last executing test programs: 2.874896167s ago: executing program 3 (id=1667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 2.778630421s ago: executing program 3 (id=1670): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)={0xd8, 0x3c, 0x107, 0xfffffffc, 0x0, {0x15, 0x7c}, [@typed={0xc2, 0xa3, 0x0, 0x0, @binary="0e6e4c1c6a423a4a46c388bdb01dd17b4ef6f1c047806a729fa3de8aced4be38b1f6e2d35c42fec943972de5e57db2cb53dd22a5ada82b6eea2d5351ff4295f6608b16fffa11033eb520b959b059b5367aa40ceb0be362c54638590a1a3e2f9931992582197d9368958f65df7035ed066118015998f5481597b719cbd2498888711f13fd4cf2ecdf45265335ee9ef9e47640cb6760629c41c8c72618253d7445ee1f784ea6c4439ba5ac3128480a44ee9ee00baa848ad06f824822b8a47d"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000600)='ns/net\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3) sendto$inet(r3, &(0x7f0000000340)="51de3d421ee68d14c26bf7d21e5c4ebf", 0x10, 0x8040, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r7, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f0000000040)=0x20, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r9, @ANYBLOB="0a000600080211000001000030005080110001004abee33917f8eef16f162471f400000005000200020000000800030004ac0f"], 0x58}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)={0x1f4, r4, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_IE={0x1d3, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x2, 0x4}}, @dsss={0x3, 0x1, 0x99}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb6, 0x10}}, @challenge={0x10, 0x1, 0x5d}, @perr={0x84, 0xc4, {0xbd, 0xe, [{{}, @device_a, 0xb, @void, 0xf}, {{0x0, 0x1}, @device_b, 0x6, @value=@device_b, 0x2a}, {{}, @device_a, 0x64f, @void, 0x2e}, {{}, @device_b, 0x5, @void, 0x1c}, {{}, @device_b, 0x7, @void, 0x5}, {{}, @device_b, 0x9, @void, 0xa}, {{}, @broadcast, 0x3, @void, 0xe}, {{0x0, 0x1}, @device_b, 0x2, @value=@broadcast, 0x31}, {{}, @broadcast, 0x0, @void, 0x23}, {{}, @device_b, 0x200, @void, 0x25}, {{}, @device_a, 0xc, @void, 0x25}, {{}, @device_b, 0xd8, @void, 0xa}, {{}, @device_b, 0x9, @void, 0x7}, {{}, @device_b, 0x4, @void, 0x5}]}}, @channel_switch={0x25, 0x3, {0x1, 0x5}}, @random={0x1, 0xf1, "744172e54b3e6f10106d4ada956f28ba986e3f77656d9804590659dda02ae3979cbc1a3d19fca6a6ac67bc9f238bc584cb6ad56f6b2678f517d89bdf7cede7f66d248d093a69a1d00f000c0cabe1b02dc0c76fad048e2971698043f19473d95bd8bc1e58133698e0b45b7efcbe3e8da1616243afa482a08cb672dde3bb836d9312b1d63fc2c83977959a76212745cc048c06be38ba8fd3578c809cef1cba33e5cd89291e22f86642e1e904eaedb14524edbe13161a647f93e773d53f0e0433f7690e5eb0173c576af1f0f931de56c08e54347a20489dc43ab5114c4c23686388657a181c4a714e8b8b14c5ba7bd40ec3ee"}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x840}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080), 0x4) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x40800) 1.388256357s ago: executing program 3 (id=1683): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xc4}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4}, 0x57) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) (async) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x2, r6}, 0x10) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) (rerun: 64) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0xfffffffc, {0xa, 0x0, 0x0, 0xfe}}, 0x18}}, 0x0) (async) getsockopt$inet6_buf(r8, 0x29, 0x4, 0x0, &(0x7f0000000340)) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETCARRIER(r11, 0x400454e2, &(0x7f0000000100)=0x1) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) (async) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000009010994423fd8232aa00000008000300000000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r7], 0x80}}, 0x0) 1.383000904s ago: executing program 0 (id=1687): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a00", @ANYRES32=0x0, @ANYBLOB="9d218d11a3c9a859e3199b8d705deb34e93fab28fa5e1a17edc6f6ce04397a7f07098ac6f1a38e9f0564b76effebc31c21e51c5ef4717b4a7358a374"], 0x1c}}, 0x20000086) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x101, &(0x7f0000000100)={&(0x7f00000016c0)=ANY=[@ANYBLOB="300000002100020004000000ffdbdf250280100705009c4f71bbca88ed511f0008000000000c000c400000000000001e6e00000100ffffffff"], 0x30}}, 0x0) close(r0) getgid() socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x470, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x440, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0xfffffffb}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x94}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x7, 0xfffffff6, 0x1, 0x15, 0x12, 0x20, 0x5}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x800}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x470}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000007c0)=0xc) getgid() socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6(0xa, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x4) socket$isdn_base(0x22, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000000206250000f3531271312a00000000000000000000000c00078008000800000000080500040001000000050001000700000005000400000000000900020073797a31000000000500"], 0x4c}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={0x0, 0x80}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmmsg(r7, &(0x7f00000000c0), 0x2c8, 0x0) 1.380882841s ago: executing program 3 (id=1690): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x48}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002c0001000000000000000000020000800c000000000000000000000014"], 0x114}], 0x1}, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500002800660000000690786401019a0000000000000022", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02fffe90780000"], 0x0) 1.379926902s ago: executing program 4 (id=1691): r0 = socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20008000) (async) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x4, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b704000000000000850000004600000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000870000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x90) 1.265359998s ago: executing program 1 (id=1692): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) (async) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="580000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b000100697036746e6c0000280002800500090000000000050004008000000014000300ff"], 0x58}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="580000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b000100697036746e6c0000280002800500090000000000050004008000000014000300ff"], 0x58}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) socket(0x2, 0x80805, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={r5}, &(0x7f0000000040)=0x8) sendmsg(r2, &(0x7f0000000400)={&(0x7f0000000000)=@llc={0x1a, 0x323, 0x9, 0xfd, 0x8, 0x7f, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)="55ddaab010404edab4fe4df62e5120246cc66a285e9151e4b0110b059b7ac801128adb347aae7ed95f542d0395ecb03f9a35d8c1af", 0x35}, {&(0x7f0000000100)="d32954", 0x3}, {&(0x7f0000000140)="6422e7988ea9a94f8a4e2efab4f7f9a9cc22cc0345c6c798a4ef23ffdaf6ebcbbeb6a7e4b04cfaadd0", 0x29}, {&(0x7f0000000280)="469dbc6ec44573a9f07da7337e9ca40de0f5af179f1fd4ffd0d068498464a468f84a0fd2313726e388707611c43100743f523cc97482c45ea7aec073f14f5b07a16df4164cc200b7ca534ed95472b12735ded5a4bb23c5fedf0ff6f9cedd6c07f86c25207317d0f08110a0048e546dbdda32a440df1e8f6f1226d947483bfcb51ae9489bb94471ecdd9cf92dbd94e42a8c902b85dd0019d1b7c85babb7463fb13757f786a8d52b75c3346ed58dd238ad87330942df69fef9c77d3d5616a7d2d64e55344c2308d88905c3cc10865d271c", 0xd0}, {&(0x7f0000000180)="c83923286f1854ca742ea5dab1cb4c0d9bb76a69de1ff54d97a2c931f6a101761b46365181cc40de9544e386fc2dc391d42832754e8f01b7cc95b70984167618b3b211951d974e81c299ea2471d20fb7b56d7c69ba324b4f7e376584e72a775039956ebf2b349e65fc75da0e5394380c698cb4227e93b61783ed4d6f3beaa23537315632772e819892575d75dcf766b0abfb5739bb467df00622bc6a667484efcd72423a79c44fb0350d1d1ed5", 0xad}, {&(0x7f0000000500)="1c34b3243ae9a384f6987add84d0770f58c42ec2b8b905c8b9221a1559fb008fbb8cee6282ca91c3f212915c66c52761b314c3f72fe28a5e2cc66b7e2ed4cb0e54f0f83fbe64325772340a93e2b7cda975783ce65e5ea987891fbe01c796e003e8956866fe54c03306cbd804acfe56f3c5d00d47148e2f369c7156c77eedd053973fb2fcbbaa2bd1307af5f49102c93e59d53abd508209af35a5f40c3788ac62c8f24d466edf462cc5c56d14799441381cd75415f764db9ad9cd655f38de23211c", 0xc1}], 0x6, &(0x7f0000000880)=[{0x18, 0x3a, 0xf7, "cb1f3398"}, {0xb8, 0x109, 0x0, "11fa7da50023f5d6b5162efc6b56d2a77d4fcacf56098caec7756bc62562b1835621049825c2e93a6175660d915d2705dc369ef811cce8a9177545f4817ff1c58e5c1ac4e68c0b08de1d2cd4424a38d0a44bde52ed4191c08b92d07f9954d3ea48d5cbe5b47840838fec8134295861780ced737f6851e53d7a9fae30c0aecbff6963b9e928c3fa58d6451d03e88d58c166e1e8af3a1dc6b06bea4c0a893b03f6dd9c9bfc820a"}, {0x108, 0x10f, 0x2, "1333013eacc438e781e8d74ccb43e736156162aec4c2144e1a3592cd11aef035759ceb1abc5ec2aabb5b6ba01ee0c5a2dcef86413234edb2723da3fe5c013a553f6753ade23f45d1917ced729507abdb542cfd958227d3815af99e577b342bf159c30c13c3977276984e01536d3d65895ceacc34898854dc2cffdaefad4fda01bdec90c4c45a614f37d64f74602696336e68eac177a582ff2d05c3b4306c2126fdbfb24d3c150ea49a367ba1b03ab1e87b9fa2170e33bf82c7ad4e3ae50dd8c3b8ba17055e78c8f1b89c099f09f26b229440a098b951f56934131a8bb49026db582d917ca2e2c8c211f960335de38de87cf2cf4b3105"}, {0x78, 0x1, 0x2, "aaf260922b6594a629cb2feed8d81ac04b032c40fc10f7905ab5f26b2e831191ac8e9d480c226b9bd73af49494a78ef41e0b055218111ff6b086336f4c1d36b968adfccd55c164234ee4936b7d49d18eec7f1950698c6b17010b71e10497d0ea352a67bae5"}, {0xf0, 0x104, 0x4, "8db94c105281a2de9e3c5ebb15cc017f9da5343fe22cee64efb5f9653a288c73fc1e1a4d03c8b6569858236e295caba69bff8d9c83934234e6e67bfbe16a081233217a65b27131ebc3bbc932e6f783e12e38466ff8219ae187f73274739d97902fe4bc523dc747b329661eaa9bfd30f747583239b265a2fb0ddf79079b0aa555b43773f27708aeeaa7df3ecda27d95b332335b45bd8dc2c53a1c74fd15fe4339ab3a75d7140b6ce82393abff5946395026adbf829492e24d712f08e6b31afa837af46678c60c067a42e1f53edc22ed68f4d507ba3f70dfc28be1fd90bdab5014"}, {0x10, 0x84, 0x4}, {0x110, 0x116, 0xd22, "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"}, {0xd0, 0x0, 0x777d777, "d50c32cfa3f24587c1357d7a74e9e0e54ee9962b87adde63a6e77357602ff780dfd13afe202c174af82d4b0d0a8afacb347c3defbbc0c4750b0df1cf317dc231bdae2489f48527999b02f3bc252fb70923ddea7b8fcd31627af623b4b907800fcb2881e4e1ced2e9a1a3fbb27159e8a7e7e5662c08eb0c4aaf3674b768697849cdeec1ef0d6fe0f0b6672f63f34dc787f38bce89a30e8399401a5feecdd99d326078db0d4f1041d700bd5db77641ce94edd2d43cbf5ddf4c7ab4"}], 0x530}, 0x800) 1.194756581s ago: executing program 2 (id=1693): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6015690900442f00fc0200000000000000000000000000000000000000000000000000000000000124"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000280)={'nr0\x00', @local}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0xa9f8}, 0x94) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) (async) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pI4 \x00'}, 0x20) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xfff8}, {0xffff, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c044}, 0x40) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xfff8}, {0xffff, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c044}, 0x40) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) (async) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x4, '\x00', r6, r7, 0x4, 0x1}, 0x50) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000340)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x18}, @loopback, 0x4, 0x2, 0x3, 0x400, 0x7c4, 0xa00308, r6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000006c0)={"cac712e535879f06e7caf5949fd5094d", 0x0, 0x0, {0x9, 0xc25}, {0x0, 0x5}, 0x7f, [0xf9, 0x1ff, 0x7, 0x1, 0x7, 0x8, 0xfffffffffffffffa, 0x6, 0x0, 0x4, 0xbf7, 0x5, 0x4, 0x0, 0x9, 0x8]}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000300)=r8) 1.117503755s ago: executing program 3 (id=1694): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020002000003be8c5ee17688a8006c00030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xb8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r5}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r5}, @ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x90) 1.11110935s ago: executing program 4 (id=1695): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x40c89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}]}, 0x38}}, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000043c0)={@empty, 0xe, r1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r5, 0x1, 0xb, 0x0, &(0x7f0000000280)) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0) 956.279481ms ago: executing program 1 (id=1696): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=@allocspi={0x158, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@private2}, {@in6=@remote, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x400}, 0x0, 0x5dfe}, [@replay_thresh={0x8}, @tmpl={0x44, 0x5, [{{@in=@private}, 0x0, @in6=@rand_addr=' \x01\x00'}]}, @srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x158}}, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000940)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14) shutdown(r2, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006140)=@delchain={0x2c, 0x65, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {}, {0xb, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) getsockopt$bt_hci(r2, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@delsa={0x34, 0x11, 0x2, 0x70bd29, 0x25dfdbfe, {@in=@multicast2, 0x4d4, 0x2, 0x33}, [@offload={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x8808}, 0x20044000) 955.460336ms ago: executing program 0 (id=1697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb00000000000000000000000032fcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_TUPLE_ORIG={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a4c000000090a010400000000000000000a0000020900010073797a3100000000080005400000001d0900020073797a31e1ff000008000a4000000000080003400000001408000c40008000031400000011000100"], 0x74}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYRESOCT=r0, @ANYRESDEC, @ANYBLOB="00007efbf261693bcb6a1f49d64d000002000000000020000000", @ANYRESOCT, @ANYRESOCT=r3, @ANYBLOB="01000000000000000000000000000018ba7c74337724197182784d0000000000000040000000000118fde7ad2d0591bf779791486af4cdfe77ebedff150e505ee24d91aec0ba8acef9750b40ebdb2bccaf25772e457958833966e9ea301b97f1362066d49e1fa5526612eafaa9b32e95e4d87f1f26a12a8c430e3bad90efccda8bda332e92b854c00c56fae84d9fb663bedb4c0c92a593cc37e099795a07fda75e99d4c5148505e8ac1d44d09dd2147a9333488607a9a4ffb8cc7753b09fb8b3", @ANYBLOB="5185e1e37c89779f740c96cabaae64db12fbea0e2bedfbc5666253616d7203a8b69137fa0cb814418abf6c5ec7fe1b4193a04399dcbbf340b37a9cfffb5924eecbf9832725a29a03c6d0b672fe18a4d7a102c0ab6e6cbc529b153d205bd2a2d55342c9e31c69fd8ad0491acbd0551ffbf865ac04c70bd1db9eb97850d436390c45bcfd3bbefd8bdcb38ecbfe4c46f3d885af3a1d7a0cefa8ef52801e5245febbea51479ee84d481b9afdd67b34cf6bd280d68079e4755fa5e31b2b4361db4070827e6d5ad6a4a73dc63e862dda54edadb1e785fb0531c7749beb17ebac6250eb18713df71123885b8d1cbe46d84a2a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8f7ffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000002000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x5}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) 