entered allmulticast mode [ 206.489758][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.536285][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.576109][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.596803][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.617386][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.635661][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.646907][T10796] netlink: 'syz.5.1252': attribute type 1 has an invalid length. [ 206.655952][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.687272][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.708760][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.739968][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.759298][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.779201][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.793484][T10485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.897456][T10798] tipc: Resetting bearer [ 206.977381][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.999930][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.017342][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.044916][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.050052][T10810] netlink: 'syz.3.1256': attribute type 15 has an invalid length. [ 207.062705][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.079491][T10810] netlink: 'syz.3.1256': attribute type 1 has an invalid length. [ 207.083103][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.108379][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.123717][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.133548][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.146222][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.156219][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.166745][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.184572][ T5843] Bluetooth: hci3: command tx timeout [ 207.220533][T10485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.323006][T10766] tipc: Resetting bearer [ 207.375784][T10766] tipc: Disabling bearer [ 207.406618][T10485] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.419802][T10485] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.441442][T10485] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.463704][T10485] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.475543][T10772] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 207.567710][ T7990] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 207.885447][T10828] lo speed is unknown, defaulting to 1000 [ 207.929541][T10431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.948770][T10431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.150596][T10418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.176028][T10418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.704623][T10413] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 208.980548][T10835] netlink: 'syz.5.1260': attribute type 11 has an invalid length. [ 209.006328][T10843] lo speed is unknown, defaulting to 1000 [ 209.935037][T10429] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 210.213948][T10907] __nla_validate_parse: 8 callbacks suppressed [ 210.213975][T10907] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1274'. [ 210.374298][T10917] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 210.535588][T10922] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1280'. [ 210.961134][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.975714][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.992207][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.021376][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.031504][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.079915][T10429] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 211.241369][T10955] lo speed is unknown, defaulting to 1000 [ 211.568383][T10991] x_tables: duplicate underflow at hook 3 [ 211.587925][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 211.587941][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 211.730185][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1299'. [ 212.063964][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 212.152208][T10980] lo speed is unknown, defaulting to 1000 [ 212.276187][T11018] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 212.364673][ T7990] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 212.647801][T11025] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 212.660606][T11025] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 212.672528][T11025] x_tables: duplicate entry at hook 1 [ 212.736146][T11032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1305'. [ 212.838216][T11034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.888813][T11034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1306'. [ 212.984325][T11037] netlink: 'syz.0.1307': attribute type 5 has an invalid length. [ 213.103898][ T5850] Bluetooth: hci3: command tx timeout [ 213.146485][T10955] chnl_net:caif_netlink_parms(): no params data found [ 213.169872][T11042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1308'. [ 213.236902][T11042] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.246356][T11042] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.255162][T11042] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.264791][T11042] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.288653][T11042] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.298141][T11042] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.307252][T11042] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.316206][T11042] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.494112][T10432] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 213.590069][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1313'. [ 213.603957][T11061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1313'. [ 213.622397][T11061] netlink: 'syz.0.1313': attribute type 13 has an invalid length. [ 213.974871][T10955] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.997884][T10955] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.012496][T10955] bridge_slave_0: entered allmulticast mode [ 214.049912][T10955] bridge_slave_0: entered promiscuous mode [ 214.085290][T10955] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.115894][T10955] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.146354][T10955] bridge_slave_1: entered allmulticast mode [ 214.174382][T10955] bridge_slave_1: entered promiscuous mode [ 214.301566][T10955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.378596][T11099] team0: Port device team_slave_0 removed [ 214.415652][T11099] team0: Port device team_slave_1 removed [ 214.430836][T11099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.442680][T11099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.467017][T11099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.474999][T11099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.492830][T11099] bond1: (slave ip6gretap1): Releasing active interface [ 214.537404][T10955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.552014][T11108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1324'. [ 214.771510][T10955] team0: Port device team_slave_0 added [ 214.803301][T10955] team0: Port device team_slave_1 added [ 214.813101][T11115] lo: left promiscuous mode [ 214.876164][T11121] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1327'. [ 214.963988][T11115] 0ªÃøÂFNð¡: left allmulticast mode [ 215.082419][T11115] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.093378][T11115] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.102512][T11115] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.111861][T11115] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.183781][ T5850] Bluetooth: hci3: command tx timeout [ 215.195103][T11115] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 215.244445][T11124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1326'. [ 215.253601][T11124] tipc: Invalid UDP bearer configuration [ 215.258231][T11124] tipc: Enabling of bearer rejected, failed to enable media [ 215.322180][T10955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.337148][T10955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.370973][T10955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.396096][T10955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.409784][T10955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.438702][T10955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.621525][T10955] hsr_slave_0: entered promiscuous mode [ 215.665257][T10955] hsr_slave_1: entered promiscuous mode [ 215.671688][T10955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.703862][T10955] Cannot create hsr debugfs directory [ 215.993488][T11159] x_tables: duplicate underflow at hook 2 [ 216.214266][T11170] netlink: 'syz.0.1338': attribute type 10 has an invalid length. [ 216.302024][T10955] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.377956][T11170] veth1_macvtap: left promiscuous mode [ 216.385655][T11170] team0: Device veth1_macvtap failed to register rx_handler [ 216.414138][T11179] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1337'. [ 216.492134][T10955] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.669700][T10955] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.722255][T11195] lo: entered allmulticast mode [ 216.730162][T11195] tunl0: entered allmulticast mode [ 216.737965][T11195] gre0: entered allmulticast mode [ 216.749324][T11195] gretap0: entered allmulticast mode [ 216.759496][T11195] erspan0: entered allmulticast mode [ 216.768391][T11195] ip_vti0: entered allmulticast mode [ 216.778144][T11198] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1345'. [ 216.780309][T11195] ip6_vti0: entered allmulticast mode [ 216.796988][T11195] sit0: entered allmulticast mode [ 216.810242][T11195] ip6tnl0: entered allmulticast mode [ 216.819223][T11195] ip6gre0: entered allmulticast mode [ 216.834807][T11195] syz_tun: entered allmulticast mode [ 216.860972][T11195] ip6gretap0: entered allmulticast mode [ 216.885403][T11195] bridge0: entered allmulticast mode [ 216.893904][T11195] vcan0: entered allmulticast mode [ 216.902478][T11195] bond0: entered allmulticast mode [ 216.915836][T11195] team0: entered allmulticast mode [ 216.921437][T11195] dummy0: entered allmulticast mode [ 