last executing test programs: 11.054635499s ago: executing program 0 (id=3512): unshare(0x62040200) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000000000000000000000078ab00850000002700000085000000500000009500000000001000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f00000f0000/0x3000)=nil, 0x3000, 0x300000b, 0x110, 0xffffffffffffffff, 0xd478a000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x33, 0x0, 0x0, 0x401}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x80}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0xc0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="1800020000000000000000000000000007445000f0ffffff1801000020796c2500000000002020207b0104000000000000a100000000000007010000f8ffffffb702000008000000b7030000f0ffffff850000000600000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x10}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x4, 0x8, 0x4, 0x0, 0x0, {0xf, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x48001) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r7, 0x0, 0x0) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x20400, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r8, 0xfffff789) r9 = accept(r8, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xffff, 0x992f}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0xc, 0x8, 0x0, 0x2, 0xd0, 0x6, 0x4}, 0x9c) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef", 0x11) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x14, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x4008800) 7.474953818s ago: executing program 0 (id=3544): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x50, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41ba327d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10885fe1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56d49fb6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e270255}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bd6b63d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f14acc}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x14) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x278, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0xd8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e6ba2a20012cdf97fd672a568fc66c41edb5998680d80eabbf79446b3ea840cc"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6ad98e7cccc72d24d457eb8549c81140"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_ID={0x64, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8d5ec8ae2f419dca5d135c09576bb047"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x114, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x54, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "48c4a38cdcc23dda09cdbdaffd719f5c585391f30c63723551aaf823e7bd373a"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2bd24ec56c5985a56a7a3d9f58d6bcd566b9a6aaea2580b0234aadd71a3bc24c"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c61eceeaaf553d2ebaf5f207f0031b420d64c0062e141cdb00d696a304008fb1"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ef2cacc2c73dc49fa27e79195f35d039"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "19baa409177e2550e50d3bcde2ac999375a8d5dd7ccf54e9cceaa3d7d36cc28c"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2058213137c921d6f3c03428bf97935f"}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000005c0)=0x14) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000000600)='veth0\x00') r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x8) recvfrom$inet(r7, &(0x7f00000006c0)=""/87, 0x57, 0x2003, &(0x7f0000000740)={0x2, 0x4e24, @broadcast}, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '^$#\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000010}, 0x20008800) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000009c0)={r5, &(0x7f00000008c0)='{-$\x00', 0x195002, &(0x7f0000000900)={@_ha_fsid={[0x2, 0x8a]}, {0x6, 0x7f, 0x4, 0x6e9902ba}}, 0x80, &(0x7f0000000940), &(0x7f0000000980)=0x3}) recvmmsg$unix(r8, &(0x7f0000002440)=[{{&(0x7f0000000a00), 0x6e, &(0x7f0000001b00)=[{&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/4096, 0x1000}], 0x2, &(0x7f0000001b40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000001b80), 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001c00)=""/13, 0xd}, {&(0x7f0000001c40)=""/70, 0x46}, {&(0x7f0000001cc0)=""/70, 0x46}, {&(0x7f0000001d40)=""/228, 0xe4}, {&(0x7f0000001e40)=""/154, 0x9a}, {&(0x7f0000001f00)=""/9, 0x9}, {&(0x7f0000001f40)=""/159, 0x9f}, {&(0x7f0000002000)=""/228, 0xe4}, {&(0x7f0000002100)=""/169, 0xa9}, {&(0x7f00000021c0)=""/195, 0xc3}], 0xa, &(0x7f0000002380)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0xb0}}], 0x2, 0x40000000, &(0x7f00000024c0)={0x0, 0x3938700}) getsockopt$inet_sctp_SCTP_CONTEXT(r12, 