948.106935ms ago: executing program 3 (id=1698): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, 0x0, &(0x7f0000000500)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000440)={0x1, 0xd1, @start={0x0, 0x1, "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", "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"}, [0x7, 0xf10, 0x3ff, 0x4, 0x9d, 0x8, 0x3e, 0x81, 0x2, 0xffff, 0xffffffffffffffff, 0x4, 0x3, 0x75, 0x400, 0x6, 0x1, 0x8000, 0x0, 0x6, 0x2, 0x9, 0x7, 0x7, 0x8000000000000000, 0x4, 0x9, 0x7, 0x0, 0x7, 0x2, 0x0, 0x4, 0x8000, 0x8, 0x2, 0xffffffffffffffff, 0x7, 0x4, 0xffffffffffffffff, 0x7, 0x4, 0x1, 0x4, 0x0, 0x0, 0x6, 0x5, 0xe46d, 0x8000000000000000, 0xffff, 0x2, 0xd2, 0xb, 0x400, 0x5, 0x5, 0x5, 0x3, 0x2e7, 0x8, 0x800000000000000, 0x5, 0x2]}) socket(0x14, 0x2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001600010000000000000000000a0400000000000014000100ff010000000000000000000000000001150002"], 0x44}}, 0x0) 933.483861ms ago: executing program 2 (id=1699): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000480)={0xffff1a47, 0x40000000, 0x10000, 0x9, 0x9}, 0x14) 470.726956ms ago: executing program 2 (id=1700): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x1c, 0x8, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWFLOWTABLE={0x68, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0x3c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xf8}, 0x1, 0x0, 0x0, 0x4820}, 0x10) 470.193785ms ago: executing program 0 (id=1701): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r3 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) sendfile(r2, r3, &(0x7f0000000140)=0x1, 0x7) sendfile(r1, r1, 0x0, 0x7ff) unshare(0x4000400) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ppoll(&(0x7f0000000080)=[{r4, 0x2000}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 468.605763ms ago: executing program 1 (id=1702): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYRES32=0x0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000040)=0x84) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, 0x3c, 0x107, 0xfffffffc, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x136}]}, 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) mmap(&(0x7f000031f000/0x4000)=nil, 0x4000, 0x0, 0x10, r5, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}, {}, {}, {0x6, 0x3}]}) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000008c0), 0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r4, r0, 0x4, r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 467.558315ms ago: executing program 4 (id=1703): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa2}}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x67}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa}]}}}]}, 0x48}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000140007800800080000000000080006400000000005000100060000000505000200000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e657400000000"], 0x64}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0xec, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xcd, 0x6, "7ddac0d543b320a457ad4b7dde071b18d8c8a5622c75cabb5f8469e84fe872f4e8033f87e3e5d9630da9a4750e8bddc7e0d84eb726bcd3817a96a0d768abe0b4ae996af38ad4b5481eef1b377fd200c363ec37a673ed81468d2aa5bccbc94c2c1e738ed29027b4d81157ed038bee10af6d4dc946861555a020f11963082e2e2162441cd547cfcaf7eb3173eba3b55bfe3c7e1c5d55d070b9a53e38b22a19ef8c1fc3dfd38acd44c90c15fb6220b6db99fd707c229ed84f752e621b7ee5d40d9719b24ac043fe1130bf"}]}, @NFT_MSG_DELFLOWTABLE={0x54, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x168}}, 0x28010804) 464.13074ms ago: executing program 4 (id=1704): r0 = socket(0x40000000015, 0x805, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000000)={0x24, @short={0x2, 0x1}}, 0xb) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x44}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810) 463.788764ms ago: executing program 0 (id=1705): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000002c00000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x8, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000080)=""/12}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r3, 0xc08ba000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r2, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r4}, 0x10) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f00000002c0)={0x9, 0x7f}) 374.156107ms ago: executing program 2 (id=1706): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}}, 0x20}}, 0x0) 364.316931ms ago: executing program 1 (id=1707): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000080)=0x80, 0x800) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x553d2757, 0x27}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x954}]}, 0x1c}, 0x1, 0x0, 0x0, 0xb6b92690a86208c8}, 0x408d0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x121400, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000380)={0x0, 0x7, [@remote, @broadcast, @broadcast, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @multicast]}) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000003c0)=0xe, 0x4) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000400)={'team_slave_0\x00', 0x300}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000440)={'dvmrp1\x00', @broadcast}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x68}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x40}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000005c0)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x306, @local}, 0xc, {0x2, 0x4e22, @private=0xa010100}, 'ipvlan0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x309800, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000700)={0xa, &(0x7f0000000680)=[{0x101, 0x1e, 0x5, 0x3}, {0xbb, 0x8, 0x5, 0x8}, {0x7, 0x3, 0x5, 0x4}, {0xfeff, 0xfc, 0x80, 0x4}, {0x1, 0x4c, 0xff, 0x800}, {0x7ff, 0x7, 0x5, 0x10}, {0x1, 0xe8, 0xe, 0x1}, {0x8, 0x6c, 0x7, 0x3}, {0x6, 0xd, 0x7, 0x32}, {0x4, 0x81, 0x6, 0x6}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xffff, 0x29}}}}, [@NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x3, 0x1}, {0x3, 0x6}, {0x46}, {0x4, 0x2}, {0x9, 0x3}, {0xa6, 0x3}, {0x7, 0x1}], "08d2c31494773be0"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x9, 0x2}, {0x10, 0x3}, {0x4, 0x5}, {0x6c, 0x6}, {0x8, 0x6}, {0x0, 0x1}, {0x1, 0x4}, {0x7, 0x2}, {0x8, 0x2}, {0x8, 0x2}, {0xc3, 0x7}, {0xff}, {0x6, 0x7}, {0x6, 0x7}, {0x3}, {0x7, 0x4}], "b83aa327929d394b"}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4014}, 0x20000004) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000008c0)={@any, 0x2, 0x1, 0x200, 0x5ba0, 0x6a76, "dd580ac5d286dacb6f4b39b55f9a97598dd8a23f87e4d0bca7fa5018523f62af134503ba5becf7e00786ab0646474dc6754e378913633cd3b807c708d00e314f5e4e89b5b95363d69ac31ac75eb6ac99f7d95ad3b5222342d13ec1302884086623f6a01c9f2a3a5a45e783802bcdb89e63dd25d9b83cb391a8a6986f823c2ab1"}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r5, 0xf505, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x208}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008071}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x3ba582c7d511aca1, 0x8001, 0x6, 0x3ff, 0x48, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000c00)={'batadv_slave_1\x00', 0x0}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c40)=0xffffffffffffffff, 0x4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x10, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x8000}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x5, 0x9, 0x8, 0x4, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0xc, 0xa, 0xb, 0x1, 0xfffffffffffffff7}, @alu={0x4, 0x1, 0x5, 0x8, 0x1, 0x8, 0xffffffffffffffff}, @alu={0x7, 0x1, 0xc, 0x8, 0x0, 0xfffffffffffffffc, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xf}]}, &(0x7f0000000d40)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000dc0)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000e00)=[{0x0, 0x3, 0xe}], 0x10, 0x5}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000f00), &(0x7f0000000f40)='%pS \x00'}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@bloom_filter={0x1e, 0x3, 0x4, 0x8, 0x14010, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3, 0x7}, 0x50) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001100)=@generic={&(0x7f00000010c0)='./file0\x00', 0x0, 0x10}, 0x18) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1d, 0x9, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x0, 0x1, 0x1, 0xa, 0xa, 0xffffffffffffffff, 0x1}, @map_val={0x18, 0x2, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000b80)='GPL\x00', 0x800, 0x15, &(0x7f0000000bc0)=""/21, 0x41000, 0x1c, '\x00', r8, @fallback=0x34, r9, 0x8, &(0x7f0000000c80)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r10, 0x0, &(0x7f00000011c0)=[r11, r12, r13, r14, r15, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) 335.58329ms ago: executing program 4 (id=1708): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000240001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000007079000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000003e54432eb690cea40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b7b8b40bdcc98132753fc08d2cd741cf3528a1b49a2f22"], 0xb8}}, 0x0) 326.048457ms ago: executing program 0 (id=1709): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x7, 0xe7) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344}, 0x0, 0x6) syz_emit_ethernet(0x169, &(0x7f0000000100)={@link_local={0x3}, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x3b, 0x4, 0x2, 0x6, 0x157, 0x66, 0x0, 0x9, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0x17, 0x35, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}, @empty]}, @timestamp_addr={0x44, 0xc, 0x1e, 0x1, 0x6, [{@local, 0x4}]}, @timestamp_prespec={0x44, 0x1c, 0xc2, 0x3, 0x3, [{@loopback, 0xfffffff9}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa}]}, @generic={0x94, 0xd, "31d576a6dc56be20f990d5"}, @cipso={0x86, 0x6b, 0x0, [{0x5, 0x3, "d7"}, {0x5, 0xb, "68a938176fd7f471de"}, {0x2, 0xf, "3c3f7be80bf2994afcf2ec760d"}, {0x6, 0xc, "2e317e3377bdfe189011"}, {0x6, 0xe, "a38ee6619b96aa87f8e2254c"}, {0x7, 0x9, "549340b0556eef"}, {0x5, 0x10, "298632c3e593a6e27d2313635f9e"}, {0x0, 0xa, "2341631deb3e9020"}, {0x7, 0xb, "e8537ce4a94ccc17ad"}]}, @rr={0x7, 0x7, 0x42, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x17, 0xc3, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast2, @empty]}]}}, {{0x4e23, 0x4e20, r0, r1, 0x0, 0x0, 0x8, 0xc2, 0x9, 0x0, 0x5, {[@mptcp=@mp_join={0x1e, 0x3, 0x2}, @fastopen={0x22, 0x6, "b43251b9"}]}}, {"27f9cba6d668a93b8da4db0450f334d4bccc03c88d092e29f60a5f0376265e8d69221fd625bae08d11cf4f3a28d1c69bf25def75e756b7334d05c6da292c26cf77f1c682c5c656151f0dfa"}}}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) 281.438828ms ago: executing program 2 (id=1710): r0 = socket$nl_audit(0x10, 0x3, 0x9) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x810) (async) sendmsg$netlink(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000000)={0x10}, 0x10}, {&(0x7f0000000100)=ANY=[@ANYBLOB="10000000ed03"], 0x10}], 0x2}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xcac, 0x0, 0x0, 0x9, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x11, 0x8, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 166.969782ms ago: executing program 1 (id=1711): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x19, 0x4c}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x49, 0x10, &(0x7f0000000000), 0x3}, 0x28) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="6c0900000600"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) 150.191311ms ago: executing program 0 (id=1712): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x6) getsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000840), &(0x7f0000000880)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x4}]}, 0x34}}, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x11, 0x25, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000044000000090a090400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000031080003400000000114000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0500000006000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r5, 0x0, 0x0}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xffff0f00}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x0, 0x0, 0x6, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x20) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x14, 0x1, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4008004}, 0x8000) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000040)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x7a}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r8, @ANYBLOB="e7b9aa"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20024090) 108.000601ms ago: executing program 1 (id=1713): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={r5, 0x44e9}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000002c0)={r5, 0x0, 0x67, "759f73a076abad5c9159629b156722cd06448793b4a147bbe2e47c66956e430d6cbc16890c3d5cc307554eee7dca9581b70ee06da22d5c11cd649fad9da723617f22c3054fcf6204f3ffd1b6e51514cce8e2631d376bae7a849a6675ba544aa50f2a6a815a5fc9"}, 0x6f) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0xb635773f04ebbeec, 0x11171, 0xffffffffffffffff, 0xa1679000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x4, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}}}]}, 0x48}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x20, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r9, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r10) sendmsg$NLBL_MGMT_C_ADD(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="0000000041d110b0b97c0db192ee77ff3cb92d5fae6a1137eae16fd62706a5ffa424b8edee39ecef6e11e633f51acb3232583f7ef9c4ffbc9d0a5d4636043f3002445c4f02926d341bfb0aa6055cbd612120c11f0ebe5774d58e9b37f8cdc3d8088d163991d878dcbf91de86796b9273dd4498661db4ae9e57ee348ae32ba079707e0106190cda0b059486acf38996cc87798f35b4dec220b4ad5f0a7683500fc8aa8608fad55f72e6bbc038b5d7443bc335e8176b", @ANYRES16=r11, @ANYBLOB="cd3e0000000000000000010000000800020000000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd2679204020b006f64e62cd3404917f3be657330adc6bf2f2ab6286f917412935536f4406edcdc8a3779814659bebb63d2c301a5e2568cb3696d7ed256da47bd6246c86e86ac9cfbdae22622b43a13e9096385b4cb17bf6d8436e77f709e436462ad3ba28f73bf36e8e358673326e220d60a9d3d7e3c932faf89062b965db52beeff385e442adbb8d87480d48f4b3d4530e85283000008000800ac1e0001"], 0xf4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="b80000001000030404000041802a8ec951000000000100000000c6d2ae8c8d3501f1c89a502416c3d3e9bde5888df4d6a9b3ae6a97b28330836e1c020fae2394eff2afcd84dad38fb5f0e3f2720f3896a046a1f4f81a4e9d813cf8b1", @ANYRES32=0x0, @ANYBLOB="3502000081280000900012800b000100697036767469000080000280080003000001000008000100", @ANYRES32=r6, @ANYBLOB="14000400fe80000000000000000000000000001714000500fe880000000000000000000000000001080006000700000008000100", @ANYRES32=r9, @ANYBLOB="08000300d346000014000400fc0100000000000000000000000000010800030008000000080002000900000008000200f8ffffff08002c0000000000"], 0xb8}, 0x1, 0xba01, 0x0, 0x4008080}, 0x40000c0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x802, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}}, 0x4) r12 = socket(0x10, 0x3, 