216.931786][T11195] nlmon0: entered allmulticast mode [ 216.938769][T11195] caif0: entered allmulticast mode [ 216.945656][T11195] batadv0: entered allmulticast mode [ 216.956523][T11195] vxcan0: entered allmulticast mode [ 216.984683][T11195] vxcan1: entered allmulticast mode [ 216.991015][T11195] veth0: entered allmulticast mode [ 217.012151][T11195] veth1: entered allmulticast mode [ 217.031555][T11195] wg0: entered allmulticast mode [ 217.042589][T11195] : entered allmulticast mode [ 217.051655][T11195] wg2: entered allmulticast mode [ 217.063558][T11195] veth0_to_bridge: entered allmulticast mode [ 217.084566][T11195] bridge_slave_0: entered allmulticast mode [ 217.100808][T11195] veth1_to_bridge: entered allmulticast mode [ 217.122331][T11195] bridge_slave_1: entered allmulticast mode [ 217.140456][T11195] veth0_to_bond: entered allmulticast mode [ 217.153041][T11195] bond_slave_0: entered allmulticast mode [ 217.162254][T11195] veth1_to_bond: entered allmulticast mode [ 217.171825][T11195] bond_slave_1: entered allmulticast mode [ 217.181075][T11195] veth0_to_team: entered allmulticast mode [ 217.200625][T11195] team_slave_0: entered allmulticast mode [ 217.217598][T11195] veth1_to_team: entered allmulticast mode [ 217.230655][T11195] team_slave_1: entered allmulticast mode [ 217.244884][T11195] veth0_to_batadv: entered allmulticast mode [ 217.268199][T11195] batadv_slave_0: entered allmulticast mode [ 217.274760][ T5850] Bluetooth: hci3: command tx timeout [ 217.285757][T11195] veth1_to_batadv: entered allmulticast mode [ 217.300294][T11195] batadv_slave_1: entered allmulticast mode [ 217.310951][T11195] xfrm0: entered allmulticast mode [ 217.323291][T11195] veth0_to_hsr: entered allmulticast mode [ 217.332944][T11195] hsr_slave_0: entered allmulticast mode [ 217.342036][T11195] veth1_to_hsr: entered allmulticast mode [ 217.351548][T11195] hsr_slave_1: entered allmulticast mode [ 217.361265][T11195] hsr0: entered allmulticast mode [ 217.369447][T11195] veth1_virt_wifi: entered allmulticast mode [ 217.379372][T11195] veth0_virt_wifi: entered allmulticast mode [ 217.388434][T11195] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 217.397323][T11195] veth1_vlan: entered allmulticast mode [ 217.406448][T11195] veth0_vlan: entered allmulticast mode [ 217.427040][T11195] vlan0: entered allmulticast mode [ 217.432420][T11195] vlan1: entered allmulticast mode [ 217.438384][T11195] macvlan0: entered allmulticast mode [ 217.447982][T11195] macvlan1: entered allmulticast mode [ 217.453531][T11195] ipvlan0: entered allmulticast mode [ 217.459167][T11195] ipvlan1: entered allmulticast mode [ 217.465735][T11195] veth1_macvtap: entered allmulticast mode [ 217.474157][T11195] veth0_macvtap: entered allmulticast mode [ 217.485243][T11195] macvtap0: entered allmulticast mode [ 217.492979][T11195] macsec0: entered allmulticast mode [ 217.500928][T11195] geneve0: entered allmulticast mode [ 217.511878][T11195] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.523272][T11195] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.532658][T11195] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.542204][T11195] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.552030][T11195] geneve1: entered allmulticast mode [ 217.562125][T11195] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 217.573056][T11195] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 217.593731][T11195] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 217.602910][T11195] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 217.634202][T11195] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 217.643026][T11195] macsec1: entered allmulticast mode [ 217.648801][T11195] pim6reg0: entered allmulticast mode [ 217.656620][T11195] bond1: left promiscuous mode [ 217.661962][T11195] ipip0: entered allmulticast mode [ 217.669876][T11195] ip6tnl1: entered allmulticast mode [ 217.675791][T11195] gre1: entered allmulticast mode [ 217.681309][T11195] mac80211_hwsim hwsim15 nicvf0: entered allmulticast mode [ 217.689285][T11195] sit1: entered allmulticast mode [ 217.717833][T11195] bond2: entered allmulticast mode [ 217.725823][T11195] vxlan0: entered allmulticast mode [ 217.731191][T11195] vxlan1: entered allmulticast mode [ 217.737601][T11195] geneve2: entered allmulticast mode [ 217.796611][T10955] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.817536][T11217] x_tables: ip_tables: socket.1 match: invalid size 8 (kernel) != (user) 16 [ 217.874871][T11221] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1349'. [ 217.945094][T11221] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1349'. [ 217.951721][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1351'. [ 218.071891][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1353'. [ 218.190089][T11241] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 218.210202][T10955] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 218.240687][T10955] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 218.271790][T11241] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 218.286831][T10955] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 218.324186][T11241] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 218.332947][T11241] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 218.336132][T10955] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 218.453278][T11254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1359'. [ 218.600749][T11257] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1360'. [ 218.711855][T10955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.725068][T11262] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1362'. [ 218.789413][T10955] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.877206][ T7990] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.884452][ T7990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.928329][ T7990] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.935597][ T7990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.395263][T11290] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 219.407908][ T5850] Bluetooth: hci3: command tx timeout [ 219.536348][T11301] netlink: 'syz.3.1372': attribute type 1 has an invalid length. [ 219.618492][T11301] 8021q: adding VLAN 0 to HW filter on device bond4 [ 219.632420][T10955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.681859][T11301] bond4: (slave ip6gretap1): making interface the new active one [ 219.709131][T11301] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 219.820796][T11309] vlan2: entered promiscuous mode [ 219.831509][T11309] bond4: entered promiscuous mode [ 219.848414][T11309] ip6gretap1: entered promiscuous mode [ 219.855845][T11309] vlan2: entered allmulticast mode [ 219.861385][T11309] bond4: entered allmulticast mode [ 219.867349][T11309] ip6gretap1: entered allmulticast mode [ 220.001410][T11321] lo speed is unknown, defaulting to 1000 [ 220.300287][T11333] __nla_validate_parse: 3 callbacks suppressed [ 220.300376][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1379'. [ 221.368894][T11351] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1384'. [ 222.341028][T11361] Bluetooth: MGMT ver 1.23 [ 222.481396][T10955] veth0_vlan: entered promiscuous mode [ 222.516704][T10955] veth1_vlan: entered promiscuous mode [ 222.649822][T10955] veth0_macvtap: entered promiscuous mode [ 222.689662][T10955] veth1_macvtap: entered promiscuous mode [ 222.934435][T10955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.976192][T10955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.996183][T10955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.007567][T10955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.017884][T10955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.029318][T10955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.039518][T10955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.053483][T10955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.065085][T10955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.078737][T10955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.089058][T10955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.100059][T10955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.128732][T10955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.226921][T10955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.279456][T10955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.318087][T10955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.324237][T11400] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1394'. [ 223.340973][T11400] netlink: zone id is out of range [ 223.346370][T11400] netlink: get zone limit has 8 unknown bytes [ 223.346736][T10955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.366497][T10955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.377266][T10955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.387591][T10955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.398447][T10955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.408335][T10955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.420218][T10955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.430929][T10955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.441699][T10955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.455902][T10955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.562923][T10955] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.582470][T10955] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.607249][T10955] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.620807][T10955] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.751546][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1398'. [ 223.772823][T11409] can: request_module (can-proto-0) failed. [ 223.797077][T11412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1398'. [ 223.938677][T10418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.960600][T10418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.037048][T11424] netlink: 'syz.5.1402': attribute type 64 has an invalid length. [ 224.062890][T11424] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1402'. [ 224.082669][T10418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.111480][T10418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.274228][T11438] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1406'. [ 