0x84, 0x11, &(0x7f0000002500)={0x0, 0xd6c7}, &(0x7f0000002540)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r14, 0x84, 0x6, &(0x7f0000002580)={r19, @in={{0x2, 0x4e22, @private=0xa010100}}}, &(0x7f0000002640)=0x84) setsockopt$TIPC_DEST_DROPPABLE(r15, 0x10f, 0x81, &(0x7f0000002680)=0xb, 0x4) r20 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r20, &(0x7f00000027c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x2100000}, 0xc, &(0x7f0000002780)={&(0x7f0000002700)={0x48, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x4050040) sendmsg$nl_generic(r10, &(0x7f00000028c0)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x30, 0x1c, 0x300, 0x70bd2d, 0x25dfdbfb, {0x15}, [@typed={0x14, 0xf3, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x8b, 0x0, 0x0, @uid=r18}]}, 0x30}, 0x1, 0x0, 0x0, 0x40811}, 0x80) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r20, &(0x7f00000029c0)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x3c, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r15}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r11}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8c0) setsockopt$packet_fanout_data(r14, 0x107, 0x16, &(0x7f0000002a40)={0x4, &(0x7f0000002a00)=[{0x10, 0x10, 0x4, 0x9}, {0xe00, 0x4, 0x9, 0x310}, {0x1, 0x2, 0x9, 0x5d3bf0a8}, {0x7fff, 0xa, 0x9, 0x10}]}, 0x10) r21 = syz_genetlink_get_family_id$devlink(&(0x7f0000002ac0), r17) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r16, &(0x7f0000002c40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b00)={0xd4, r21, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4841}, 0x40000) setsockopt$XDP_UMEM_FILL_RING(r14, 0x11b, 0x5, &(0x7f0000002c80)=0x240, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r22 = openat$cgroup_type(r13, &(0x7f0000002cc0), 0x2, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r22, 0x4048587b, &(0x7f00000032c0)={{r13, &(0x7f0000002d00)='{-$\x00', 0x40c400, &(0x7f0000002d40)={@_ha_fsid={[0x1]}, {0x63, 0x1, 0x5, 0x6}}, 0x3, &(0x7f0000002d80), &(0x7f0000002dc0)=0x80000000}, 0x5, &(0x7f0000003200)=[{0x3, 0x0, &(0x7f0000002e00)='--\xf3\\\x00', &(0x7f0000002e40)="d6cff0993f07aece5cd148d03d794ae7a553bb218800d4eb20fc34354e1db743bd200832962cb5972ba2944521d3e293cc7579c342e441d82f3d551ae3cf195cae610311de7650754e", 0x49, 0x28}, {0x1, 0x2, &(0x7f0000002ec0)='{-$\x00', &(0x7f0000002f00)="10ae6c2c", 0x4, 0x10}, {0x3, 0x4, &(0x7f0000002f40)='$&\x00', &(0x7f0000002f80)="ecc086d207608f44dc601a616068800fb97b4363c045014a324f1746be542798bce9a6578d3d02b73337873f7cfd79d9156f8f23ebd7e83ca348f89713836890793e3db254dc8aa097af9e4f4ff7d9f352982b2a9bd93b57d58c3fda6332275024f1f1fde15c8a7bdf939917a497ce75b41e3f0c0bfdc611ee398dc746dcf06b75ee9acf664fa885b5c3a5b80894058af9b337f05be4fda5709e9860e48ae0f1f439e54ab65de5916bc5935180763b6435957d", 0xb3}, {0x3, 0x9, &(0x7f0000003040)='0000:00:10.0\x00', &(0x7f0000003080)="f3b47ab57d72f970eda44466cb739d297066d5db7c2a37241e65aa6ec3c82fb5ccdaa74567c5cfc9654854b2cf86567c8c47425ebe7690ade298a6d92fdceedbbe4bae1fdd84f0569faec748aa17d4856b6b7dffc93dc017c6e48bc11c87cf5ce0acc2343356b3bfb5e9506f6e7e7116ba90c14f87ca0f41b9f2f3c6036c4831fd409e9681aa2899", 0x88, 0x32}, {0x3, 0x9, &(0x7f0000003140)='$-}*\x00', &(0x7f0000003180)="be1f28440214ac65e48963c8d911f2d9559b158cea032aba681930c8a109eb8c196b1889642a5490c688aac2fd8ea69f81fd60fcdfe0eee9a290860395e0b177fb8977b221", 0x45, 0x8}]}) sendmsg$DCCPDIAG_GETSOCK(r12, &(0x7f0000003840)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003800)={&(0x7f0000003380)={0x460, 0x13, 0x2, 0x70bd2a, 0x25dfdbfb, {0xf, 0x4, 0x9, 0x6, {0x4e22, 0x4e20, [0x4, 0x4, 0x1, 0x5], [0x8, 0x5, 0x6, 0x6], r6, [0xc, 0x6]}, 0x82, 0x2}, [@INET_DIAG_REQ_BYTECODE={0xdb, 0x1, "c133e82347e2b603537e8f13ddcba1af02a84dda4cf90fe0e44b7dfa89b3bc65c81456479f7c465fa4417bedc1d573ad4f9fc14e95214e3228105394a3f9a6cc85a52baa833bb7bb68813d1ea628f1b2469c39e67b2cc1d7c42f063012db948d6760205b900b95a11b4af0d1f3e9c8a02d432e0e0de8b7a8cabc74548354c3fcdc0862c2410d4bcfbb952346f9cae68c0cfb72fd7dc72ffe97c2d9fb7adf8942cdaa52a1038de1ebdd72ba60aa8dc4762e8a76721bf313b1afb82487896955d2b4726fcf77821c5f500beb7bc83c2f9adc5417b70f8dbd"}, @INET_DIAG_REQ_BYTECODE={0x103, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x38, 0x1, "60404ead40f5d84daab461f74d0af8dbe69ed2abc4d5a0bd82b91afb00c7c24c19c108273c91bed38af9a85abcc9464bfdc98f44"}, @INET_DIAG_REQ_BYTECODE={0x4e, 0x1, "a3e033196c1fc0146fa7a96131197478df07630f2dcd590d8d66fe723cb6e36e344ea7e499f340e132f0a0b4f8b978545e67a1d5aef7070e0f318129a2cffd8240578175ac0e875890fc"}, @INET_DIAG_REQ_BYTECODE={0x85, 