0x0) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r13, 0x0, 0x2, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bf7b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 34.901902ms ago: executing program 2 (id=1714): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x11, 0x3, 0x8, 0x0, 0x5, 0x2, 0x1, 0x2, 0x6}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048000}, 0x20004000) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$qrtr(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) 0s ago: executing program 4 (id=1715): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a000700726f75746500"], 0x1ac}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"51c7051d9bb1e20f0feab722a1aefe06", 0x0, 0x0, {0x40, 0x4}, {0xd, 0x7fffffff}, 0xb538, [0x6, 0x70, 0x0, 0x9, 0x3, 0xfffffffffffffffe, 0x9, 0x0, 0x17, 0x9f, 0x9, 0xb61, 0x10, 0x4, 0x4, 0xea]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000840)={{r0}, r1, 0x8, @unused=[0x0, 0x4, 0x2, 0x4], @name="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"}) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x86}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private, 0x1000000}, {@private}, {@broadcast}, {@dev}, {@private}, {@empty}, {@private}]}]}}}}}}}, 0x0) (async) close(r3) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r4, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000140), 0x4) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) accept(r3, 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) (async) socket$unix(0x1, 0x5, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.147' (ED25519) to the list of known hosts. [ 95.844809][ T5849] cgroup: Unknown subsys name 'net' [ 96.023028][ T5849] cgroup: Unknown subsys name 'cpuset' [ 96.032725][ T5849] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 97.816808][ T5849] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.465341][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.477657][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.486655][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.494897][ T5868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.503150][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.518839][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.539560][ T5868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.562276][ T5868] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.576868][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.585089][ T5877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 102.586980][ T5869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.595043][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.601008][ T5869] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.617160][ T5869] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.617843][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.625429][ T5869] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.642183][ T5881] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 102.650086][ T5877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.652350][ T5880] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.665296][ T5880] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.670878][ T5862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 102.699897][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.709425][ T5870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 102.717380][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.737370][ T5877] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 103.306411][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 103.456616][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 103.663360][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 103.677604][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.687493][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.695870][ T5859] bridge_slave_0: entered allmulticast mode [ 103.706078][ T5859] bridge_slave_0: entered promiscuous mode [ 103.714816][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 103.757119][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.764560][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.771947][ T5859] bridge_slave_1: entered allmulticast mode [ 103.779323][ T5859] bridge_slave_1: entered promiscuous mode [ 103.874663][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 103.932628][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.940063][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.947327][ T5863] bridge_slave_0: entered allmulticast mode [ 103.955325][ T5863] bridge_slave_0: entered promiscuous mode [ 103.980499][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.005618][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.013609][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.021643][ T5863] bridge_slave_1: entered allmulticast mode [ 104.029511][ T5863] bridge_slave_1: entered promiscuous mode [ 104.053638][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.177162][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.184905][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.193044][ T5867] bridge_slave_0: entered allmulticast mode [ 104.201311][ T5867] bridge_slave_0: entered promiscuous mode [ 104.211898][ T5859] team0: Port device team_slave_0 added [ 104.218065][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.225562][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.233534][ T5867] bridge_slave_1: entered allmulticast mode [ 104.241448][ T5867] bridge_slave_1: entered promiscuous mode [ 104.280533][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.309330][ T5859] team0: Port device team_slave_1 added [ 104.329506][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.336678][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.345600][ T5871] bridge_slave_0: entered allmulticast mode [ 104.353109][ T5871] bridge_slave_0: entered promiscuous mode [ 104.378144][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.422014][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.434885][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.442531][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.450226][ T5871] bridge_slave_1: entered allmulticast mode [ 104.457523][ T5871] bridge_slave_1: entered promiscuous mode [ 104.506978][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.532160][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.540019][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.547443][ T5873] bridge_slave_0: entered allmulticast mode [ 104.555808][ T5873] bridge_slave_0: entered promiscuous mode [ 104.565919][ T5863] team0: Port device team_slave_0 added [ 104.573789][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.581603][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.608560][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.647625][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.655171][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.662862][ T5873] bridge_slave_1: entered allmulticast mode [ 104.671208][ T5873] bridge_slave_1: entered promiscuous mode [ 104.680302][ T5863] team0: Port device team_slave_1 added [ 104.687015][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.694206][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.721001][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.721102][ T5877] Bluetooth: hci1: command tx timeout [ 104.737660][ T5874] Bluetooth: hci0: command tx timeout [ 104.760310][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.789460][ T5874] Bluetooth: hci4: command tx timeout [ 104.795221][ T5874] Bluetooth: hci2: command tx timeout [ 104.801611][ T5877] Bluetooth: hci3: command tx timeout [ 104.827079][ T5867] team0: Port device team_slave_0 added [ 104.836093][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.875927][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.889274][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.896501][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.922981][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.936093][ T5867] team0: Port device team_slave_1 added [ 104.972880][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.997745][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.005855][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.032842][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.060661][ T5871] team0: Port device team_slave_0 added [ 105.116187][ T5873] team0: Port device team_slave_0 added [ 105.125514][ T5871] team0: Port device team_slave_1 added [ 105.132692][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.139734][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.166972][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.184415][ T5859] hsr_slave_0: entered promiscuous mode [ 105.192291][ T5859] hsr_slave_1: entered promiscuous mode [ 105.202033][ T5873] team0: Port device team_slave_1 added [ 105.239142][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.246319][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.273293][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.406791][ T5863] hsr_slave_0: entered promiscuous mode [ 105.415920][ T5863] hsr_slave_1: entered promiscuous mode [ 105.422561][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 105.428415][ T5863] Cannot create hsr debugfs directory [ 105.435088][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.442170][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.468738][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.482128][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.489881][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.516224][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.558138][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.565251][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.592429][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.605344][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.612621][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.638931][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.812347][ T5867] hsr_slave_0: entered promiscuous mode [ 105.819328][ T5867] hsr_slave_1: entered promiscuous mode [ 105.825505][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 105.831565][ T5867] Cannot create hsr debugfs directory [ 105.886648][ T5871] hsr_slave_0: entered promiscuous mode [ 105.894323][ T5871] hsr_slave_1: entered promiscuous mode [ 105.901535][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 105.907306][ T5871] Cannot create hsr debugfs directory [ 105.963374][ T5873] hsr_slave_0: entered promiscuous mode [ 105.970968][ T5873] hsr_slave_1: entered promiscuous mode [ 105.977164][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 105.984637][ T5873] Cannot create hsr debugfs directory [ 106.393864][ T5859] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.407674][ T5859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.467970][ T5859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.498228][ T5859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.611797][ T5863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.649634][ T5863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.660292][ T5863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.686484][ T5863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.773048][ T5871] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.785914][ T5871] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.793561][ T5877] Bluetooth: hci0: command tx timeout [ 106.794218][ T5183] Bluetooth: hci1: command tx timeout [ 106.810592][ T5871] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.821659][ T5871] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.869967][ T5183] Bluetooth: hci3: command tx timeout [ 106.870489][ T5877] Bluetooth: hci2: command tx timeout [ 106.875445][ T5183] Bluetooth: hci4: command tx timeout [ 106.990432][ T5867] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.001815][ T5867] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.016019][ T5867] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.041578][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.053746][ T5867] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.141652][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.179468][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.205767][ T5873] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.218037][ T5873] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.245176][ T5873] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.259168][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.266654][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.291799][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.299017][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.321742][ T5873] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.336353][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.356572][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.363988][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.403706][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.410948][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.510739][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.562433][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.594836][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.660995][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.668292][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.686313][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.693864][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.707905][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.797023][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.804321][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.849960][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.857234][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.980430][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.108002][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.126428][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.186241][ T2122] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.193526][ T2122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.214063][ T2122] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.221336][ T2122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.314077][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.397772][ T9] cfg80211: failed to load regulatory.db [ 108.415514][ T5873] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.439374][ T5873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.581986][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.623217][ T5859] veth0_vlan: entered promiscuous mode [ 108.685689][ T5859] veth1_vlan: entered promiscuous mode [ 108.863760][ T5859] veth0_macvtap: entered promiscuous mode [ 108.871007][ T5183] Bluetooth: hci1: command tx timeout [ 108.871887][ T5877] Bluetooth: hci0: command tx timeout [ 108.886314][ T5871] veth0_vlan: entered promiscuous mode [ 108.917043][ T5859] veth1_macvtap: entered promiscuous mode [ 108.950926][ T5877] Bluetooth: hci2: command tx timeout [ 108.950945][ T5183] Bluetooth: hci3: command