225.996911][T11471] netlink: 'syz.0.1415': attribute type 1 has an invalid length. [ 226.056125][T11476] netlink: 'syz.3.1418': attribute type 12 has an invalid length. [ 226.064297][T11476] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1418'. [ 226.228294][T11480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1419'. [ 226.240561][T11483] sctp: [Deprecated]: syz.5.1421 (pid 11483) Use of int in maxseg socket option. [ 226.240561][T11483] Use struct sctp_assoc_value instead [ 226.255583][T11480] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1419'. [ 226.495621][T11495] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1426'. [ 226.660943][T11503] netlink: 'syz.3.1427': attribute type 9 has an invalid length. [ 226.705178][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 226.724048][T11508] sch_fq: defrate 0 ignored. [ 226.736895][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 226.750282][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 226.760822][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 226.769059][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 226.834513][T11514] netlink: 'syz.3.1431': attribute type 10 has an invalid length. [ 226.844479][T11510] netlink: 'syz.5.1429': attribute type 1 has an invalid length. [ 226.848072][T11514] bridge0: port 2(team0) entered blocking state [ 226.860390][T11514] bridge0: port 2(team0) entered disabled state [ 226.872131][T11514] team0: entered promiscuous mode [ 226.886123][T11514] netlink: 'syz.3.1431': attribute type 10 has an invalid length. [ 226.894379][T11514] netlink: 'syz.3.1431': attribute type 10 has an invalid length. [ 226.902408][T11514] netlink: 'syz.3.1431': attribute type 10 has an invalid length. [ 226.919893][T11519] xt_CONNSECMARK: invalid mode: 0 [ 226.928498][T11519] Cannot find del_set index 3 as target [ 226.976693][T11514] netlink: 'syz.3.1431': attribute type 10 has an invalid length. [ 227.014890][T11510] 8021q: adding VLAN 0 to HW filter on device bond3 [ 227.039082][T11514] netlink: 'syz.3.1431': attribute type 10 has an invalid length. [ 227.051434][T11506] lo speed is unknown, defaulting to 1000 [ 227.258801][T11531] mac80211_hwsim hwsim16 wlan1: left allmulticast mode [ 227.269549][T11531] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 227.316355][T11531] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 227.343905][T11532] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1436'. [ 227.389101][T11536] netlink: 1344 bytes leftover after parsing attributes in process `syz.1.1437'. [ 227.600464][T11543] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 227.896721][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1445'. [ 228.166966][T11577] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1445'. [ 228.868517][ T5843] Bluetooth: hci3: command tx timeout [ 229.760393][T11506] chnl_net:caif_netlink_parms(): no params data found [ 230.090205][T11614] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1456'. [ 230.111224][T11614] SET target dimension over the limit! [ 230.145670][T11506] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.152878][T11506] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.191101][T11506] bridge_slave_0: entered allmulticast mode [ 230.212841][T11506] bridge_slave_0: entered promiscuous mode [ 230.226492][T11625] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1457'. [ 230.245244][T11506] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.258650][T11506] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.284175][T11506] bridge_slave_1: entered allmulticast mode [ 230.306764][T11506] bridge_slave_1: entered promiscuous mode [ 230.428089][T11506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.452858][T11506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.594277][T11642] openvswitch: netlink: Flow key attr not present in new flow. [ 230.602010][T11642] openvswitch: netlink: Flow key attr not present in new flow. [ 230.623463][T11506] team0: Port device team_slave_0 added [ 230.654281][T11642] openvswitch: netlink: Flow key attr not present in new flow. [ 230.670547][T11506] team0: Port device team_slave_1 added [ 230.673526][T11642] openvswitch: netlink: Flow key attr not present in new flow. [ 230.700248][T11642] openvswitch: netlink: Flow key attr not present in new flow. [ 230.721835][T11642] openvswitch: netlink: Flow key attr not present in new flow. [ 230.744892][T11642] openvswitch: netlink: Flow key attr not present in new flow. [ 230.752595][T11642] openvswitch: netlink: Flow key attr not present in new flow. [ 230.794922][T11642] openvswitch: netlink: Flow key attr not present in new flow. [ 230.804747][T11642] openvswitch: netlink: Flow key attr not present in new flow. [ 230.822665][T11506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.834871][T11506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.889851][T11506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.921513][T11506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.939627][T11506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.965666][ T5843] Bluetooth: hci3: command tx timeout [ 230.988330][T11506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.031861][T11656] tipc: Enabling of bearer rejected, already enabled [ 231.053426][T11656] validate_nla: 31 callbacks suppressed [ 231.053445][T11656] netlink: 'syz.0.1468': attribute type 29 has an invalid length. [ 231.157295][T11506] hsr_slave_0: entered promiscuous mode [ 231.174952][T11506] hsr_slave_1: entered promiscuous mode [ 231.181536][T11506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.211521][T11506] Cannot create hsr debugfs directory [ 231.578272][T11506] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.688853][T11506] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.830221][T11506] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.972260][T11697] Bluetooth: MGMT ver 1.23 [ 231.996526][T11506] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.277142][T11708] xt_l2tp: invalid flags combination: 4 [ 232.336641][T11709] batadv_slave_1: entered promiscuous mode [ 232.348675][T11709] batadv_slave_1: left allmulticast mode [ 232.369214][T11713] __nla_validate_parse: 36 callbacks suppressed [ 232.369234][T11713] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1483'. [ 232.478224][T11506] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 232.526787][T11506] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 232.552784][T11506] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 232.574987][T11506] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 232.648512][T11727] only policy match revision 0 supported [ 232.648536][T11727] unable to load match [ 233.033125][ T5843] Bluetooth: hci3: command tx timeout [ 233.050368][T11747] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 233.153506][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1491'. [ 233.166424][T11754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'. [ 233.232557][T11506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.290413][T11506] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.397077][ T7990] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.404325][ T7990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.458695][ T7990] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.465922][ T7990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.484962][T11762] netlink: 'syz.1.1492': attribute type 11 has an invalid length. [ 233.582763][T11766] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1493'. [ 233.614148][T11766] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1493'. [ 233.648852][T11769] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1495'. [ 233.726270][T11769] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1495'. [ 233.891641][T11782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1497'. [ 234.200597][T11506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.258035][T11796] dvmrp0: entered allmulticast mode [ 234.337769][T11807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1504'. [ 234.446907][T11813] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1508'. [ 234.479143][T11816] tipc: MTU too low for tipc bearer [ 234.769881][T11506] veth0_vlan: entered promiscuous mode [ 234.807725][T11506] veth1_vlan: entered promiscuous mode [ 234.867560][T11506] veth0_macvtap: entered promiscuous mode [ 234.887347][T11506] veth1_macvtap: entered promiscuous mode [ 234.935274][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.951512][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.967410][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.990448][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.003968][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.018267][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.031220][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.041981][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.052047][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.063070][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.084526][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.125067][ T5843] Bluetooth: hci3: command tx timeout [ 235.145723][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.157735][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.169021][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.210370][T11506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.232159][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.247863][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.300079][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.316681][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.331164][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.344652][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.354957][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.366238][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.376448][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.389480][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.399521][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.410208][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.420351][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.431215][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.446713][T11506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.522203][T11506] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.555495][T11506] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.565683][T11506] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.588861][T11506] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.882876][T11865] net_ratelimit: 