0x1, "591ca26efc4bb102dceef53703ab2085840387de80393d6ce16010d81b1e1db82a292a9d303b8dcb29b3db2755e5618b2864690b31c990762b94688f56710490dcfe34bb45c2811c3d4151ec5be4a8c49d3398cdecf709edd6332e20defc0aa56eb2dedd4d0c3ab70f55a441b0aaee49df74b2bb15f0b53ec7c05defb3a15305cc"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "de077dabd8b7b1492493eb391bb54b7dea2bb397a2485b1e2d46de722e5139bf34b51cd9ec49e25a1463fe2d703bb51b744b"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "5386d37a106d83d7d0a22c86ec853fd773af9d922f5e03516b766788bf80fe8ac9c6d1b1d3e9a324e5644fc0b9760e33894f69b9d2d967625c63b8e962b723e06c496b82c5a25ef673dc34cbf2bb55acb1e5f41a321d68cdc0a58abc8a059f98898eaad6a73856e00cd66ce9286f50600f"}, @INET_DIAG_REQ_BYTECODE={0x72, 0x1, "935c0b739be26028cf1435dbdd8f6f4176d69b5a6132fbfbff7f8348533292fca5603290f97f1257b5eee5b49f7ac4b95c249e090cd150d452c022bc43581c83139f5f0d9a370f98d9abe6650050a108e091ebed9590d59c55618741ba7994e392b1582fa989506874e82ef97711"}]}, 0x460}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) 7.23531225s ago: executing program 0 (id=3547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0xa, r4}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000851000000200000085007dff3f000000950000000000000095", @ANYRESHEX=0x0], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', r4}, 0x94) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x80}}, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x6) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl2\x00', r4, 0x20, 0x8, 0x5, 0x7f, {{0x13, 0x4, 0x0, 0x4, 0x4c, 0x6b, 0x0, 0xcf, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @dev={0xac, 0x14, 0x14, 0x1b}, {[@timestamp_addr={0x44, 0x34, 0x6b, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x15}, 0xfffffffd}, {@private=0xa010101}, {@local, 0xe}, {@remote, 0x69}, {@multicast2, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x55}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x80042, 0x1, 0x1}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r10, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x3}}, 0x10, 0x0}, 0x0) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="91102d000000000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.268698314s ago: executing program 0 (id=3561): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x2d8, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00', [0xffffff00, 0x0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffff00, 0xff000000], 'ip_vti0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x5c, 0x2}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@srh={{0x30}, {0x2c, 0x3, 0x2, 0x6, 0x1c, 0x800, 0x925}}, @common=@srh1={{0x90}, {0x2f, 0xd, 0x0, 0x31, 0xbaae, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3b}, [0xff, 0xffffff00, 0xffffffff, 0xff000000], [0xff, 0xff0000ff, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xffffffff, 0xffffff00], 0xc0, 0x200}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa687}, 0x94) (async) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={r2}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) r5 = socket$unix(0x1, 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000007c0)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22, @private=0xa010102}, @in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x7}], 0x8c) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000080)={0x2, 0x0, 0x2}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$isdn(0x22, 0x3, 0x22) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2030000aaaaaaaaaa0086dd600101000008f6fffc020000000000200000000000000000ff02000000000000000000000000000100004e2200089078"], 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x1e, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r11, 0x1, 0x800000}, 0x14}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) sendmsg$GTP_CMD_ECHOREQ(r9, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r11, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 4.029987504s ago: executing program 0 (id=3564): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000004c000000060a010400000000000000000500000008000b40000000002400048020000180080001006c6f670000000000000000403a0000000800054000ffffff0900010073797a30"], 0xc0}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="90000000090605000100000000000000000000040800094000000003740008800c0007800800094000000004100007800900130073797a31000000002373228b65cde63f4c9dbbc9a6ae0007800c00184000000000000000030c00078008000940000080010c0007800800084000000090100007800c001b400000000000000009dcc7e039dfed0c0007800500150004000000100007800c00028008000140e0000001"], 0x90}, 0x1, 0x0, 0x0, 0x20040018}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0xc6e9f000) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x5000004, 