tx timeout [ 108.956407][ T5877] Bluetooth: hci4: command tx timeout [ 108.971328][ T5871] veth1_vlan: entered promiscuous mode [ 108.983132][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.997294][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.026379][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.066231][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.076397][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.097576][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.107766][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.157128][ T5863] veth0_vlan: entered promiscuous mode [ 109.182568][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.211153][ T5871] veth0_macvtap: entered promiscuous mode [ 109.226297][ T5863] veth1_vlan: entered promiscuous mode [ 109.251715][ T5871] veth1_macvtap: entered promiscuous mode [ 109.299330][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.312918][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.347299][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.372997][ T5867] veth0_vlan: entered promiscuous mode [ 109.407233][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.431975][ T5867] veth1_vlan: entered promiscuous mode [ 109.445737][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.455018][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.464703][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.476396][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.487239][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.517083][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.532890][ T5873] veth0_vlan: entered promiscuous mode [ 109.560501][ T5863] veth0_macvtap: entered promiscuous mode [ 109.576468][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 109.602982][ T5873] veth1_vlan: entered promiscuous mode [ 109.615107][ T5863] veth1_macvtap: entered promiscuous mode [ 109.721602][ T5867] veth0_macvtap: entered promiscuous mode [ 109.765171][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.801940][ T5873] veth0_macvtap: entered promiscuous mode [ 109.817268][ T5867] veth1_macvtap: entered promiscuous mode [ 109.834735][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.844821][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.867538][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.895798][ T5873] veth1_macvtap: entered promiscuous mode [ 109.952990][ T750] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.971294][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.004251][ T750] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.028026][ T5988] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6'. [ 110.033378][ T750] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.063494][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.072987][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.076557][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.098077][ T750] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.133177][ T750] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.174719][ T750] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.223977][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.264452][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.287380][ T750] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.326090][ T750] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.381314][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.425217][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.438338][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.454700][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.470198][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.535552][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.581709][ T5996] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8'. [ 110.615530][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.633587][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.749282][ T750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.757168][ T750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.827356][ T6005] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20002 [ 110.920131][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.948475][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.956247][ T5877] Bluetooth: hci1: command tx timeout [ 110.959532][ T5877] Bluetooth: hci0: command tx timeout [ 111.028923][ T5877] Bluetooth: hci3: command tx timeout [ 111.029188][ T5183] Bluetooth: hci2: command tx timeout [ 111.040010][ T5183] Bluetooth: hci4: command tx timeout [ 111.059975][ T2122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.064289][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.088914][ T2122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.148883][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.236973][ T6017] syz.0.12 uses obsolete (PF_INET,SOCK_PACKET) [ 111.387676][ T6021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'. [ 111.525080][ T6021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12'. [ 111.570914][ T6021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12'. [ 111.573479][ T6028] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.626434][ T6032] netlink: 'syz.1.2': attribute type 2 has an invalid length. [ 111.703026][ T6028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.705789][ T6021] erspan0: entered promiscuous mode [ 111.731253][ T6021] erspan0: left promiscuous mode [ 111.735555][ T6036] Zero length message leads to an empty skb [ 111.742172][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 111.777429][ T6034] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14'. [ 111.800205][ T6028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.818613][ T6039] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.887758][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15'. [ 111.921629][ T6028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.969611][ T6044] netlink: 14 bytes leftover after parsing attributes in process `syz.4.15'. [ 111.997746][ T6036] netlink: 48 bytes leftover after parsing attributes in process `syz.4.15'. [ 112.277075][ T6044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.326807][ T6044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.339293][ T6057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.383077][ T6044] bond0 (unregistering): Released all slaves [ 112.433261][ T6049] tipc: Started in network mode [ 112.442565][ T6049] tipc: Node identity 920e5082be5e, cluster identity 4711 [ 112.453851][ T6049] tipc: Enabled bearer , priority 0 [ 112.482579][ T6043] tipc: Resetting bearer [ 112.544227][ T6059] syzkaller0: entered promiscuous mode [ 112.589819][ T6059] syzkaller0: entered allmulticast mode [ 112.717470][ T6042] tipc: Resetting bearer [ 112.773721][ T6042] tipc: Disabling bearer [ 114.116739][ T6133] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 114.748210][ T6160] sctp: [Deprecated]: syz.0.50 (pid 6160) Use of int in maxseg socket option. [ 114.748210][ T6160] Use struct sctp_assoc_value instead [ 115.684524][ T6213] __nla_validate_parse: 6 callbacks suppressed [ 115.684546][ T6213] netlink: 24 bytes leftover after parsing attributes in process `syz.1.61'. [ 115.826846][ T6214] tipc: Started in network mode [ 115.839835][ T6214] tipc: Node identity aa697860a137, cluster identity 4711 [ 115.863614][ T6214] tipc: Enabled bearer , priority 0 [ 116.258188][ T6217] syzkaller0: entered promiscuous mode [ 116.269257][ T6217] syzkaller0: entered allmulticast mode [ 116.281966][ T6214] tipc: Resetting bearer [ 116.289369][ T6235] veth0: entered promiscuous mode [ 116.300343][ T6234] veth0: left promiscuous mode [ 116.366560][ T6204] tipc: Resetting bearer [ 116.506650][ T6223] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 116.535944][ T6204] tipc: Disabling bearer [ 116.994473][ T6259] netlink: 104 bytes leftover after parsing attributes in process `syz.4.73'. [ 117.181268][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.76'. [ 117.194064][ T6271] netlink: 2 bytes leftover after parsing attributes in process `syz.0.77'. [ 117.212080][ T6264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.76'. [ 117.231701][ T6271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.241613][ T6269] netlink: 20 bytes leftover after parsing attributes in process `syz.2.79'. [ 117.300397][ T6269] openvswitch: netlink: Flow key attr not present in new flow. [ 117.830428][ T5183] Bluetooth: hci0: command 0x080f tx timeout [ 117.960120][ T6299] netlink: 16 bytes leftover after parsing attributes in process `syz.0.86'. [ 118.311252][ T6310] netlink: 'syz.4.91': attribute type 12 has an invalid length. [ 118.587810][ T6319] mac80211_hwsim hwsim11 : renamed from wlan1 (while UP) [ 118.651202][ T6323] delete_channel: no stack [ 119.024003][ T6344] netlink: 72 bytes leftover after parsing attributes in process `syz.4.100'. [ 119.258190][ T6361] netlink: 144 bytes leftover after parsing attributes in process `syz.4.107'. [ 119.301183][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.107'. [ 119.395982][ T6369] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20003 [ 119.708486][ T6381] team0: No ports can be present during mode change [ 121.006791][ T6436] __nla_validate_parse: 3 callbacks suppressed [ 121.006813][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'. [ 121.453411][ T6442] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 121.609592][ T6458] warning: `syz.2.139' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 121.798136][ T6470] netlink: 'syz.3.142': attribute type 3 has an invalid length. [ 121.809069][ T6468] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 121.893906][ T6468] geneve2: entered promiscuous mode [ 121.909494][ T6468] geneve2: entered allmulticast mode [ 121.927408][ T49] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 121.946638][ T49] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 121.962582][ T49] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 122.007584][ T6472] pim6reg1: entered promiscuous mode [ 122.017074][ T6472] pim6reg1: entered allmulticast mode [ 122.046124][ T49] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 122.088263][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 122.218185][ T6484] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.146'. [ 122.363918][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'. [ 122.439893][ T6496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.149'. [ 122.494346][ T6495] dvmrp0: entered allmulticast mode [ 122.511101][ T6496] veth0: entered promiscuous mode [ 122.538098][ T6498] veth0: left promiscuous mode [ 122.544765][ T6496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.149'. [ 122.658947][ T6503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.151'. [ 123.429826][ T6520] netlink: 'syz.2.158': attribute type 1 has an invalid length. [ 123.458187][ T6520] netlink: 'syz.2.158': attribute type 3 has an invalid length. [ 123.509167][ T6520] netlink: 224 bytes leftover after parsing attributes in process `syz.2.158'. [ 123.529135][ T6525] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 123.552511][ T6520] NCSI netlink: No device for ifindex 0 [ 123.628253][ T6529] netlink: 'syz.1.160': attribute type 8 has an invalid length. [ 123.954918][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.165'. [ 123.996644][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.165'. [ 125.444347][ T6603] netlink: 'syz.1.184': attribute type 1 has an invalid length. [ 125.473307][ T6603] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 126.056247][ T6626] __nla_validate_parse: 4 callbacks suppressed [ 126.056269][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 126.440560][ T6643] netlink: 24 bytes leftover after parsing attributes in process `syz.0.195'. [ 127.014887][ T6665] netlink: 16 bytes leftover after parsing attributes in process `syz.3.200'. [ 127.598254][ T6690] netlink: 'syz.1.208': attribute type 5 has an invalid length. [ 128.015914][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 128.109402][ T6706] syzkaller0: create flow: hash 1881145462 index 1 [ 128.239313][ T6717] netlink: 60 bytes leftover after parsing attributes in process `syz.1.217'. [ 128.250563][ T6717] netlink: 60 bytes leftover after parsing attributes in process `syz.1.217'. [ 128.295430][ T6719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.434228][ T6700] syzkaller0: delete flow: hash 1881145462 index 1 [ 128.806576][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 129.862440][ T6750] tipc: Enabling of bearer rejected, failed to enable media [ 130.032989][ T6759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.319788][ T6773] netlink: 48 bytes leftover after parsing attributes in process `syz.0.234'. [ 130.347503][ T6773] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 130.818427][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 130.943693][ T6809] netlink: 'syz.2.244': attribute type 21 has an invalid length. [ 130.979052][ T6809] netlink: 128 bytes leftover after parsing attributes in process `syz.2.244'. [ 131.018310][ T6809] netlink: 'syz.2.244': attribute type 4 has an invalid length. [ 131.061905][ T6813] netlink: 'syz.2.244': attribute type 21 has an invalid length. [ 131.101951][ T6809] netlink: 'syz.2.244': attribute type 5 has an invalid length. [ 131.127938][ T6813] netlink: 128 bytes leftover after parsing attributes in process `syz.2.244'. [ 131.138098][ T6809] netlink: 3 bytes leftover after parsing attributes in process `syz.2.244'. [ 131.152108][ T6813] netlink: 'syz.2.244': attribute type 4 has an invalid length. [ 131.178508][ T6813] netlink: 'syz.2.244': attribute type 5 has an invalid length. [ 131.194940][ T6813] netlink: 3 bytes leftover after parsing attributes in process `syz.2.244'. [ 131.369435][ T6831] netlink: 'syz.1.248': attribute type 97 has an invalid length. [ 131.485101][ T6831] tipc: Started in network mode [ 131.508550][ T6831] tipc: Node identity 0e267fabb461, cluster identity 4711 [ 131.522599][ T6831] tipc: Enabled bearer , priority 0 [ 131.532352][ T6826] syzkaller0: entered promiscuous mode [ 131.537915][ T6826] syzkaller0: entered allmulticast mode [ 131.630842][ T6826] tipc: Resetting bearer [ 131.643888][ T6825] tipc: Resetting bearer [ 131.729496][ T6825] tipc: Disabling bearer [ 131.792692][ T6844] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 131.823122][ T6848] netlink: 16 bytes leftover after parsing attributes in process `syz.2.255'. [ 131.874359][ T6852] netlink: 24 bytes leftover after parsing attributes in process `syz.4.254'. [ 132.260858][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.260'. [ 132.365210][ T6871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.263'. [ 132.458363][ T6876] tun0: tun_chr_ioctl cmd 1074025675 [ 132.476226][ T6876] tun0: persist disabled [ 132.583685][ T6880] netlink: 'syz.0.265': attribute type 1 has an invalid length. [ 132.656376][ T6881] bond1 (unregistering): Released all slaves [ 132.668401][ T6876] IPVS: persistence engine module ip_vs_pe_ not found [ 132.829230][ T6880] bond1: entered promiscuous mode [ 132.834810][ T6880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.136163][ T6904] netlink: 'syz.1.273': attribute type 18 has an invalid length. [ 133.181859][ T2122] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.213330][ T2122] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.227257][ T2122] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.238333][ T2122] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.291398][ T6910] delete_channel: no stack [ 133.362462][ T6915] netlink: 28 bytes leftover after parsing attributes in process `syz.0.276'. [ 133.398774][ T6915] netlink: 'syz.0.276': attribute type 7 has an invalid length. [ 133.423952][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.276'. [ 133.468302][ T6919] netlink: 224 bytes leftover after parsing attributes in process `syz.3.278'. [ 134.925503][ T10] IPVS: starting estimator thread 0... [ 135.038925][ T7012] IPVS: using max 28 ests per chain, 67200 per kthread [ 135.395960][ T7027] syzkaller1: entered promiscuous mode [ 135.446341][ T7027] syzkaller1: entered allmulticast mode [ 135.502614][ T7039] pim6reg527: entered allmulticast mode [ 135.614816][ T7035] IPVS: set_ctl: invalid protocol: 43 172.30.0.2:20000 [ 135.677254][ T7035] sit0: entered promiscuous mode [ 135.706867][ T7035] sit0: entered allmulticast mode [ 136.124370][ T7063] sctp: [Deprecated]: syz.4.310 (pid 7063) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.124370][ T7063] Use struct sctp_sack_info instead [ 136.166218][ T7059] tipc: Enabling of bearer rejected, failed to enable media [ 136.445922][ T7075] IPVS: Error connecting to the multicast addr [ 136.541881][ T7077] TCP: TCP_TX_DELAY enabled [ 136.547235][ T7077] __nla_validate_parse: 12 callbacks suppressed [ 136.547255][ T7077] netlink: 24 bytes leftover after parsing attributes in process `syz.2.314'. [ 136.675093][ T7080] validate_nla: 3 callbacks suppressed [ 136.675113][ T7080] netlink: 'syz.4.316': attribute type 21 has an invalid length. [ 136.753238][ T7080] netlink: 156 bytes leftover after parsing attributes in process `syz.4.316'. [ 137.050696][ T7107] sctp: [Deprecated]: syz.2.317 (pid 7107) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.050696][ T7107] Use struct sctp_sack_info instead [ 137.372173][ T7118] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 137.572453][ T7126] netlink: 'syz.1.330': attribute type 10 has an invalid length. [ 137.589424][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.330'. [ 138.194391][ T7155] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 138.299934][ T7162] netlink: 48 bytes leftover after parsing attributes in process `syz.2.338'. [ 138.402970][ T7162] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 138.437248][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.340'. [ 138.512010][ T7167] gtp0: entered promiscuous mode [ 138.527293][ T7167] gtp0: entered allmulticast mode [ 138.542713][ T7178] netlink: 'syz.4.340': attribute type 21 has an invalid length. [ 138.556698][ T7178] netlink: 128 bytes leftover after parsing attributes in process `syz.4.340'. [ 138.620245][ T7167] netlink: 16 bytes leftover after parsing attributes in process `syz.4.340'. [ 138.689213][ T7178] netlink: 'syz.4.340': attribute type 5 has an invalid length. [ 138.698811][ T7178] netlink: 3 bytes leftover after parsing attributes in process `syz.4.340'. [ 138.811055][ T7187] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 139.119766][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.126585][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.251422][ T7206] netlink: 'syz.4.349': attribute type 2 has an invalid length. [ 139.433056][ T7215] netlink: 56 bytes leftover after parsing attributes in process `syz.2.351'. [ 139.779824][ T7230] sock: sock_timestamping_bind_phc: sock not bind to device [ 139.834725][ T7232] netlink: 68 bytes leftover after parsing attributes in process `syz.1.358'. [ 139.906141][ T7239] ipvlan2: entered promiscuous mode [ 140.960472][ T7294] ksmbd: Unknown IPC event: 14, ignore. [ 141.177822][ T7294] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.392045][ T7294] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.440756][ T7311] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 141.447640][ T7311] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 141.461694][ T7311] netlink: 'syz.3.378': attribute type 19 has an invalid length. [ 141.493121][ T6978] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.503087][ T7311] netlink: 'syz.3.378': attribute type 19 has an invalid length. [ 141.520000][ T6978] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.541391][ T7317] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.588577][ T7294] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.626866][ T7004] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.655563][ T7311] __nla_validate_parse: 5 callbacks suppressed [ 141.655583][ T7311] netlink: 60 bytes leftover after parsing attributes in process `syz.3.378'. [ 141.707347][ T7004] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.791330][ T7294] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.825449][ T7323] netlink: 36 bytes leftover after parsing attributes in process `syz.4.380'. [ 141.889130][ T7321] netlink: 60 bytes leftover after parsing attributes in process `syz.3.378'. [ 142.151851][ T7004] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.226103][ T6978] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.250524][ T6977] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.293941][ T6977] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.346734][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 142.388033][ T7337] delete_channel: no stack [ 142.459619][ T7343] netlink: 'syz.3.385': attribute type 3 has an invalid length. [ 142.486497][ T7345] netlink: 44 bytes leftover after parsing attributes in process `syz.2.386'. [ 142.765277][ T7363] netlink: 'syz.0.392': attribute type 2 has an invalid length. [ 142.816884][ T7368] netlink: 'syz.0.392': attribute type 2 has an invalid length. [ 142.874556][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.392'. [ 142.904219][ T7363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.392'. [ 142.952505][ T7363] netlink: 'syz.0.392': attribute type 7 has an invalid length. [ 142.980534][ T7372] netlink: 36 bytes leftover after parsing attributes in process `syz.4.395'. [ 143.076388][ T7377] netlink: 112 bytes leftover after parsing attributes in process `syz.3.396'. [ 143.198347][ T7380] openvswitch: netlink: Flow actions attr not present in new flow. [ 143.599036][ T7396] netlink: 'syz.1.401': attribute type 25 has an invalid length. [ 144.052688][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 144.793865][ T7438] tipc: Enabled bearer , priority 0 [ 144.841397][ T7438] netlink: 'syz.3.416': attribute type 2 has an invalid length. [ 144.880900][ T7447] bridge0: port 3(vlan2) entered blocking state [ 144.887536][ T7447] bridge0: port 3(vlan2) entered disabled state [ 144.894859][ T7447] vlan2: entered allmulticast mode [ 144.900512][ T7447] bridge0: entered allmulticast mode [ 144.911944][ T7447] vlan2: left allmulticast mode [ 144.920493][ T7447] bridge0: left allmulticast mode [ 144.977422][ T7437] tipc: Disabling bearer [ 145.214593][ T7464] sctp: [Deprecated]: syz.3.423 (pid 7464) Use of int in maxseg socket option. [ 145.214593][ T7464] Use struct sctp_assoc_value instead [ 145.560462][ T7475] can: request_module (can-proto-0) failed. [ 145.816930][ T7496] netlink: 'syz.3.432': attribute type 8 has an invalid length. [ 146.518948][ T7531] netlink: 'syz.0.440': attribute type 11 has an invalid length. [ 146.683041][ T7541] netlink: 'syz.4.441': attribute type 2 has an invalid length. [ 146.741927][ T7540] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 146.796799][ T7540] tipc: Enabling of bearer rejected, failed to enable media [ 146.909038][ T7549] __nla_validate_parse: 11 callbacks suppressed [ 146.909058][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 146.985665][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.447'. [ 147.024136][ T7551] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 147.047195][ T7551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.578004][ T7581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.453'. [ 147.831547][ T7565] IPv6: sit1: Disabled Multicast RS [ 147.838120][ T7565] sit1: entered allmulticast mode [ 147.942492][ T7587] tipc: Can't bind to reserved service type 1 [ 147.953840][ T7587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'. [ 148.290080][ T7599] delete_channel: no stack [ 148.543228][ T7610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.463'. [ 148.570803][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 148.754415][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.465'. [ 148.782171][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'. [ 148.809296][ T7624] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 148.818040][ T7624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.029827][ T7634] veth0_to_bridge: entered promiscuous mode [ 149.126534][ T7634] veth0_to_bridge: left promiscuous mode [ 149.352554][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.473'. [ 149.363432][ T7649] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 149.388856][ T7649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.732308][ T7667] tipc: Enabled bearer , priority 0 [ 149.927625][ T7666] tipc: Disabling bearer [ 150.134895][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'. [ 150.164887][ T7689] netlink: 'syz.4.483': attribute type 11 has an invalid length. [ 150.399063][ T7705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.740887][ T7723] tipc: Started in network mode [ 150.745831][ T7723] tipc: Node identity 728c71494c7b, cluster identity 4711 [ 150.794578][ T7723] tipc: Enabled bearer , priority 0 [ 150.815622][ T7715] syzkaller0: entered promiscuous mode [ 150.859722][ T7715] syzkaller0: entered allmulticast mode [ 150.898757][ T7726] Illegal XDP return value 4294967274 on prog (id 203) dev syz_tun, expect packet loss! [ 150.978959][ T7714] tipc: Resetting bearer [ 151.052767][ T7714] tipc: Disabling bearer [ 152.295052][ T7785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.381256][ T7793] netlink: 'syz.2.515': attribute type 1 has an invalid length. [ 152.415810][ T7793] __nla_validate_parse: 9 callbacks suppressed [ 152.415829][ T7793] netlink: 224 bytes leftover after parsing attributes in process `syz.2.515'. [ 152.439020][ T7797] syz.3.516 uses old SIOCAX25GETINFO [ 152.455056][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.515'. [ 152.494893][ T7799] tipc: Enabled bearer , priority 0 [ 152.850242][ T7790] tipc: Disabling bearer [ 152.934210][ T7813] netlink: 32 bytes leftover after parsing attributes in process `syz.3.520'. [ 152.977073][ T7815] netlink: 14 bytes leftover after parsing attributes in process `syz.4.522'. [ 153.197062][ T7825] openvswitch: netlink: Missing key (keys=40, expected=80) [ 153.215512][ T7828] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 153.276165][ T7832] netlink: 16 bytes leftover after parsing attributes in process `syz.4.526'. [ 153.332974][ T7835] netlink: 'syz.4.526': attribute type 6 has an invalid length. [ 153.371513][ T7837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.527'. [ 153.673132][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.533'. [ 154.430145][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.542'. [ 154.514609][ T7897] veth1_to_bond: entered allmulticast mode [ 155.004964][ T7917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.116799][ T7896] veth1_to_bond: left allmulticast mode [ 155.334914][ T7923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.548'. [ 155.367167][ T7928] netlink: 100 bytes leftover after parsing attributes in process `syz.0.549'. [ 155.789782][ T7940] hsr_slave_0: left promiscuous mode [ 155.815455][ T7940] hsr_slave_1: left promiscuous mode [ 155.881587][ T7939] netlink: 'syz.1.553': attribute type 10 has an invalid length. [ 155.983453][ T7939] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 156.127285][ T7954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.463954][ T8020] netlink: 'syz.1.577': attribute type 21 has an invalid length. [ 157.512613][ T8021] __nla_validate_parse: 9 callbacks suppressed [ 157.512633][ T8021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 157.630326][ T8009] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 157.753923][ T8034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.579'. [ 157.858471][ T8038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.579'. [ 157.931370][ T8042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.121335][ T8043] netlink: 'syz.3.582': attribute type 13 has an invalid length. [ 158.382788][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.587'. [ 158.396223][ T8065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.587'. [ 158.476885][ T8063] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 158.507152][ T8069] dvmrp0: entered allmulticast mode [ 158.777784][ T8086] netlink: 'syz.1.592': attribute type 10 has an invalid length. [ 158.882465][ T8089] trusted_key: syz.4.595 sent an empty control message without MSG_MORE. [ 158.915531][ T8086] batman_adv: batadv0: Adding interface: team0 [ 158.960474][ T8086] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.994336][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.595'. [ 158.994745][ T8094] netlink: 'syz.2.593': attribute type 21 has an invalid length. [ 159.020728][ T8089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.595'. [ 159.033367][ T8094] netlink: 156 bytes leftover after parsing attributes in process `syz.2.593'. [ 159.055749][ T8086] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 159.197387][ T8102] openvswitch: netlink: IPv4 tun info is not correct [ 159.432520][ T8112] netlink: 104 bytes leftover after parsing attributes in process `syz.2.598'. [ 159.748931][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.602'. [ 159.866138][ T8131] Bluetooth: MGMT ver 1.23 [ 160.303226][ T8149] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 160.486864][ T8143] syzkaller1: entered promiscuous mode [ 160.503373][ T8143] syzkaller1: entered allmulticast mode [ 160.524778][ T8158] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 161.127698][ T8182] nbd: must specify at least one socket [ 161.154383][ T8181] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 161.330411][ T8197] netlink: 'syz.0.622': attribute type 8 has an invalid length. [ 161.546012][ T30] audit: type=1800 audit(1755412356.887:2): pid=8193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.617" name="memory.events" dev="tmpfs" ino=697 res=0 errno=0 [ 161.703380][ T8207] netlink: 'syz.0.626': attribute type 15 has an invalid length. [ 161.869348][ T8209] netlink: 'syz.1.627': attribute type 1 has an invalid length. [ 162.114444][ T8211] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 162.141552][ T8211] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 162.262471][ T8209] gretap1: entered promiscuous mode [ 162.300323][ T8209] bond1: (slave gretap1): making interface the new active one [ 162.332620][ T8209] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 162.375386][ T8218] macvlan2: entered promiscuous mode [ 162.382026][ T8218] macvlan2: entered allmulticast mode [ 162.389684][ T8218] bond1: entered promiscuous mode [ 162.397705][ T8218] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 162.424948][ T8218] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 162.443283][ T8218] bond1: left promiscuous mode [ 163.051277][ T8248] __nla_validate_parse: 6 callbacks suppressed [ 163.051296][ T8248] netlink: 104 bytes leftover after parsing attributes in process `syz.3.638'. [ 163.817075][ T6977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.862295][ T6977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.533490][ T8328] Bluetooth: MGMT ver 1.23 [ 164.547584][ T8329] netlink: 132 bytes leftover after parsing attributes in process `syz.3.649'. [ 164.720422][ T8328] bond2: entered promiscuous mode [ 164.744447][ T8328] bond2: entered allmulticast mode [ 164.771547][ T8328] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.857787][ T8344] netlink: 'syz.3.655': attribute type 1 has an invalid length. [ 165.055565][ T8328] bond2 (unregistering): Released all slaves [ 165.123708][ T8349] sctp: [Deprecated]: syz.3.656 (pid 8349) Use of int in maxseg socket option. [ 165.123708][ T8349] Use struct sctp_assoc_value instead [ 165.328784][ T8363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.660'. [ 165.507029][ T8373] veth0: entered promiscuous mode [ 165.523706][ T8371] veth0: left promiscuous mode [ 165.657644][ T8379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.663'. [ 165.672238][ T8378] bridge_slave_0: left allmulticast mode [ 165.677952][ T8378] bridge_slave_0: left promiscuous mode [ 165.704221][ T8378] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.731580][ T8378] bridge_slave_1: left allmulticast mode [ 165.739742][ T8378] bridge_slave_1: left promiscuous mode [ 165.745787][ T8378] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.783238][ T8378] team0: Port device team_slave_0 removed [ 165.843123][ T8378] team0: Port device team_slave_1 removed [ 165.894767][ T8378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.904175][ T8378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.915701][ T8378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.926957][ T8378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.960435][ T8379] bond0: entered promiscuous mode [ 165.966228][ T8379] bond_slave_0: entered promiscuous mode [ 165.973693][ T8379] bond_slave_1: entered promiscuous mode [ 165.992960][ T8379] bond0: left promiscuous mode [ 166.010364][ T8379] bond_slave_0: left promiscuous mode [ 166.016840][ T8379] bond_slave_1: left promiscuous mode [ 166.047301][ T8381] ipvlan3: entered promiscuous mode [ 166.055993][ T8383] team0: Mode changed to "broadcast" [ 166.096339][ T8387] ip6tnl2: entered promiscuous mode [ 166.123979][ T8389] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 166.334695][ T8409] netlink: 'syz.0.672': attribute type 1 has an invalid length. [ 166.357756][ T8408] netlink: 96 bytes leftover after parsing attributes in process `syz.4.670'. [ 166.493365][ T8422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.672'. [ 166.542153][ T8409] veth5: entered promiscuous mode [ 167.118550][ T8446] netlink: 'syz.3.680': attribute type 21 has an invalid length. [ 167.154240][ T8446] netlink: 132 bytes leftover after parsing attributes in process `syz.3.680'. [ 167.177160][ T8446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.680'. [ 167.351105][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.683'. [ 167.867071][ T8469] netlink: 40 bytes leftover after parsing attributes in process `syz.4.689'. [ 167.892520][ T8474] batman_adv: batadv0: Removing interface: team0 [ 168.020209][ T8474] bond0: (slave dummy0): Releasing backup interface [ 168.102634][ T8474] bridge_slave_0: left allmulticast mode [ 168.143363][ T8474] bridge_slave_0: left promiscuous mode [ 168.186836][ T8474] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.283136][ T8474] bridge_slave_1: left allmulticast mode [ 168.339203][ T8474] bridge_slave_1: left promiscuous mode [ 168.345907][ T8474] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.382230][ T8474] bond0: (slave bond_slave_0): Releasing backup interface [ 168.450147][ T8474] bond0: (slave bond_slave_1): Releasing backup interface [ 168.501409][ T8474] team0: Port device team_slave_0 removed [ 168.518540][ T8474] team0: Port device team_slave_1 removed [ 168.526004][ T8474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.534783][ T8474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.546608][ T8474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.562483][ T8474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.601756][ T8474] bond1: (slave gretap1): Releasing active interface [ 168.651559][ T8490] syzkaller1: entered promiscuous mode [ 168.658411][ T8490] syzkaller1: entered allmulticast mode [ 168.706724][ T8502] netlink: 168 bytes leftover after parsing attributes in process `syz.0.698'. [ 168.932450][ T5183] Bluetooth: hci3: link tx timeout [ 168.938264][ T5183] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.109048][ T8523] netlink: 100 bytes leftover after parsing attributes in process `syz.4.705'. [ 169.220746][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'. [ 169.495149][ T8544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.711'. [ 169.572318][ T8551] gre1: entered promiscuous mode [ 169.577419][ T8551] gre1: entered allmulticast mode [ 169.652710][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.715'. [ 169.931413][ T8565] ipvlan2: entered promiscuous mode [ 170.160281][ T8571] netlink: 256 bytes leftover after parsing attributes in process `syz.3.721'. [ 170.401436][ T8581] tipc: New replicast peer: 255.255.255.255 [ 170.440282][ T8581] tipc: Enabled bearer , priority 10 [ 170.543179][ T8589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.579528][ T8591] netlink: 20 bytes leftover after parsing attributes in process `syz.1.728'. [ 170.950804][ T5183] Bluetooth: hci3: command 0x0405 tx timeout [ 171.082650][ T8619] netlink: 24 bytes leftover after parsing attributes in process `syz.2.735'. [ 171.344420][ T8635] netlink: 64 bytes leftover after parsing attributes in process `syz.0.740'. [ 171.540373][ T8640] openvswitch: netlink: Message has 4 unknown bytes. [ 171.556906][ T8640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.743'. [ 171.567889][ T8643] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 171.571645][ T5947] tipc: Node number set to 1056403785 [ 172.653102][ T8696] team_slave_0: entered promiscuous mode [ 172.659096][ T8696] team_slave_1: entered promiscuous mode [ 172.693404][ T8696] macsec1: entered promiscuous mode [ 172.710255][ T8696] team0: entered promiscuous mode [ 172.721652][ T8696] macsec1: entered allmulticast mode [ 172.727231][ T8696] team0: entered allmulticast mode [ 172.732622][ T8696] team_slave_0: entered allmulticast mode [ 172.738466][ T8696] team_slave_1: entered allmulticast mode [ 172.748553][ T8696] team0: Device macsec1 is already an upper device of the team interface [ 172.772681][ T8696] team0: left allmulticast mode [ 172.782877][ T8696] team_slave_0: left allmulticast mode [ 172.788826][ T8696] team_slave_1: left allmulticast mode [ 172.796262][ T8696] team0: left promiscuous mode [ 172.804452][ T8696] team_slave_0: left promiscuous mode [ 172.810102][ T8696] team_slave_1: left promiscuous mode [ 172.947481][ T8709] netlink: 'syz.2.761': attribute type 4 has an invalid length. [ 173.183174][ T8724] delete_channel: no stack [ 173.236711][ T8729] netlink: 'syz.2.767': attribute type 21 has an invalid length. [ 173.301465][ T3529] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.312756][ T3529] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.334540][ T8732] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 173.353191][ T8732] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 173.388043][ T8732] gretap2: entered promiscuous mode [ 173.395169][ T8732] gretap2: entered allmulticast mode [ 173.429221][ T3529] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.437508][ T3529] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.649454][ T8741] vlan2: entered promiscuous mode [ 173.654654][ T8741] erspan0: entered promiscuous mode [ 173.685841][ T8748] netlink: 'syz.1.774': attribute type 16 has an invalid length. [ 173.699782][ T8748] netlink: 'syz.1.774': attribute type 17 has an invalid length. [ 173.709768][ T8746] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 173.721435][ T8745] __nla_validate_parse: 9 callbacks suppressed [ 173.721456][ T8745] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.771'. [ 173.764232][ T8748] sit0: left promiscuous mode [ 173.786770][ T8748] sit0: left allmulticast mode [ 174.010078][ T8748] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.043144][ T8748] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.103689][ T5981] IPVS: starting estimator thread 0... [ 174.117652][ T8770] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 174.156209][ T8759] dvmrp0: entered allmulticast mode [ 174.220625][ T8769] IPVS: using max 24 ests per chain, 57600 per kthread [ 174.321724][ T8780] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 174.399729][ T8782] nftables ruleset with unbound chain [ 174.607987][ T8794] netlink: 16 bytes leftover after parsing attributes in process `syz.3.784'. [ 174.618137][ T8789] netlink: 'syz.0.783': attribute type 11 has an invalid length. [ 174.639115][ T8789] netlink: 228 bytes leftover after parsing attributes in process `syz.0.783'. [ 174.864357][ T8809] IPv6: sit1: Disabled Multicast RS [ 175.004805][ T8811] tipc: Enabled bearer , priority 0 [ 175.012450][ T8812] tipc: Enabling of bearer rejected, already enabled [ 175.040551][ T8811] macvlan0: entered allmulticast mode [ 175.068015][ T8810] tipc: Disabling bearer [ 175.206744][ T8821] netlink: 16 bytes leftover after parsing attributes in process `syz.3.795'. [ 175.626566][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.802'. [ 175.764590][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.804'. [ 175.773769][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.804'. [ 176.116828][ T8872] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.811'. [ 176.649155][ T8897] netlink: 'syz.1.819': attribute type 12 has an invalid length. [ 176.684323][ T8897] netlink: 132 bytes leftover after parsing attributes in process `syz.1.819'. [ 176.933468][ T8905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'. [ 176.934164][ T8912] netlink: 'syz.3.822': attribute type 11 has an invalid length. [ 176.952064][ T8905] netlink: 'syz.3.822': attribute type 11 has an invalid length. [ 177.084704][ T8919] bridge0: port 1(vlan2) entered blocking state [ 177.108212][ T8919] bridge0: port 1(vlan2) entered disabled state [ 177.135286][ T8919] vlan2: entered allmulticast mode [ 177.145923][ T8919] bridge0: entered allmulticast mode [ 177.156620][ T8919] vlan2: left allmulticast mode [ 177.163052][ T8919] bridge0: left allmulticast mode [ 177.254279][ T8923] netlink: 'syz.3.829': attribute type 1 has an invalid length. [ 177.346060][ T8923] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.648060][ T8949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.332843][ T8957] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 178.529587][ T8991] netlink: 'syz.3.849': attribute type 2 has an invalid length. [ 178.537817][ T8991] netlink: 'syz.3.849': attribute type 2 has an invalid length. [ 178.601766][ T8993] netlink: 'syz.3.849': attribute type 2 has an invalid length. [ 178.877366][ T9010] __nla_validate_parse: 12 callbacks suppressed [ 178.877386][ T9010] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.854'. [ 178.946819][ T9010] openvswitch: netlink: Missing key (keys=40, expected=100) [ 179.000150][ T9009] IPVS: persistence engine module ip_vs_pe_ not found [ 179.163157][ T9021] netlink: 'syz.0.859': attribute type 16 has an invalid length. [ 179.189375][ T9021] netlink: 'syz.0.859': attribute type 17 has an invalid length. [ 179.269860][ T9021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.294552][ T9027] wg1: entered promiscuous mode [ 180.106541][ T9073] sctp: [Deprecated]: syz.4.877 (pid 9073) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.106541][ T9073] Use struct sctp_sack_info instead [ 180.225522][ T9077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.881'. [ 180.557743][ T9099] netlink: 'syz.1.883': attribute type 29 has an invalid length. [ 180.570654][ T9099] netlink: 'syz.1.883': attribute type 29 has an invalid length. [ 180.611115][ T9099] netlink: 500 bytes leftover after parsing attributes in process `syz.1.883'. [ 180.719287][ T9105] atomic_op ffff888067559998 conn xmit_atomic 0000000000000000 [ 180.759681][ T9108] netlink: 'syz.0.890': attribute type 21 has an invalid length. [ 180.777017][ T9112] mac80211_hwsim hwsim5 : renamed from wlan1 (while UP) [ 180.813095][ T9108] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 181.056763][ T9128] netlink: 32 bytes leftover after parsing attributes in process `syz.0.895'. [ 181.071835][ T9131] netlink: 16 bytes leftover after parsing attributes in process `syz.1.896'. [ 181.326024][ T9126] "syz.4.894" (9126) uses obsolete ecb(arc4) skcipher [ 181.482307][ T9158] netlink: zone id is out of range [ 181.546573][ T9162] netlink: 'syz.2.903': attribute type 1 has an invalid length. [ 181.555754][ T9158] netlink: del zone limit has 4 unknown bytes [ 181.577853][ T9162] netlink: 'syz.2.903': attribute type 2 has an invalid length. [ 181.590982][ T9151] batadv1: entered allmulticast mode [ 181.601138][ T9162] netlink: 1172 bytes leftover after parsing attributes in process `syz.2.903'. [ 181.615027][ T9162] netlink: 244 bytes leftover after parsing attributes in process `syz.2.903'. [ 181.850995][ T9175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.906'. [ 181.906065][ T9175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.906'. [ 182.125609][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.907'. [ 182.195305][ T9189] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 182.546042][ T9205] tipc: Enabled bearer , priority 0 [ 182.566193][ T9205] syzkaller0: entered promiscuous mode [ 182.578756][ T9205] syzkaller0: entered allmulticast mode [ 182.613187][ T9211] tipc: Started in network mode [ 182.618225][ T9211] tipc: Node identity 06543124f058, cluster identity 4711 [ 182.626989][ T9211] tipc: Enabled bearer , priority 0 [ 182.647824][ T9211] tipc: Resetting bearer [ 182.723801][ T9205] tipc: Resetting bearer [ 182.754453][ T9208] tipc: Disabling bearer [ 182.767042][ T9204] tipc: Resetting bearer [ 182.781784][ T9204] tipc: Disabling bearer [ 182.812768][ T9219] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 183.497442][ T9253] ip6gre1: entered allmulticast mode [ 183.712981][ T9264] validate_nla: 5 callbacks suppressed [ 183.713000][ T9264] netlink: 'syz.0.930': attribute type 2 has an invalid length. [ 183.746674][ T9264] nbd: must specify a device to reconfigure [ 183.957025][ T9271] __nla_validate_parse: 4 callbacks suppressed [ 183.957052][ T9271] netlink: 112 bytes leftover after parsing attributes in process `syz.4.933'. [ 184.070578][ T9280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.114035][ T9280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.934'. [ 184.352856][ T9297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.939'. [ 184.383473][ T9293] netlink: 'syz.4.938': attribute type 3 has an invalid length. [ 184.394641][ T9293] netlink: 766 bytes leftover after parsing attributes in process `syz.4.938'. [ 184.433494][ T9300] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 184.597476][ T9300] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 185.296968][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.948'. [ 185.986639][ T9363] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.016276][ T9363] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.457117][ T9385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.478346][ T9387] netlink: 'syz.2.962': attribute type 1 has an invalid length. [ 186.479021][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.958'. [ 186.505581][ T9387] netlink: 'syz.2.962': attribute type 11 has an invalid length. [ 186.539591][ T9387] netlink: 220 bytes leftover after parsing attributes in process `syz.2.962'. [ 186.567742][ T9394] netlink: 'syz.0.960': attribute type 1 has an invalid length. [ 186.644205][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'. [ 186.704882][ T9403] netlink: 24 bytes leftover after parsing attributes in process `syz.3.963'. [ 186.802818][ T9406] syzkaller0: refused to change device tx_queue_len [ 186.995263][ T9415] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20004 [ 187.061457][ T5876] IPVS: starting estimator thread 0... [ 187.168711][ T9418] IPVS: using max 25 ests per chain, 60000 per kthread [ 187.453888][ T9443] netlink: 24 bytes leftover after parsing attributes in process `syz.1.972'. [ 188.046738][ T9473] dvmrp0: left allmulticast mode [ 188.469084][ T5877] Bluetooth: hci3: command 0x0405 tx timeout [ 188.992502][ T9512] __nla_validate_parse: 3 callbacks suppressed [ 188.992521][ T9512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.989'. [ 189.273233][ T9528] netlink: 68 bytes leftover after parsing attributes in process `syz.3.992'. [ 189.303116][ T9528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.992'. [ 189.508133][ T9529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.815688][ T9547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.996'. [ 189.986694][ T9556] netlink: 16 bytes leftover after parsing attributes in process `syz.3.999'. [ 190.423621][ T9573] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1007'. [ 190.459040][ T9573] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1007'. [ 190.542237][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'. [ 190.897502][ T9599] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1011'. [ 190.929837][ T9599] netlink: 'syz.0.1011': attribute type 7 has an invalid length. [ 190.965469][ T9599] netlink: 'syz.0.1011': attribute type 8 has an invalid length. [ 190.975292][ T9602] batman_adv: batadv0: Adding interface: dummy0 [ 191.014322][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1011'. [ 191.050173][ T9602] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.104656][ T9602] batman_adv: batadv0: Interface activated: dummy0 [ 191.470873][ T9610] batadv0: mtu less than device minimum [ 191.478824][ T9610] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.491081][ T9610] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.503122][ T9610] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.515222][ T9610] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.527231][ T9610] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.539332][ T9610] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.551365][ T9610] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.563465][ T9610] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.075499][ T9641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.134103][ T9641] bond0: (slave rose0): Enslaving as an active interface with an up link [ 193.964078][ T9723] vlan2: entered promiscuous mode [ 193.982284][ T9723] vlan2: entered allmulticast mode [ 193.987482][ T9723] hsr_slave_1: entered allmulticast mode [ 194.021836][ T9727] __nla_validate_parse: 8 callbacks suppressed [ 194.021942][ T9727] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1040'. [ 194.171261][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'. [ 194.346746][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1043'. [ 194.875739][ T9766] nbd: must specify at least one socket [ 194.885131][ T9771] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1051'. [ 194.921857][ T9771] veth0: entered promiscuous mode [ 194.965412][ T9778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1051'. [ 194.981051][ T5916] udevd[5916]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 195.009378][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1052'. [ 195.128965][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1052'. [ 195.380044][ T9794] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1054'. [ 195.566937][ T9785] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.588873][ T9785] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 195.819556][ T9813] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1057'. [ 196.016492][ T9785] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.048760][ T9785] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 196.178340][ T9824] tipc: Enabled bearer , priority 10 [ 196.263619][ T9785] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.301752][ T9785] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 196.551083][ T9785] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.578995][ T9785] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 196.868490][ T9856] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1066'. [ 196.909601][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 196.946953][ T13] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 197.023411][ T9858] block nbd3: server does not support multiple connections per device. [ 197.075602][ T9858] block nbd3: shutting down sockets [ 197.091140][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 197.117732][ T13] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 197.213724][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 197.247566][ T13] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 197.299245][ T929] tipc: Node number set to 743460994 [ 197.306563][ T6975] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 197.346200][ T6975] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 197.563793][ T9895] rdma_op ffff888029e369f0 conn xmit_rdma 0000000000000000 [ 198.068931][ T5183] Bluetooth: hci3: command 0x0405 tx timeout [ 198.142433][ T9917] pimreg: entered allmulticast mode [ 198.190195][ T9916] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 198.247397][ T9916] bond1: (slave vcan1): Error -95 calling set_mac_address [ 200.553847][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.560341][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 214.889796][T10069] Unsupported ieee802154 address type: 0 [ 215.205909][T10090] __nla_validate_parse: 5 callbacks suppressed [ 215.205929][T10090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1102'. [ 215.260986][T10090] veth3: entered allmulticast mode [ 215.280236][T10086] syzkaller0: entered allmulticast mode [ 215.444882][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1105'. [ 215.474650][T10098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1105'. [ 215.568920][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.603671][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.645251][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.705589][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.746010][T10109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1106'. [ 216.150592][T10126] net_ratelimit: 11 callbacks suppressed [ 216.150612][T10126] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 216.181452][T10094] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 216.407264][T10136] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1114'. [ 216.534735][T10136] veth0_to_team: entered allmulticast mode [ 216.635485][T10147] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1116'. [ 217.156981][T10174] netlink: 'syz.4.1123': attribute type 24 has an invalid length. [ 217.297945][T10183] ieee802154 phy0 wpan0: encryption failed: -22 [ 217.433190][ T5877] Bluetooth: hci0: command 0x080f tx timeout [ 217.562155][T10194] netlink: 'syz.1.1131': attribute type 1 has an invalid length. [ 217.586270][T10194] netlink: 'syz.1.1131': attribute type 3 has an invalid length. [ 217.608872][T10194] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1131'. [ 217.617959][T10194] NCSI netlink: No device for ifindex 0 [ 217.861278][T10202] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 217.983981][T10216] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 218.403232][T10236] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1143'. [ 218.447194][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'. [ 218.672766][T10240] syzkaller0: entered promiscuous mode [ 218.678301][T10240] syzkaller0: entered allmulticast mode [ 219.112479][T10266] ip6gre0: Master is either lo or non-ether device [ 219.293657][T10273] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1154'. [ 220.115228][T10306] netlink: 'syz.0.1160': attribute type 4 has an invalid length. [ 220.189955][T10321] netlink: 'syz.2.1166': attribute type 10 has an invalid length. [ 220.285765][T10321] veth0_macvtap: left promiscuous mode [ 220.495365][T10334] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 220.530613][T10334] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 220.819642][T10353] __nla_validate_parse: 2 callbacks suppressed [ 220.819662][T10353] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1174'. [ 221.026027][T10362] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.899341][T10405] sch_fq: defrate 0 ignored. [ 222.159836][T10413] tipc: Enabled bearer , priority 0 [ 222.187900][T10412] tipc: Enabling of bearer rejected, already enabled [ 222.200284][T10422] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1194'. [ 222.211109][T10415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.446059][T10432] netlink: 'syz.0.1196': attribute type 142 has an invalid length. [ 222.468067][T10412] syzkaller0: entered promiscuous mode [ 222.474311][T10412] syzkaller0: entered allmulticast mode [ 222.482682][T10412] tipc: Resetting bearer [ 222.558868][T10413] tipc: Resetting bearer [ 222.678285][T10437] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1199'. [ 222.851327][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1202'. [ 222.860870][T10448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1202'. [ 222.872192][T10448] netlink: 'syz.4.1202': attribute type 10 has an invalid length. [ 222.934435][T10449] netlink: 'syz.4.1202': attribute type 10 has an invalid length. [ 223.281932][ T5940] tipc: Node number set to 3125247915 [ 223.976283][T10413] tipc: Disabling bearer [ 223.993154][T10443] tipc: Enabling of bearer rejected, already enabled [ 224.035351][T10448] team0: Port device dummy0 added [ 224.102889][T10449] team0: Port device dummy0 removed [ 224.833973][T10483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1214'. [ 224.970112][T10488] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.1217'. [ 225.075637][ T7006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.086325][T10488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1217'. [ 225.095248][ T7006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.122130][T10491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.313905][T10503] openvswitch: netlink: IP tunnel dst address not specified [ 225.336547][T10504] openvswitch: netlink: IP tunnel dst address not specified [ 225.384586][T10506] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1224'. [ 225.426763][T10508] netlink: 'syz.2.1225': attribute type 21 has an invalid length. [ 225.437717][T10508] netlink: 'syz.2.1225': attribute type 1 has an invalid length. [ 225.458396][T10508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1225'. [ 225.577026][T10511] tipc: Enabled bearer , priority 0 [ 225.587275][T10511] syzkaller0: entered promiscuous mode [ 225.594566][T10511] syzkaller0: entered allmulticast mode [ 225.644963][T10511] tipc: Resetting bearer [ 225.682751][T10511] tipc: Disabling bearer [ 225.900676][T10524] __nla_validate_parse: 3 callbacks suppressed [ 225.900696][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'. [ 225.982782][T10524] vlan2: entered allmulticast mode [ 225.987973][T10524] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 226.085600][T10537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1234'. [ 226.130783][T10541] netlink: 'syz.1.1236': attribute type 11 has an invalid length. [ 226.339654][T10548] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1237'. [ 226.406089][T10548] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1237'. [ 226.416275][T10548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1237'. [ 226.679727][T10560] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 227.045228][T10573] netlink: 'syz.3.1247': attribute type 4 has an invalid length. [ 227.285893][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1251'. [ 227.334683][T10590] netlink: 'syz.3.1250': attribute type 1 has an invalid length. [ 227.358357][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1251'. [ 227.397895][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1251'. [ 227.540465][T10598] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1253'. [ 227.656809][T10600] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode 802.3ad(4) [ 227.709362][T10601] delete_channel: no stack [ 227.880961][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1258'. [ 228.230189][ T5880] Bluetooth: hci1: command 0x0406 tx timeout [ 228.236271][ T5880] Bluetooth: hci0: command 0x080f tx timeout [ 228.247880][ T5868] Bluetooth: hci2: command 0x0406 tx timeout [ 228.247901][ T5862] Bluetooth: hci4: command 0x0406 tx timeout [ 228.693617][T10655] openvswitch: netlink: IP tunnel dst address not specified [ 228.966801][T10665] bond3: entered promiscuous mode [ 228.973302][T10665] bond3: entered allmulticast mode [ 228.981495][T10665] 8021q: adding VLAN 0 to HW filter on device bond3 [ 228.995347][T10672] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 229.920489][T10677] team0 (unregistering): Port device team_slave_0 removed [ 229.956043][T10677] team0 (unregistering): Port device team_slave_1 removed [ 230.043019][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.050414][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.229436][T10700] netlink: 'syz.4.1285': attribute type 83 has an invalid length. [ 231.211832][T10753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.718167][T10779] netlink: 'syz.3.1306': attribute type 10 has an invalid length. [ 231.886692][T10779] bond0: (slave ): Enslaving as an active interface with an up link [ 232.629640][T10814] __nla_validate_parse: 9 callbacks suppressed [ 232.629670][T10814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1314'. [ 