55 callbacks suppressed [ 235.882898][T11865] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 236.005357][T10420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.041280][T10420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.262283][T11884] openvswitch: netlink: Message has 4 unknown bytes. [ 236.291895][T11885] netlink: 'syz.0.1526': attribute type 1 has an invalid length. [ 236.299906][T11885] netlink: 'syz.0.1526': attribute type 1 has an invalid length. [ 236.415908][T11887] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 236.452702][ T9280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.468582][ T9280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.019260][T11894] netlink: 'syz.5.1530': attribute type 10 has an invalid length. [ 237.064805][T11894] batadv0: left allmulticast mode [ 237.101808][T11894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.125717][T11894] batadv0: entered allmulticast mode [ 237.144387][T11894] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 237.305393][T11902] netlink: 'syz.1.1533': attribute type 4 has an invalid length. [ 240.730814][T11905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.966165][T11920] netlink: 'syz.3.1536': attribute type 1 has an invalid length. [ 240.983969][T11920] netlink: 'syz.3.1536': attribute type 1 has an invalid length. [ 241.012066][T11920] __nla_validate_parse: 3 callbacks suppressed [ 241.012083][T11920] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1536'. [ 241.097483][T11921] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1536'. [ 241.128184][T11920] netlink: 'syz.3.1536': attribute type 1 has an invalid length. [ 241.161294][T11920] netlink: 'syz.3.1536': attribute type 2 has an invalid length. [ 243.243636][ C1] sched: DL replenish lagged too much [ 246.082804][T11943] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 246.230787][T11946] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1543'. [ 246.253116][T11946] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1543'. [ 252.629906][ T5850] Bluetooth: hci4: command 0x0401 tx timeout [ 255.593354][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.603711][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.647546][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 257.656628][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 257.667499][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 257.675552][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 257.685812][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 257.772662][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 257.781733][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 257.790136][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 257.798189][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 257.808024][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 259.524319][ T5843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 259.532809][ T5843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 259.540896][ T5843] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 259.549810][ T5843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 259.557620][ T5843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 259.744036][ T5843] Bluetooth: hci3: command tx timeout [ 259.904202][ T5843] Bluetooth: hci6: command tx timeout [ 261.664120][ T5843] Bluetooth: hci7: command tx timeout [ 261.824034][ T5843] Bluetooth: hci3: command tx timeout [ 261.990620][ T5850] Bluetooth: hci6: command tx timeout [ 262.635037][ T5850] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 262.643468][ T5850] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 262.651456][ T5850] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 262.659595][ T5850] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 262.667775][ T5850] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 263.744446][ T5850] Bluetooth: hci7: command tx timeout [ 263.907846][ T5850] Bluetooth: hci3: command tx timeout [ 264.064019][ T5850] Bluetooth: hci6: command tx timeout [ 264.784524][ T5850] Bluetooth: hci8: command tx timeout [ 265.833756][ T5843] Bluetooth: hci7: command tx timeout [ 265.984381][ T5850] Bluetooth: hci3: command tx timeout [ 266.144260][ T5850] Bluetooth: hci6: command tx timeout [ 266.864908][ T5850] Bluetooth: hci8: command tx timeout [ 267.917549][ T5850] Bluetooth: hci5: command 0x0406 tx timeout [ 267.923907][ T5843] Bluetooth: hci7: command tx timeout [ 268.944354][ T55] Bluetooth: hci8: command tx timeout [ 271.024334][ T55] Bluetooth: hci8: command tx timeout [ 290.499718][ T5850] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 290.513152][ T5850] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 290.526554][ T5850] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 290.537189][ T5850] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 290.545051][ T5850] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 292.624062][ T55] Bluetooth: hci9: command tx timeout [ 294.709348][ T55] Bluetooth: hci9: command tx timeout [ 296.784143][ T55] Bluetooth: hci9: command tx timeout [ 298.869631][ T55] Bluetooth: hci9: command tx timeout [ 317.043165][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.053944][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.900523][ T5850] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 318.919564][ T5850] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 318.927584][ T5850] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 318.936017][ T5850] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 318.947828][ T5850] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 319.024497][ T55] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 319.033644][ T55] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 319.047080][ T55] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 319.067418][ T55] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 319.075451][ T55] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 319.779406][ T55] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 319.788859][ T55] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 319.796754][ T55] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 319.804955][ T55] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 319.812770][ T55] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 321.024278][ T55] Bluetooth: hci10: command tx timeout [ 321.103917][ T55] Bluetooth: hci11: command tx timeout [ 321.904151][ T55] Bluetooth: hci12: command tx timeout [ 323.044390][ T5850] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 323.052973][ T5850] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 323.073861][ T5850] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 323.081998][ T5850] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 323.089888][ T5850] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 323.103841][ T55] Bluetooth: hci10: command tx timeout [ 323.186160][ T5850] Bluetooth: hci11: command tx timeout [ 323.984219][ T5850] Bluetooth: hci12: command tx timeout [ 325.184197][ T55] Bluetooth: hci10: command tx timeout [ 325.195675][ T5850] Bluetooth: hci13: command tx timeout [ 325.264415][ T5850] Bluetooth: hci11: command tx timeout [ 326.064109][ T5850] Bluetooth: hci12: command tx timeout [ 327.269284][ T5850] Bluetooth: hci13: command tx timeout [ 327.276117][ T5850] Bluetooth: hci10: command tx timeout [ 327.344020][ T55] Bluetooth: hci11: command tx timeout [ 328.144107][ T55] Bluetooth: hci12: command tx timeout [ 329.344325][ T55] Bluetooth: hci13: command tx timeout [ 331.426479][ T55] Bluetooth: hci13: command tx timeout [ 353.200796][ T5850] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 353.209608][ T5850] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 353.217558][ T5850] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 353.225695][ T5850] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 353.233500][ T5850] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 355.264105][ T55] Bluetooth: hci14: command tx timeout [ 357.344454][ T55] Bluetooth: hci14: command tx timeout [ 359.424098][ T55] Bluetooth: hci14: command tx timeout [ 361.507515][ T55] Bluetooth: hci14: command tx timeout [ 378.497301][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.503829][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.286367][ T5843] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 379.295468][ T5843] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 379.303445][ T5843] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 379.314784][ T5843] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 379.322566][ T5843] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 379.403507][ T5849] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 379.423971][ T5849] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 379.431995][ T5849] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 379.440305][ T5849] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 379.449321][ T5849] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 380.180542][ T5843] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 380.191561][ T5843] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 380.199646][ T5843] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 380.207901][ T5843] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 380.215808][ T5843] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 380.557503][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 380.563749][ T5843] Bluetooth: hci6: command 0x0406 tx timeout [ 381.424209][ T55] Bluetooth: hci15: command tx timeout [ 381.504002][ T55] Bluetooth: hci16: command tx timeout [ 382.304209][ T5850] Bluetooth: hci17: command tx timeout [ 383.330272][ T55] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 383.339694][ T55] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 383.347797][ T55] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 383.359595][ T55] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 383.367755][ T55] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 383.504239][ T55] Bluetooth: hci15: command tx timeout [ 383.593879][ T5849] Bluetooth: hci16: command tx timeout [ 384.383999][ T5852] Bluetooth: hci17: command tx timeout [ 385.423894][ T5852] Bluetooth: hci18: command tx timeout [ 385.584246][ T5852] Bluetooth: hci15: command tx timeout [ 385.673969][ T5852] Bluetooth: hci8: command 0x0406 tx timeout [ 385.680320][ T55] Bluetooth: hci7: command 0x0406 tx timeout [ 385.686499][ T5843] Bluetooth: hci16: command tx timeout [ 386.464317][ T5850] Bluetooth: hci17: command tx timeout [ 387.504261][ T5849] Bluetooth: hci18: command tx timeout [ 387.673683][ T5849] Bluetooth: hci15: command tx timeout [ 387.744033][ T5849] Bluetooth: hci16: command tx timeout [ 388.544118][ T5849] Bluetooth: hci17: command tx timeout [ 388.706886][ T31] INFO: task jbd2/sda1-8:5173 blocked for more than 143 seconds. [ 388.724042][ T31] Not tainted 6.15.0-rc1-syzkaller-00177-g8c941f14a694 #0 [ 388.743684][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 388.752474][ T31] task:jbd2/sda1-8 state:D stack:24648 pid:5173 tgid:5173 ppid:2 task_flags:0x240040 flags:0x00004000 [ 388.775192][ T31] Call Trace: [ 388.778513][ T31] [ 388.781466][ T31] __schedule+0x1b88/0x5240 [ 388.793761][ T31] ? register_lock_class+0x54/0x330 [ 388.799020][ T31] ? schedule+0x163/0x360 [ 388.803373][ T31] ? __pfx___schedule+0x10/0x10 [ 388.818265][ T31] ? schedule+0x90/0x360 [ 388.822538][ T31] ? schedule+0x90/0x360 [ 388.835606][ T31] schedule+0x163/0x360 [ 388.839810][ T31] io_schedule+0x8d/0x110 [ 388.853670][ T31] bit_wait_io+0x12/0xd0 [ 388.857948][ T31] __wait_on_bit+0xb0/0x300 [ 388.862473][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 388.878130][ T31] out_of_line_wait_on_bit+0x1e0/0x280 [ 388.888519][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 388.893492][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 388.903839][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 388.933680][ T31] jbd2_journal_commit_transaction+0x393d/0x6170 [ 388.974012][ T31] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 388.980758][ T31] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 389.103989][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 389.110473][ T31] ? rcu_is_watching+0x15/0xb0 [ 389.170889][ T31] ? __try_to_del_timer_sync+0x346/0x390 [ 389.194031][ T31] ? __pfx___timer_delete_sync+0x10/0x10 [ 389.199742][ T31] kjournald2+0x41e/0x7b0 [ 389.218515][ T31] ? __pfx_kjournald2+0x10/0x10 [ 389.223425][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 389.237922][ T31] ? __kthread_parkme+0x1a8/0x200 [ 389.250611][ T31] ? __pfx_kjournald2+0x10/0x10 [ 389.260967][ T31] kthread+0x7b7/0x940 [ 389.270934][ T31] ? __pfx_kjournald2+0x10/0x10 [ 389.280928][ T31] ? __pfx_kthread+0x10/0x10 [ 389.290655][ T31] ? __pfx_kthread+0x10/0x10 [ 389.301599][ T31] ? __pfx_kthread+0x10/0x10 [ 389.315224][ T31] ? __pfx_kthread+0x10/0x10 [ 389.319943][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.336561][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 389.341815][ T31] ? __pfx_kthread+0x10/0x10 [ 389.363095][ T31] ret_from_fork+0x4b/0x80 [ 389.369792][ T31] ? __pfx_kthread+0x10/0x10 [ 389.382236][ T31] ret_from_fork_asm+0x1a/0x30 [ 389.387370][ T31] [ 389.392725][ T31] INFO: task kworker/u8:12:7991 blocked for more than 143 seconds. [ 389.403665][ T31] Not tainted 6.15.0-rc1-syzkaller-00177-g8c941f14a694 #0 [ 389.411315][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 389.429655][ T31] task:kworker/u8:12 state:D stack:23320 pid:7991 tgid:7991 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 389.453678][ T31] Workqueue: netns cleanup_net [ 389.458502][ T31] Call Trace: [ 389.461817][ T31] [ 389.474831][ T31] __schedule+0x1b88/0x5240 [ 389.479400][ T31] ? schedule+0x163/0x360 [ 389.492582][ T31] ? __pfx___schedule+0x10/0x10 [ 389.497791][ T31] ? schedule+0x90/0x360 [ 389.502056][ T31] ? schedule+0x90/0x360 [ 389.513627][ T31] schedule+0x163/0x360 [ 389.517814][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 389.522685][ T31] schedule_preempt_disabled+0x13/0x30 [ 389.537610][ T31] __mutex_lock+0x805/0x10c0 [ 389.542245][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 389.563099][ T31] ? netdev_run_todo+0x75c/0xf30 [ 389.571958][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 389.583504][ T31] ? __init_swait_queue_head+0xae/0x150 [ 389.593953][ T5849] Bluetooth: hci18: command tx timeout [ 389.607842][ T31] ? msleep+0xe2/0x100 [ 389.611973][ T31] netdev_run_todo+0x75c/0xf30 [ 389.638573][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 389.653856][ T31] ? unregister_netdevice_queue+0x2c4/0x400 [ 389.659813][ T31] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 389.681638][ T31] default_device_exit_batch+0x804/0x880 [ 389.687584][ T31] ? __pfx_default_device_exit_batch+0x10/0x10 [ 389.703686][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 389.709204][ T31] ? cfg802154_pernet_exit+0xc3/0xe0 [ 389.723669][ T31] ? __pfx_default_device_exit_batch+0x10/0x10 [ 389.731592][ T31] cleanup_net+0x8af/0xd60 [ 389.783752][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 389.788786][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 389.823850][ T31] process_scheduled_works+0xac3/0x18e0 [ 389.829485][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 389.843695][ T31] ? assign_work+0x367/0x3d0 [ 389.848327][ T31] worker_thread+0x870/0xd50 [ 389.852981][ T31] ? __kthread_parkme+0x1a8/0x200 [ 389.871172][ T31] ? __pfx_worker_thread+0x10/0x10 [ 389.879286][ T31] kthread+0x7b7/0x940 [ 389.883396][ T31] ? __pfx_worker_thread+0x10/0x10 [ 389.893732][ T31] ? __pfx_kthread+0x10/0x10 [ 389.898372][ T31] ? __pfx_kthread+0x10/0x10 [ 389.902984][ T31] ? __pfx_kthread+0x10/0x10 [ 389.923835][ T31] ? __pfx_kthread+0x10/0x10 [ 389.928479][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.943694][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 389.948927][ T31] ? __pfx_kthread+0x10/0x10 [ 389.966501][ T31] ret_from_fork+0x4b/0x80 [ 389.970962][ T31] ? __pfx_kthread+0x10/0x10 [ 389.982854][ T31] ret_from_fork_asm+0x1a/0x30 [ 389.988173][ T31] [ 389.991239][ T31] INFO: task kworker/u8:33:10420 blocked for more than 144 seconds. [ 390.014092][ T31] Not tainted 6.15.0-rc1-syzkaller-00177-g8c941f14a694 #0 [ 390.021747][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 390.066451][ T31] task:kworker/u8:33 state:D stack:24512 pid:10420 tgid:10420 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 390.103150][ T31] Workqueue: events_unbound linkwatch_event [ 390.111606][ T31] Call Trace: [ 390.133665][ T31] [ 390.136643][ T31] __schedule+0x1b88/0x5240 [ 390.141204][ T31] ? schedule+0x163/0x360 [ 390.153662][ T31] ? __pfx___schedule+0x10/0x10 [ 390.158572][ T31] ? schedule+0x90/0x360 [ 390.162855][ T31] ? schedule+0x90/0x360 [ 390.180349][ T31] schedule+0x163/0x360 [ 390.188675][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 390.193481][ T31] schedule_preempt_disabled+0x13/0x30 [ 390.203757][ T31] __mutex_lock+0x805/0x10c0 [ 390.208401][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 390.213196][ T31] ? linkwatch_event+0xe/0x60 [ 390.243762][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 390.248860][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 390.263711][ T31] linkwatch_event+0xe/0x60 [ 390.271840][ T31] process_scheduled_works+0xac3/0x18e0 [ 390.283680][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 390.289707][ T31] ? assign_work+0x367/0x3d0 [ 390.303758][ T31] worker_thread+0x870/0xd50 [ 390.308440][ T31] ? __kthread_parkme+0x1a8/0x200 [ 390.313497][ T31] ? __pfx_worker_thread+0x10/0x10 [ 390.330481][ T31] kthread+0x7b7/0x940 [ 390.340063][ T31] ? __pfx_worker_thread+0x10/0x10 [ 390.351798][ T31] ? __pfx_kthread+0x10/0x10 [ 390.356681][ T31] ? __pfx_kthread+0x10/0x10 [ 390.361305][ T31] ? __pfx_kthread+0x10/0x10 [ 390.378933][ T31] ? __pfx_kthread+0x10/0x10 [ 390.393768][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 390.399035][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 390.413669][ T31] ? __pfx_kthread+0x10/0x10 [ 390.418301][ T31] ret_from_fork+0x4b/0x80 [ 390.422735][ T31] ? __pfx_kthread+0x10/0x10 [ 390.439750][ T31] ret_from_fork_asm+0x1a/0x30 [ 390.450547][ T31] [ 390.454031][ T31] INFO: task syz.3.1536:11921 blocked for more than 144 seconds. [ 390.461768][ T31] Not tainted 6.15.0-rc1-syzkaller-00177-g8c941f14a694 #0 [ 390.484335][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 390.493025][ T31] task:syz.3.1536 state:D stack:25264 pid:11921 tgid:11916 ppid:5845 task_flags:0x400140 flags:0x00004004 [ 390.513621][ T31] Call Trace: [ 390.516930][ T31] [ 390.519883][ T31] __schedule+0x1b88/0x5240 [ 390.533630][ T31] ? check_path+0x21/0x40 [ 390.538296][ T31] ? schedule+0x163/0x360 [ 390.542661][ T31] ? __pfx___schedule+0x10/0x10 [ 390.560445][ T31] ? register_lock_class+0x54/0x330 [ 390.569113][ T31] ? schedule+0x90/0x360 [ 390.573397][ T31] ? schedule+0x90/0x360 [ 390.583972][ T31] schedule+0x163/0x360 [ 390.588185][ T31] schedule_timeout+0xb1/0x2b0 [ 390.592994][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 390.609116][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 390.619202][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 390.643263][ T31] ? wait_for_completion+0x2d4/0x600 [ 390.661518][ T31] wait_for_completion+0x32f/0x600 [ 390.671446][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 390.683826][ T31] ? __flush_work+0xee/0xc60 [ 390.688472][ T31] __flush_work+0xa48/0xc60 [ 390.693008][ T31] ? __flush_work+0xee/0xc60 [ 390.710518][ T31] ? __pfx___flush_work+0x10/0x10 [ 390.715813][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 390.721157][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 390.753627][ T31] unregister_netdevice_many_notify+0xb8a/0x2510 [ 390.760056][ T31] ? __mutex_lock+0xbe3/0x10c0 [ 390.778299][ T31] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 390.793747][ T31] ? unregister_netdevice_queue+0x2c4/0x400 [ 390.799700][ T31] ? veth_dellink+0xef/0x140 [ 390.814599][ T31] ? __pfx_veth_dellink+0x10/0x10 [ 390.819692][ T31] rtnl_dellink+0x53c/0x8c0 [ 390.833764][ T31] ? __pfx_rtnl_dellink+0x10/0x10 [ 390.838835][ T31] ? __lock_acquire+0xad5/0xd80 [ 390.853726][ T31] ? __lock_acquire+0xad5/0xd80 [ 390.858693][ T31] ? __pfx_rtnl_dellink+0x10/0x10 [ 390.875783][ T31] rtnetlink_rcv_msg+0x80f/0xd70 [ 390.880771][ T31] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 390.893787][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 390.899391][ T31] ? __lock_acquire+0xad5/0xd80 [ 390.915224][ T31] netlink_rcv_skb+0x208/0x480 [ 390.920040][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 390.933687][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 390.939037][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 390.953602][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 390.958857][ T31] netlink_unicast+0x7f8/0x9a0 [ 390.973385][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 390.978834][ T31] ? skb_put+0x114/0x1f0 [ 390.983104][ T31] netlink_sendmsg+0x8c3/0xcd0 [ 391.003481][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.008957][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 391.024289][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.029618][ T31] __sock_sendmsg+0x221/0x270 [ 391.043668][ T31] ____sys_sendmsg+0x523/0x860 [ 391.048577][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.063691][ T31] ? __fget_files+0x2a/0x420 [ 391.068324][ T31] ? __fget_files+0x2a/0x420 [ 391.072947][ T31] __sys_sendmsg+0x271/0x360 [ 391.090384][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 391.101510][ T31] ? __lock_acquire+0xad5/0xd80 [ 391.113680][ T31] ? do_syscall_64+0xb6/0x230 [ 391.118496][ T31] do_syscall_64+0xf3/0x230 [ 391.123026][ T31] ? clear_bhb_loop+0x45/0xa0 [ 391.137827][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.148312][ T31] RIP: 0033:0x7ff66918d169 [ 391.152762][ T31] RSP: 002b:00007ff669f39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.171731][ T31] RAX: ffffffffffffffda RBX: 00007ff6693a6160 RCX: 00007ff66918d169 [ 391.182181][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 391.206126][ T31] RBP: 00007ff66920e990 R08: 0000000000000000 R09: 0000000000000000 [ 391.214677][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.222677][ T31] R13: 0000000000000000 R14: 00007ff6693a6160 R15: 00007ffe1b0d16f8 [ 391.241975][ T31] [ 391.248334][ T31] INFO: task syz.1.1538:11924 blocked for more than 145 seconds. [ 391.270351][ T31] Not tainted 6.15.0-rc1-syzkaller-00177-g8c941f14a694 #0 [ 391.283626][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.303686][ T31] task:syz.1.1538 state:D stack:26600 pid:11924 tgid:11922 ppid:5854 task_flags:0x400140 flags:0x00000004 [ 391.328068][ T31] Call Trace: [ 391.331386][ T31] [ 391.339476][ T31] __schedule+0x1b88/0x5240 [ 391.349541][ T31] ? stack_trace_save+0x11a/0x1d0 [ 391.360054][ T31] ? schedule+0x163/0x360 [ 391.364656][ T31] ? __pfx___schedule+0x10/0x10 [ 391.369546][ T31] ? schedule+0x90/0x360 [ 391.383822][ T31] ? schedule+0x90/0x360 [ 391.388099][ T31] schedule+0x163/0x360 [ 391.392272][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 391.409212][ T31] schedule_preempt_disabled+0x13/0x30 [ 391.419878][ T31] __mutex_lock+0x805/0x10c0 [ 391.433775][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 391.438586][ T31] ? nl80211_pre_doit+0x5f/0x8b0 [ 391.453380][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 391.458639][ T31] ? __nla_parse+0x40/0x60 [ 391.463118][ T31] nl80211_pre_doit+0x5f/0x8b0 [ 391.473622][ T31] genl_rcv_msg+0xacc/0xf00 [ 391.478179][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.483229][ T31] ? __dev_queue_xmit+0x1780/0x3f60 [ 391.502210][ T31] ? kasan_save_track+0x3f/0x80 [ 391.511164][ T31] ? __kasan_slab_alloc+0x66/0x80 [ 391.523066][ T31] ? do_syscall_64+0xf3/0x230 [ 391.531680][ T31] ? __lock_acquire+0xad5/0xd80 [ 391.543774][ T31] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 391.549192][ T31] ? __pfx_nl80211_set_cqm+0x10/0x10 [ 391.563617][ T31] ? __pfx_nl80211_post_doit+0x10/0x10 [ 391.569126][ T31] netlink_rcv_skb+0x208/0x480 [ 391.583896][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.588962][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 391.608060][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 391.613323][ T31] genl_rcv+0x28/0x40 [ 391.622771][ T31] netlink_unicast+0x7f8/0x9a0 [ 391.632902][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 391.643498][ T31] ? skb_put+0x114/0x1f0 [ 391.648336][ T31] netlink_sendmsg+0x8c3/0xcd0 [ 391.653154][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.663875][ T5849] Bluetooth: hci18: command tx timeout [ 391.681351][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 391.686617][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.691945][ T31] __sock_sendmsg+0x221/0x270 [ 391.710358][ T31] ____sys_sendmsg+0x523/0x860 [ 391.719394][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.726457][ T31] ? __fget_files+0x2a/0x420 [ 391.731109][ T31] ? __fget_files+0x2a/0x420 [ 391.747125][ T31] __sys_sendmsg+0x271/0x360 [ 391.751779][ T31] ? __pfx_futex_wake+0x10/0x10 [ 391.766048][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 391.771208][ T31] ? fput+0x9b/0xd0 [ 391.783754][ T31] ? do_syscall_64+0xb6/0x230 [ 391.788483][ T31] do_syscall_64+0xf3/0x230 [ 391.793028][ T31] ? clear_bhb_loop+0x45/0xa0 [ 391.812776][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.824398][ T31] RIP: 0033:0x7fb23bd8d169 [ 391.828858][ T31] RSP: 002b:00007fb23cca8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.847312][ T31] RAX: ffffffffffffffda RBX: 00007fb23bfa6080 RCX: 00007fb23bd8d169 [ 391.861568][ T31] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: 0000000000000006 [ 391.876282][ T31] RBP: 00007fb23be0e990 R08: 0000000000000000 R09: 0000000000000000 [ 391.893663][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.901673][ T31] R13: 0000000000000000 R14: 00007fb23bfa6080 R15: 00007fff2a63d568 [ 391.927954][ T31] [ 391.931018][ T31] INFO: task syz.1.1538:11925 blocked for more than 146 seconds. [ 391.943806][ T31] Not tainted 6.15.0-rc1-syzkaller-00177-g8c941f14a694 #0 [ 391.951458][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.969464][ T31] task:syz.1.1538 state:D stack:26760 pid:11925 tgid:11922 ppid:5854 task_flags:0x400040 flags:0x00000004 [ 391.993668][ T31] Call Trace: [ 391.996978][ T31] [ 391.999935][ T31] __schedule+0x1b88/0x5240 [ 392.013648][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.019772][ T31] ? schedule+0x163/0x360 [ 392.034728][ T31] ? __pfx___schedule+0x10/0x10 [ 392.039643][ T31] ? schedule+0x90/0x360 [ 392.054590][ T31] ? schedule+0x90/0x360 [ 392.058874][ T31] schedule+0x163/0x360 [ 392.063049][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 392.073639][ T31] schedule_preempt_disabled+0x13/0x30 [ 392.079144][ T31] __mutex_lock+0x805/0x10c0 [ 392.093523][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 392.098671][ T31] ? __tun_chr_ioctl+0x3ef/0x1f90 [ 392.113614][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 392.118712][ T31] __tun_chr_ioctl+0x3ef/0x1f90 [ 392.133977][ T31] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 392.139299][ T31] ? __fget_files+0x2a/0x420 [ 392.153798][ T31] ? __fget_files+0x2a/0x420 [ 392.158433][ T31] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 392.173627][ T31] __se_sys_ioctl+0xf1/0x160 [ 392.178260][ T31] do_syscall_64+0xf3/0x230 [ 392.182940][ T31] ? clear_bhb_loop+0x45/0xa0 [ 392.198544][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.209761][ T31] RIP: 0033:0x7fb23bd8d169 [ 392.223799][ T31] RSP: 002b:00007fb23cc87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 392.232268][ T31] RAX: ffffffffffffffda RBX: 00007fb23bfa6160 RCX: 00007fb23bd8d169 [ 392.250936][ T31] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000005 [ 392.271955][ T31] RBP: 00007fb23be0e990 R08: 0000000000000000 R09: 0000000000000000 [ 392.283186][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.293742][ T31] R13: 0000000000000000 R14: 00007fb23bfa6160 R15: 00007fff2a63d568 [ 392.301765][ T31] [ 392.326173][ T31] INFO: task syz.1.1538:11926 blocked for more than 146 seconds. [ 392.343703][ T31] Not tainted 6.15.0-rc1-syzkaller-00177-g8c941f14a694 #0 [ 392.351363][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 392.371396][ T31] task:syz.1.1538 state:D stack:27912 pid:11926 tgid:11922 ppid:5854 task_flags:0x400140 flags:0x00000004 [ 392.393611][ T31] Call Trace: [ 392.397096][ T31] [ 392.400059][ T31] __schedule+0x1b88/0x5240 [ 392.413670][ T31] ? schedule+0x163/0x360 [ 392.422185][ T31] ? __pfx___schedule+0x10/0x10 [ 392.436229][ T31] ? schedule+0x90/0x360 [ 392.440516][ T31] ? schedule+0x90/0x360 [ 392.453664][ T31] schedule+0x163/0x360 [ 392.457942][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 392.462729][ T31] schedule_preempt_disabled+0x13/0x30 [ 392.481030][ T31] __mutex_lock+0x805/0x10c0 [ 392.489510][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 392.501165][ T31] ? rtnetlink_rcv_msg+0x767/0xd70 [ 392.506573][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 392.511653][ T31] rtnetlink_rcv_msg+0x767/0xd70 [ 392.529926][ T31] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 392.538958][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 392.563152][ T31] ? ref_tracker_free+0x63e/0x7e0 [ 392.568361][ T31] netlink_rcv_skb+0x208/0x480 [ 392.573164][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 392.589978][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 392.599860][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 392.611243][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 392.621215][ T31] netlink_unicast+0x7f8/0x9a0 [ 392.633827][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 392.639168][ T31] ? skb_put+0x114/0x1f0 [ 392.643446][ T31] netlink_sendmsg+0x8c3/0xcd0 [ 392.660962][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.671963][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 392.682672][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.694941][ T31] __sock_sendmsg+0x221/0x270 [ 392.699680][ T31] ____sys_sendmsg+0x523/0x860 [ 392.713795][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 392.719121][ T31] ? __fget_files+0x2a/0x420 [ 392.733715][ T31] ? __fget_files+0x2a/0x420 [ 392.738360][ T31] __sys_sendmsg+0x271/0x360 [ 392.742994][ T31] ? __pfx_futex_wake+0x10/0x10 [ 392.758463][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 392.771743][ T31] ? __lock_acquire+0xad5/0xd80 [ 392.782750][ T31] ? do_syscall_64+0xb6/0x230 [ 392.793944][ T31] do_syscall_64+0xf3/0x230 [ 392.798492][ T31] ? clear_bhb_loop+0x45/0xa0 [ 392.803202][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.820823][ T31] RIP: 0033:0x7fb23bd8d169 [ 392.829184][ T31] RSP: 002b:00007fb23cc66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.847958][ T31] RAX: ffffffffffffffda RBX: 00007fb23bfa6240 RCX: 00007fb23bd8d169 [ 392.862058][ T31] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000007 [ 392.876491][ T31] RBP: 00007fb23be0e990 R08: 0000000000000000 R09: 0000000000000000 [ 392.893678][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.901691][ T31] R13: 0000000000000000 R14: 00007fb23bfa6240 R15: 00007fff2a63d568 [ 392.923264][ T31] [ 392.932121][ T31] INFO: task syz.0.1540:11933 blocked for more than 147 seconds. [ 392.943922][ T31] Not tainted 6.15.0-rc1-syzkaller-00177-g8c941f14a694 #0 [ 392.951572][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 392.973138][ T31] task:syz.0.1540 state:D stack:24424 pid:11933 tgid:11932 ppid:5837 task_flags:0x400140 flags:0x00000004 [ 392.993602][ T31] Call Trace: [ 392.996919][ T31] [ 392.999879][ T31] __schedule+0x1b88/0x5240 [ 393.013832][ T31] ? stack_trace_save+0x11a/0x1d0 [ 393.019005][ T31] ? schedule+0x163/0x360 [ 393.023369][ T31] ? __pfx___schedule+0x10/0x10 [ 393.043161][ T31] ? schedule+0x90/0x360 [ 393.049250][ T31] ? schedule+0x90/0x360 [ 393.062461][ T31] schedule+0x163/0x360 [ 393.066840][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 393.071653][ T31] schedule_preempt_disabled+0x13/0x30 [ 393.087519][ T31] __mutex_lock+0x805/0x10c0 [ 393.092164][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 393.104595][ T31] ? dev_ethtool+0x223/0x1ff0 [ 393.109424][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 393.123823][ T31] ? __kasan_kmalloc+0x9d/0xb0 [ 393.128648][ T31] ? __kmalloc_cache_noprof+0x236/0x370 [ 393.148673][ T31] ? dev_ethtool+0x142/0x1ff0 [ 393.153409][ T31] dev_ethtool+0x223/0x1ff0 [ 393.163352][ T31] ? __lock_acquire+0xad5/0xd80 [ 393.173484][ T31] ? __pfx_dev_ethtool+0x10/0x10 [ 393.193828][ T31] ? dev_load+0x21/0x1f0 [ 393.198137][ T31] ? dev_load+0x21/0x1f0 [ 393.202419][ T31] dev_ioctl+0x43c/0x1380 [ 393.224545][ T31] sock_do_ioctl+0x233/0x490 [ 393.229203][ T31] ? __pfx_sock_do_ioctl+0x10/0x10 [ 393.249162][ T31] ? __lock_acquire+0xad5/0xd80 [ 393.260257][ T31] sock_ioctl+0x644/0x900 [ 393.265105][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 393.269993][ T31] ? __fget_files+0x2a/0x420 [ 393.283810][ T31] ? __fget_files+0x2a/0x420 [ 393.288460][ T31] ? __fget_files+0x2a/0x420 [ 393.293083][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 393.309128][ T31] __se_sys_ioctl+0xf1/0x160 [ 393.320896][ T31] do_syscall_64+0xf3/0x230 [ 393.331628][ T31] ? clear_bhb_loop+0x45/0xa0 [ 393.336567][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.363687][ T31] RIP: 0033:0x7ffa7cb8d169 [ 393.368164][ T31] RSP: 002b:00007ffa7d9c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.387721][ T31] RAX: ffffffffffffffda RBX: 00007ffa7cda5fa0 RCX: 00007ffa7cb8d169 [ 393.401716][ T31] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000003 [ 393.413784][ T31] RBP: 00007ffa7cc0e990 R08: 0000000000000000 R09: 0000000000000000 [ 393.421795][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.447947][ T31] R13: 0000000000000000 R14: 00007ffa7cda5fa0 R15: 00007ffe5d129aa8 [ 393.462828][ T31] [ 393.466197][ T31] [ 393.466197][ T31] Showing all locks held in the system: [ 393.483725][ T31] 3 locks held by kworker/0:1/10: [ 393.488802][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 393.512466][ T31] #1: ffffc900000f7c60 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 393.536254][ T31] #2: ffffffff900fd408 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 393.553609][ T31] 3 locks held by kworker/1:0/24: [ 393.558665][ T31] 1 lock held by khungtaskd/31: [ 393.563527][ T31] #0: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 393.593655][ T31] 2 locks held by kworker/1:2/3519: [ 393.598901][ T31] 2 locks held by getty/5595: [ 393.613659][ T31] #0: ffff8880350800a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 393.623490][ T31] #1: ffffc900036e32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 393.663944][ T31] 1 lock held by syz.2.479/7611: [ 393.668952][ T31] #0: ffffffff900fd408 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x75c/0xf30 [ 393.689689][ T31] 2 locks held by kworker/1:10/7648: [ 393.700209][ T31] 3 locks held by kworker/1:11/7650: [ 393.712689][ T31] #0: ffff88801b081d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 393.733642][ T31] #1: ffffc900031dfc60 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 393.756496][ T31] #2: ffffffff900fd408 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x15/0x50 [ 393.775834][ T31] 6 locks held by kworker/1:12/7662: [ 393.781256][ T31] 4 locks held by kworker/u8:12/7991: [ 393.793689][ T31] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 393.813670][ T31] #1: ffffc90004157c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 393.846843][ T31] #2: ffffffff900f08d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 393.866157][ T31] #3: ffffffff900fd408 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x75c/0xf30 [ 393.883705][ T31] 3 locks held by kworker/u8:33/10420: [ 393.889380][ T31] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 393.912155][ T31] #1: ffffc90003b67c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 393.933655][ T31] #2: ffffffff900fd408 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 393.942724][ T31] 3 locks held by kworker/u8:34/10422: [ 393.961320][ T31] #0: ffff8880303f6948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 393.983867][ T31] #1: ffffc90003b57c60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 394.008489][ T31] #2: ffffffff900fd408 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x110/0x16a0 [ 394.023808][ T31] 3 locks held by kworker/u8:40/10432: [ 394.029396][ T31] 1 lock held by syz-executor/11506: [ 394.043660][ T31] #0: ffffffff900fd408 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x75c/0xf30 [ 394.053043][ T31] 2 locks held by syz.3.1536/11921: [ 394.073206][ T31] #0: ffffffff900fd408 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x3a3/0x8c0 [ 394.093717][ T31] #1: ffffffff8ebd69b0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x86e/0x2510 [ 394.115912][ T31] 2 locks held by syz.1.1538/11924: [ 394.121250][ T31] #0: ffffffff90161890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 394.133764][ T31] #1: ffffffff900fd408 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x8b0 [ 394.143068][ T31] 1 lock held by syz.1.1538/11925: [ 394.170389][ T31] #0: ffffffff900fd408 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3ef/0x1f90 [ 394.183145][ T31] 1 lock held by syz.1.1538/11926: [ 394.196119][ T31] #0: ffffffff900fd408 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xd70 [ 394.213706][ T31] 1 lock held by syz.0.1540/11933: [ 394.218858][ T31] #0: ffffffff900fd408 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x223/0x1ff0 [ 394.241069][ T31] 3 locks held by syz.5.1544/11951: [ 394.248721][ T31] #0: ffffffff90161890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 394.262592][ T31] #1: ffffffff90161748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 394.282289][ T31] #2: ffffffff900fd408 (rtnl_mutex){+.+.}-{4:4}, at: tipc_nl_net_set+0x17/0x40 [ 394.293151][ T31] 1 lock held by syz-executor/11956: [ 394.306680][ T31] #0: ffffffff900fd408 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 394.323637][ T31] 1 lock held by syz-executor/11961: [ 394.329031][ T31] #0: ffffffff900fd408 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 394.349812][ T31] 1 lock held by syz-executor/11964: [ 394.359816][ T31] #0: ffffffff900fd408 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 394.390169][ T31] 1 lock held by syz-executor/11968: [ 394.396051][ T31] #0: ffffffff900fd408 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 394.416157][ T31] 1 lock held by syz-executor/11973: [ 394.421479][ T31] #0: ffffffff900fd408 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 394.441943][ T31] 1 lock held by syz-executor/11979: [ 394.449839][ T31] #0: ffffffff900fd408 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 394.467801][ T31] 1 lock held by syz-executor/11981: [ 394.473125][ T31] #0: ffffffff900fd408 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 394.499469][ T31] 1 lock held by syz-executor/11988: [ 394.509691][ T31] #0: ffffffff900fd408 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 394.526319][ T31] 1 lock held by syz-executor/11992: [ 394.531655][ T31] #0: ffffffff900fd408 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 394.553831][ T31] 1 lock held by syz-executor/11999: [ 394.559150][ T31] #0: ffffffff900fd408 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 394.582880][ T31] 1 lock held by syz-executor/12012: [ 394.588327][ T31] #0: ffffffff900fd408 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 394.603625][ T31] 1 lock held by syz-executor/12015: [ 394.609022][ T31] #0: ffffffff900fd408 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 394.629050][ T31] 1 lock held by syz-executor/12020: [ 394.641318][ T31] #0: ffffffff900fd408 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 394.653781][ T31] 1 lock held by syz-executor/12023: [ 394.659099][ T31] #0: ffffffff900fd408 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 394.681276][ T31] [ 394.686068][ T31] ============================================= [ 394.686068][ T31] [ 394.703446][ T31] NMI backtrace for cpu 0 [ 394.703476][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-syzkaller-00177-g8c941f14a694 #0 PREEMPT(full) [ 394.703511][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 394.703523][ T31] Call Trace: [ 394.703531][ T31] [ 394.703546][ T31] dump_stack_lvl+0x241/0x360 [ 394.703581][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.703609][ T31] ? __pfx__printk+0x10/0x10 [ 394.703648][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 394.703674][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 394.703690][ T31] ? _printk+0xd5/0x120 [ 394.703717][ T31] ? __wake_up_klogd+0xcc/0x110 [ 394.703746][ T31] ? __pfx__printk+0x10/0x10 [ 394.703776][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 394.703797][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 394.703832][ T31] watchdog+0x1058/0x10a0 [ 394.703854][ T31] ? watchdog+0x1ea/0x10a0 [ 394.703879][ T31] ? __pfx_watchdog+0x10/0x10 [ 394.703899][ T31] kthread+0x7b7/0x940 [ 394.703928][ T31] ? __pfx_watchdog+0x10/0x10 [ 394.703949][ T31] ? __pfx_kthread+0x10/0x10 [ 394.703972][ T31] ? __pfx_kthread+0x10/0x10 [ 394.703998][ T31] ? __pfx_kthread+0x10/0x10 [ 394.704024][ T31] ? __pfx_kthread+0x10/0x10 [ 394.704049][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.704067][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 394.704089][ T31] ? __pfx_kthread+0x10/0x10 [ 394.704122][ T31] ret_from_fork+0x4b/0x80 [ 394.704141][ T31] ? __pfx_kthread+0x10/0x10 [ 394.704168][ T31] ret_from_fork_asm+0x1a/0x30 [ 394.704202][ T31] [ 394.861688][ T31] Sending NMI from CPU 0 to CPUs 1: [ 394.867806][ C1] NMI backtrace for cpu 1 [ 394.867823][ C1] CPU: 1 UID: 0 PID: 7662 Comm: kworker/1:12 Not tainted 6.15.0-rc1-syzkaller-00177-g8c941f14a694 #0 PREEMPT(full) [ 394.867844][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 394.867872][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 394.867935][ C1] RIP: 0010:lock_acquire+0xc5/0x2f0 [ 394.867955][ C1] Code: c9 11 85 c0 0f 85 e0 00 00 00 65 48 8b 04 25 08 c0 68 93 83 b8 ec 0a 00 00 00 0f 85 ca 00 00 00 48 c7 44 24 10 00 00 00 00 9c <8f> 44 24 10 4c 8b 74 24 10 fa 48 c7 c7 c9 94 76 8e e8 b5 d1 91 0a [ 394.867970][ C1] RSP: 0018:ffffc90000a07da0 EFLAGS: 00000246 [ 394.867984][ C1] RAX: ffff88803062da00 RBX: ffffffff8ed3dfe0 RCX: 0000000000000002 [ 394.867997][ C1] RDX: 0000000000000000 RSI: ffffffff816e0be5 RDI: 1ffffffff1da7bfc [ 394.868009][ C1] RBP: ffffffff9368c020 R08: 0000000000000000 R09: 0000000000000000 [ 394.868020][ C1] R10: ffffc90000a07f50 R11: ffffffff81aef970 R12: 0000000000000000 [ 394.868032][ C1] R13: 0000000000000002 R14: ffffffff818c18c0 R15: 0000000000000000 [ 394.868043][ C1] FS: 0000000000000000(0000) GS:ffff888125094000(0000) knlGS:0000000000000000 [ 394.868057][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 394.868069][ C1] CR2: 0000200000001000 CR3: 000000000eb38000 CR4: 00000000003526f0 [ 394.868084][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 394.868095][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 394.868106][ C1] Call Trace: [ 394.868112][ C1] [ 394.868129][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 394.868153][ C1] ? worker_thread+0x870/0xd50 [ 394.868173][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 394.868193][ C1] unwind_next_frame+0xd5/0x23b0 [ 394.868214][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 394.868238][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 394.868260][ C1] ? worker_thread+0x870/0xd50 [ 394.868279][ C1] ? worker_thread+0x870/0xd50 [ 394.868299][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 394.868325][ C1] arch_stack_walk+0x11e/0x150 [ 394.868351][ C1] ? worker_thread+0x870/0xd50 [ 394.868373][ C1] stack_trace_save+0x11a/0x1d0 [ 394.868399][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 394.868424][ C1] ? do_raw_spin_lock+0x151/0x370 [ 394.868455][ C1] kasan_save_track+0x3f/0x80 [ 394.868473][ C1] ? kasan_save_track+0x3f/0x80 [ 394.868490][ C1] ? kasan_save_free_info+0x40/0x50 [ 394.868504][ C1] ? __kasan_slab_free+0x59/0x70 [ 394.868523][ C1] ? kmem_cache_free+0x197/0x410 [ 394.868546][ C1] ? vxcan_xmit+0x204/0x760 [ 394.868567][ C1] ? dev_hard_start_xmit+0x2d4/0x840 [ 394.868584][ C1] ? __dev_queue_xmit+0x1b80/0x3f60 [ 394.868602][ C1] ? can_send+0xa05/0xe60 [ 394.868620][ C1] ? can_can_gw_rcv+0xde7/0x1070 [ 394.868634][ C1] ? can_rcv_filter+0x11c/0x7f0 [ 394.868654][ C1] ? can_receive+0x314/0x440 [ 394.868672][ C1] ? canfd_rcv+0x144/0x260 [ 394.868691][ C1] ? __netif_receive_skb+0x2ea/0x670 [ 394.868712][ C1] ? process_backlog+0x664/0x15c0 [ 394.868734][ C1] ? __napi_poll+0xcb/0x480 [ 394.868754][ C1] ? net_rx_action+0x89d/0x1240 [ 394.868776][ C1] ? handle_softirqs+0x2d6/0x9b0 [ 394.868791][ C1] ? do_softirq+0x11f/0x1e0 [ 394.868806][ C1] ? __local_bh_enable_ip+0x1be/0x200 [ 394.868822][ C1] ? wg_packet_tx_worker+0x5ef/0x810 [ 394.868845][ C1] ? process_scheduled_works+0xac3/0x18e0 [ 394.868863][ C1] ? worker_thread+0x870/0xd50 [ 394.868904][ C1] ? skb_release_data+0x2b5/0x8b0 [ 394.868923][ C1] kasan_save_free_info+0x40/0x50 [ 394.868939][ C1] __kasan_slab_free+0x59/0x70 [ 394.868958][ C1] ? vxcan_xmit+0x204/0x760 [ 394.868979][ C1] kmem_cache_free+0x197/0x410 [ 394.869002][ C1] ? vxcan_xmit+0x204/0x760 [ 394.869037][ C1] ? vxcan_xmit+0x4a/0x760 [ 394.869057][ C1] vxcan_xmit+0x204/0x760 [ 394.869081][ C1] dev_hard_start_xmit+0x2d4/0x840 [ 394.869107][ C1] __dev_queue_xmit+0x1b80/0x3f60 [ 394.869138][ C1] ? stack_depot_save_flags+0x44/0x940 [ 394.869156][ C1] ? __dev_queue_xmit+0x2f9/0x3f60 [ 394.869176][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 394.869193][ C1] ? kasan_save_track+0x51/0x80 [ 394.869210][ C1] ? kasan_save_track+0x3f/0x80 [ 394.869226][ C1] ? __kasan_slab_alloc+0x66/0x80 [ 394.869245][ C1] ? kmem_cache_alloc_noprof+0x1e1/0x390 [ 394.869266][ C1] ? skb_clone+0x20c/0x390 [ 394.869282][ C1] ? can_can_gw_rcv+0x3ce/0x1070 [ 394.869296][ C1] ? can_rcv_filter+0x11c/0x7f0 [ 394.869314][ C1] ? can_receive+0x314/0x440 [ 394.869332][ C1] ? canfd_rcv+0x144/0x260 [ 394.869349][ C1] ? __netif_receive_skb+0x2ea/0x670 [ 394.869369][ C1] ? process_backlog+0x664/0x15c0 [ 394.869390][ C1] ? __napi_poll+0xcb/0x480 [ 394.869409][ C1] ? net_rx_action+0x89d/0x1240 [ 394.869430][ C1] ? handle_softirqs+0x2d6/0x9b0 [ 394.869445][ C1] ? do_softirq+0x11f/0x1e0 [ 394.869458][ C1] ? __local_bh_enable_ip+0x1be/0x200 [ 394.869473][ C1] ? wg_packet_tx_worker+0x5ef/0x810 [ 394.869496][ C1] ? process_scheduled_works+0xac3/0x18e0 [ 394.869513][ C1] ? worker_thread+0x870/0xd50 [ 394.869530][ C1] ? kthread+0x7b7/0x940 [ 394.869551][ C1] ? ret_from_fork+0x4b/0x80 [ 394.869568][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 394.869598][ C1] ? __copy_skb_header+0xa7/0x5a0 [ 394.869618][ C1] can_send+0xa05/0xe60 [ 394.869642][ C1] ? __pfx_can_send+0x10/0x10 [ 394.869662][ C1] ? skb_clone+0x240/0x390 [ 394.869679][ C1] ? can_can_gw_rcv+0x3c1/0x1070 [ 394.869696][ C1] can_can_gw_rcv+0xde7/0x1070 [ 394.869715][ C1] ? __pfx_can_can_gw_rcv+0x10/0x10 [ 394.869729][ C1] can_rcv_filter+0x11c/0x7f0 [ 394.869750][ C1] ? can_receive+0x1b8/0x440 [ 394.869769][ C1] can_receive+0x314/0x440 [ 394.869787][ C1] ? can_receive+0x1b8/0x440 [ 394.869809][ C1] canfd_rcv+0x144/0x260 [ 394.869827][ C1] ? __pfx_canfd_rcv+0x10/0x10 [ 394.869846][ C1] __netif_receive_skb+0x2ea/0x670 [ 394.869871][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 394.869907][ C1] process_backlog+0x664/0x15c0 [ 394.869932][ C1] ? process_backlog+0x33d/0x15c0 [ 394.869960][ C1] ? __pfx_process_backlog+0x10/0x10 [ 394.869982][ C1] ? __lock_acquire+0xad5/0xd80 [ 394.870001][ C1] ? do_raw_spin_lock+0x151/0x370 [ 394.870025][ C1] __napi_poll+0xcb/0x480 [ 394.870049][ C1] net_rx_action+0x89d/0x1240 [ 394.870085][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 394.870107][ C1] ? __run_timer_base+0x17a/0x8e0 [ 394.870153][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 394.870193][ C1] handle_softirqs+0x2d6/0x9b0 [ 394.870216][ C1] ? do_softirq+0x11f/0x1e0 [ 394.870234][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 394.870257][ C1] do_softirq+0x11f/0x1e0 [ 394.870273][ C1] [ 394.870278][ C1] [ 394.870285][ C1] ? __pfx_do_softirq+0x10/0x10 [ 394.870304][ C1] ? wg_packet_tx_worker+0x25f/0x810 [ 394.870330][ C1] ? lockdep_softirqs_on+0x144/0x1d0 [ 394.870348][ C1] __local_bh_enable_ip+0x1be/0x200 [ 394.870365][ C1] ? wg_packet_tx_worker+0x25f/0x810 [ 394.870390][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 394.870411][ C1] ? wg_packet_tx_worker+0x25f/0x810 [ 394.870437][ C1] ? wg_packet_tx_worker+0x25f/0x810 [ 394.870462][ C1] wg_packet_tx_worker+0x5ef/0x810 [ 394.870492][ C1] ? process_scheduled_works+0x9cb/0x18e0 [ 394.870510][ C1] process_scheduled_works+0xac3/0x18e0 [ 394.870547][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 394.870572][ C1] ? assign_work+0x367/0x3d0 [ 394.870594][ C1] worker_thread+0x870/0xd50 [ 394.870623][ C1] ? __kthread_parkme+0x1a8/0x200 [ 394.870646][ C1] ? __pfx_worker_thread+0x10/0x10 [ 394.870666][ C1] kthread+0x7b7/0x940 [ 394.870690][ C1] ? __pfx_worker_thread+0x10/0x10 [ 394.870711][ C1] ? __pfx_kthread+0x10/0x10 [ 394.870732][ C1] ? __pfx_kthread+0x10/0x10 [ 394.870754][ C1] ? __pfx_kthread+0x10/0x10 [ 394.870777][ C1] ? __pfx_kthread+0x10/0x10 [ 394.870799][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.870816][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 394.870836][ C1] ? __pfx_kthread+0x10/0x10 [ 394.870859][ C1] ret_from_fork+0x4b/0x80 [ 394.870877][ C1] ? __pfx_kthread+0x10/0x10 [ 394.870900][ C1] ret_from_fork_asm+0x1a/0x30 [ 394.870925][ C1] [ 395.682528][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 395.689431][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-syzkaller-00177-g8c941f14a694 #0 PREEMPT(full) [ 395.701255][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 395.711344][ T31] Call Trace: [ 395.714637][ T31] [ 395.717589][ T31] dump_stack_lvl+0x241/0x360 [ 395.722305][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.727544][ T31] ? __pfx__printk+0x10/0x10 [ 395.732165][ T31] ? vscnprintf+0x5d/0x90 [ 395.736518][ T31] panic+0x349/0x880 [ 395.740441][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 395.745865][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 395.752055][ T31] ? __pfx_panic+0x10/0x10 [ 395.756487][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 395.761885][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 395.767275][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 395.773457][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 395.779643][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 395.785835][ T31] watchdog+0x1097/0x10a0 [ 395.790192][ T31] ? watchdog+0x1ea/0x10a0 [ 395.794649][ T31] ? __pfx_watchdog+0x10/0x10 [ 395.799345][ T31] kthread+0x7b7/0x940 [ 395.803444][ T31] ? __pfx_watchdog+0x10/0x10 [ 395.808151][ T31] ? __pfx_kthread+0x10/0x10 [ 395.812771][ T31] ? __pfx_kthread+0x10/0x10 [ 395.817394][ T31] ? __pfx_kthread+0x10/0x10 [ 395.822008][ T31] ? __pfx_kthread+0x10/0x10 [ 395.826628][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 395.831842][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 395.837058][ T31] ? __pfx_kthread+0x10/0x10 [ 395.841686][ T31] ret_from_fork+0x4b/0x80 [ 395.846117][ T31] ? __pfx_kthread+0x10/0x10 [ 395.850730][ T31] ret_from_fork_asm+0x1a/0x30 [ 395.855535][ T31] [ 395.858893][ T31] Kernel Offset: disabled [ 395.863220][ T31] Rebooting in 86400 seconds..