233.062218][T10836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.408957][T10851] tipc: Enabled bearer , priority 0 [ 233.536653][T10851] tipc: Disabling bearer [ 233.697425][T10865] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1327'. [ 233.844630][T10867] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1329'. [ 233.866644][T10867] netlink: 'syz.0.1329': attribute type 58 has an invalid length. [ 233.891110][T10867] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1329'. [ 234.401712][T10895] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 234.423301][T10895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.441858][T10890] netlink: 'syz.2.1336': attribute type 1 has an invalid length. [ 234.450724][T10895] IPv6: NLM_F_REPLACE set, but no existing node found! [ 235.010791][T10914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1343'. [ 235.047584][T10914] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1343'. [ 235.067543][T10917] netlink: 'syz.4.1345': attribute type 1 has an invalid length. [ 235.104939][ T5981] IPVS: starting estimator thread 0... [ 235.199012][T10918] IPVS: using max 27 ests per chain, 64800 per kthread [ 235.212910][T10924] netlink: 4500 bytes leftover after parsing attributes in process `syz.1.1348'. [ 235.216656][T10917] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.233594][T10922] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 235.257477][T10928] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1347'. [ 235.266789][T10928] openvswitch: netlink: Actions may not be safe on all matching packets [ 235.381052][T10926] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.443373][T10926] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 235.505821][T10926] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 235.545699][T10947] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1345'. [ 235.555297][T10946] sctp: [Deprecated]: syz.3.1351 (pid 10946) Use of int in max_burst socket option deprecated. [ 235.555297][T10946] Use struct sctp_assoc_value instead [ 235.610957][T10950] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1351'. [ 235.746770][T10943] veth5: entered promiscuous mode [ 235.797942][T10947] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.892700][T10966] !: renamed from bond_slave_0 (while UP) [ 236.037534][T10971] lo: entered allmulticast mode [ 236.044180][T10971] netlink: 'syz.2.1359': attribute type 1 has an invalid length. [ 236.057518][T10970] lo: left allmulticast mode [ 236.227397][T10980] netlink: 'syz.2.1362': attribute type 1 has an invalid length. [ 236.241215][T10980] netlink: 'syz.2.1362': attribute type 1 has an invalid length. [ 236.293919][T10982] netlink: 'syz.2.1363': attribute type 23 has an invalid length. [ 236.505103][T10989] digital: digital_start_poll: Unknown protocol [ 236.881318][T11004] netlink: 'syz.0.1370': attribute type 1 has an invalid length. [ 236.897389][T11004] netlink: 'syz.0.1370': attribute type 1 has an invalid length. [ 237.015924][T11010] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20002 [ 237.337472][T11031] netlink: 'syz.3.1380': attribute type 1 has an invalid length. [ 237.389971][T11031] netlink: 'syz.3.1380': attribute type 1 has an invalid length. [ 237.487781][T11037] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 237.502847][T11036] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 237.513644][T11037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.549292][T11036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.622646][T11043] netlink: 'syz.0.1383': attribute type 4 has an invalid length. [ 237.819527][T11055] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 238.407571][T11072] __nla_validate_parse: 8 callbacks suppressed [ 238.407591][T11072] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1392'. [ 238.583614][T11087] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1396'. [ 238.671558][T11097] netlink: 'syz.3.1395': attribute type 1 has an invalid length. [ 238.708773][T11097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1395'. [ 238.854818][T11112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1400'. [ 239.366453][T11124] bond4: entered promiscuous mode [ 239.371984][T11124] bond4: entered allmulticast mode [ 239.377870][T11124] 8021q: adding VLAN 0 to HW filter on device bond4 [ 239.538871][T11140] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 239.670460][T11143] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1409'. [ 239.683937][T11147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1412'. [ 239.701272][T11147] netlink: 50 bytes leftover after parsing attributes in process `syz.2.1412'. [ 239.716252][T11147] netlink: 50 bytes leftover after parsing attributes in process `syz.2.1412'. [ 240.389443][T11187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1419'. [ 240.631630][T11194] nbd: couldn't find device at index 1 [ 240.654434][T11194] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1419'. [ 240.655634][T11187] bond0: (slave ): Enslaving as an active interface with an up link [ 240.851231][T11205] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 241.170422][T11222] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 241.697719][T11239] tipc: Enabled bearer , priority 0 [ 241.737987][T11231] tipc: Resetting bearer [ 241.781964][T11244] syzkaller0: entered promiscuous mode [ 241.818170][T11244] syzkaller0: entered allmulticast mode [ 241.895321][T11227] tipc: Resetting bearer [ 241.942411][T11227] tipc: Disabling bearer [ 241.964944][T11256] validate_nla: 4 callbacks suppressed [ 241.964965][T11256] netlink: 'syz.3.1438': attribute type 1 has an invalid length. [ 241.977174][T11257] netlink: 'syz.1.1439': attribute type 29 has an invalid length. [ 241.997643][T11257] netlink: 'syz.1.1439': attribute type 29 has an invalid length. [ 242.664728][T11281] netlink: 'syz.3.1448': attribute type 3 has an invalid length. [ 242.673615][T11281] netlink: 'syz.3.1448': attribute type 1 has an invalid length. [ 242.847424][T11289] openvswitch: netlink: IP tunnel TTL not specified. [ 242.875068][T11289] openvswitch: netlink: IP tunnel TTL not specified. [ 242.894448][T11291] tipc: Enabled bearer , priority 0 [ 242.916566][T11291] syzkaller0: entered promiscuous mode [ 242.937550][T11291] syzkaller0: entered allmulticast mode [ 243.001190][T11291] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 243.052657][T11291] tipc: Resetting bearer [ 243.096852][T11290] tipc: Resetting bearer [ 243.167077][T11290] tipc: Disabling bearer [ 243.454188][T11308] __nla_validate_parse: 8 callbacks suppressed [ 243.454208][T11308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1457'. [ 243.622636][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'. [ 243.720077][T11317] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1460'. [ 243.729467][T11318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1459'. [ 243.772493][T11318] vlan2: entered allmulticast mode [ 243.793466][T11318] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 243.833045][T11321] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1460'. [ 243.865964][T11321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1460'. [ 243.901056][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1460'. [ 243.912909][T11323] netlink: 'syz.4.1461': attribute type 39 has an invalid length. [ 243.927682][T11325] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 244.350608][T11343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'. [ 244.388461][T11345] netlink: 'syz.0.1466': attribute type 1 has an invalid length. [ 244.429540][T11349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1468'. [ 244.464571][T11355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1467'. [ 245.450092][T11397] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 245.593166][ T30] audit: type=1107 audit(1755412440.927:3): pid=11407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=')RGגyj֊<ϧfqZ7h&* [ 245.593166][ T30] ]I!m)ojZ y2eV/:^$08ypJ릍, priority 0 [ 258.892931][T12000] syzkaller0: entered promiscuous mode [ 258.907857][T12000] syzkaller0: entered allmulticast mode [ 258.921636][T12000] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 258.979164][T12000] tipc: Resetting bearer [ 259.014667][T11999] tipc: Resetting bearer [ 259.099988][T11999] tipc: Disabling bearer [ 259.126949][T12011] __nla_validate_parse: 5 callbacks suppressed [ 259.126968][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1642'. [ 259.280246][T12019] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1643'. [ 259.324946][T12019] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 259.365864][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1645'. [ 259.376520][T12019] netlink: 'syz.0.1643': attribute type 11 has an invalid length. [ 259.389010][T12023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1645'. [ 259.398012][T12023] validate_nla: 1 callbacks suppressed [ 259.398028][T12023] netlink: 'syz.4.1645': attribute type 15 has an invalid length. [ 259.412086][T12019] netlink: 'syz.0.1643': attribute type 4 has an invalid length. [ 259.429212][T12019] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1643'. [ 259.461823][T12032] netlink: 'syz.1.1646': attribute type 33 has an invalid length. [ 259.489341][T12032] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1646'. [ 259.540847][T12035] netdevsim netdevsim3: Direct firmware load for /. failed with error -2 [ 259.619009][T12035] netdevsim netdevsim3: Falling back to sysfs fallback for: /. [ 259.966003][T12054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1654'. [ 259.976404][T12054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1654'. [ 260.011681][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1654'. [ 260.057779][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1654'. [ 260.347131][T12070] dvmrp1: entered allmulticast mode [ 260.451509][T12072] openvswitch: netlink: Unknown key attributes 2 [ 260.635753][T12080] tipc: Enabled bearer , priority 0 [ 260.685710][T12080] bridge0: port 2(batadv1) entered blocking state [ 260.693405][T12080] bridge0: port 2(batadv1) entered disabled state [ 260.717846][T12080] batadv1: entered allmulticast mode [ 260.744883][T12080] batadv1: entered promiscuous mode [ 260.776226][T12090] netlink: 'syz.3.1664': attribute type 10 has an invalid length. [ 260.863979][T12090] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 260.978540][T12079] tipc: Disabling bearer [ 261.202140][ T6978] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 261.211822][ T6978] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 261.652430][T12132] netlink: 'syz.4.1675': attribute type 3 has an invalid length. [ 261.996636][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.090482][T12150] tipc: Enabled bearer , priority 0 [ 262.118306][T12150] syzkaller0: entered promiscuous mode [ 262.127447][T12150] syzkaller0: entered allmulticast mode [ 262.216564][T12158] tipc: Resetting bearer [ 262.263639][T12147] tipc: Resetting bearer [ 262.297051][T12147] tipc: Disabling bearer [ 262.597843][T12170] netlink: 'syz.3.1690': attribute type 1 has an invalid length. [ 263.033867][T12201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.880841][T12243] nftables ruleset with unbound set [ 263.896227][ T13] [ 263.898597][ T13] ============================================ [ 263.904765][ T13] WARNING: possible recursive locking detected [ 263.910925][ T13] 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 Not tainted [ 263.918042][ T13] -------------------------------------------- [ 263.924191][ T13] kworker/u8:1/13 is trying to acquire lock: [ 263.930177][ T13] ffffe8ffffd7d258 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x73e/0xb80 [ 263.939435][ T13] [ 263.939435][ T13] but task is already holding lock: [ 263.946801][ T13] ffffe8ffffd7da58 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 263.956023][ T13] [ 263.956023][ T13] other info that might help us debug this: [ 263.964073][ T13] Possible unsafe locking scenario: [ 263.964073][ T13] [ 263.971515][ T13] CPU0 [ 263.974790][ T13] ---- [ 263.978063][ T13] lock(&pd_list->lock); [ 263.982397][ T13] lock(&pd_list->lock); [ 263.986822][ T13] [ 263.986822][ T13] *** DEADLOCK *** [ 263.986822][ T13] [ 263.995072][ T13] May be due to missing lock nesting notation [ 263.995072][ T13] [ 264.003395][ T13] 3 locks held by kworker/u8:1/13: [ 264.008525][ T13] #0: ffff8881466d1148 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 264.020475][ T13] #1: ffffc90000127bc0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 264.032335][ T13] #2: ffffe8ffffd7da58 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 264.042002][ T13] [ 264.042002][ T13] stack backtrace: [ 264.047904][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 PREEMPT(full) [ 264.047924][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 264.047934][ T13] Workqueue: pencrypt_parallel padata_parallel_worker [ 264.047966][ T13] Call Trace: [ 264.047975][ T13] [ 264.047983][ T13] dump_stack_lvl+0x189/0x250 [ 264.048004][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.048021][ T13] ? __pfx__printk+0x10/0x10 [ 264.048042][ T13] ? print_lock_name+0xde/0x100 [ 264.048062][ T13] print_deadlock_bug+0x28b/0x2a0 [ 264.048079][ T13] validate_chain+0x1a3f/0x2140 [ 264.048097][ T13] ? __queue_work+0x102/0xfb0 [ 264.048111][ T13] ? look_up_lock_class+0x74/0x170 [ 264.048131][ T13] ? register_lock_class+0x51/0x320 [ 264.048150][ T13] ? __queue_work+0xc56/0xfb0 [ 264.048166][ T13] __lock_acquire+0xab9/0xd20 [ 264.048189][ T13] ? padata_do_serial+0x73e/0xb80 [ 264.048206][ T13] lock_acquire+0x120/0x360 [ 264.048226][ T13] ? padata_do_serial+0x73e/0xb80 [ 264.048245][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 264.048265][ T13] _raw_spin_lock+0x2e/0x40 [ 264.048282][ T13] ? padata_do_serial+0x73e/0xb80 [ 264.048300][ T13] padata_do_serial+0x73e/0xb80 [ 264.048323][ T13] ? padata_parallel_worker+0x44/0x1d0 [ 264.048341][ T13] padata_parallel_worker+0x75/0x1d0 [ 264.048359][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 264.048373][ T13] process_scheduled_works+0xade/0x17b0 [ 264.048397][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 264.048417][ T13] worker_thread+0x8a0/0xda0 [ 264.048441][ T13] kthread+0x70e/0x8a0 [ 264.048459][ T13] ? __pfx_worker_thread+0x10/0x10 [ 264.048472][ T13] ? __pfx_kthread+0x10/0x10 [ 264.048490][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 264.048506][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.048524][ T13] ? __pfx_kthread+0x10/0x10 [ 264.048541][ T13] ret_from_fork+0x3f9/0x770 [ 264.048556][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 264.048572][ T13] ? __switch_to_asm+0x39/0x70 [ 264.048596][ T13] ? __switch_to_asm+0x33/0x70 [ 264.048619][ T13] ? __pfx_kthread+0x10/0x10 [ 264.048642][ T13] ret_from_fork_asm+0x1a/0x30 [ 264.048669][ T13] [ 264.283049][T12250] __nla_validate_parse: 9 callbacks suppressed [ 264.283070][T12250] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1715'. [ 264.410877][T12245] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1713'. [ 264.434231][T12245] gre1: entered promiscuous mode [ 264.439550][T12245] gre1: entered allmulticast mode