0x6e073, r3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) listen(r0, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x22a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x200040b1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x7f00, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00050037ff0100007736fb0c020600ff000000000000001f5bdc627eea4b84a63f1188f4e7a188520344a5dab93ed506e01d85da48156cbc3e1c11f7cc108af9553259cbf39fb85ef93f4dc0184bf0e67f42475488d37d37459e9f8161f15722e8f8c3bb3f5f0ce0e1472d177b913f636c084c9e85d1e1aa5ab734fce557"], 0x3c}}, 0x20000000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/time_for_children\x00') r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020d00020073797a310000000008000a40fffffffc08000340000000140c0009800800014000000081480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000800034000000001140000001100010000000000000000000100000a"], 0xc0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$devlink(0x0, r4) 3.734129089s ago: executing program 2 (id=3565): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @dev={0xac, 0x14, 0x14, 0x3f}, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0xfffffffc, 0xfffffffd, 0x7, 0x7}, 0x3c) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c3578", 0x30) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1000}) 3.588370293s ago: executing program 2 (id=3567): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000140)={r0, &(0x7f0000000040)='\x98\x00', 0x201, &(0x7f0000000080)={@_ha_fsid={[0x6, 0x8]}, {0x1, 0x8000, 0x81, 0xfffffffffffffffe}}, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x2}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x1, 0xd, 0x3, 0x0, 0x20, 0x8}, @map_fd={0x18, 0x6, 0x1, 0x0, r2}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x445e}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x1000, &(0x7f00000007c0)=""/4096, 0x1fa0f8c757aae5d2, 0xa, '\x00', r1, 0x1c, r2, 0x8, &(0x7f0000000340)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x10, 0x7, 0x3}, 0x10, 0x10b89, r2, 0xa, &(0x7f00000003c0)=[r2, r2], &(0x7f0000000400)=[{0x2, 0x5, 0x1, 0x6}, {0x3, 0x1, 0xe}, {0x5, 0x5, 0xe, 0x8}, {0x3, 0x5, 0xf, 0xa}, {0x5, 0x5, 0xe, 0x6}, {0x2, 0x1, 0x6, 0x9}, {0x5, 0x1, 0xa, 0x5}, {0x0, 0x4, 0xe, 0x5}, {0x3, 0x1, 0xe, 0xb}, {0x2, 0x5, 0x8, 0x2}], 0x10, 0x7}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) (async) write$ppp(r2, &(0x7f0000000200)="fa99e8cff889f7d3dd5f123f5518b3c31e0270955b664554a1907f2753c6e96e25e5309c6c6d42354efd8bf3d85301eda2b7d9b9434f4abb55808a3c11d0266ef0711cfe287a913c4b258a25b7e9ed3ae08c9e4810438fc77839e2f87b2991af132d247984e8ce5fd9de6043240c7f0cd485f09f263ba47a45d9", 0x7a) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xab) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0x36, &(0x7f00000020c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @val={@val={0x88a8, 0x4, 0x1, 0x4}, {0x8100, 0x6, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x6, 0x0, @void}}}}}}}, 0x0) 3.212398671s ago: executing program 2 (id=3570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x6) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x9}, 0x1c) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000140)={0x54, r2, 0x1, 0x21, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x20019}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x2a, 0xe, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @supported_rates={0x1, 0x5, [{0x4, 0x1}, {0x60}, {0x1}, {0x12, 0x1}, {0x36}]}, @mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}]}]}, 0x54}}, 0x4014080) 3.08608598s ago: executing program 2 (id=3573): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r1, &(0x7f0000000580)="81", 0x1, 0x8041, &(0x7f0000000380)={0xa, 0x0, 0x0, @private1, 0x81}, 0x1c) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwritev(r2, &(0x7f0000000480)=[{&(0x7f00000001c0)="e7", 0x1}], 0x1, 0x2, 0x80) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@generic={0x63, 0x1, 0x0, 0xe}]}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@generic={0x63, 0x1, 0x0, 0xe}]}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000400)=[@mss, @sack_perm, @window={0x3, 0x7, 0x4}, @sack_perm, @window={0x3, 0x0, 0x5}, @sack_perm, @sack_perm, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0xe) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x7, 0x2000000000032, 0xffffffffffffffff, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, @long={0x3, 0x3}}, 0x14, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x40810) socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000003200)={'ip6tnl0\x00', &(0x7f0000003180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0xfffffffffffffd8f, 0x66, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x17}}, @redirect={0x5, 0x2, 0x0, @loopback, {0x5, 0x4, 0x3, 0x7, 0x501, 0x66, 0x7f2, 0x48, 0x2f, 0xf, @multicast2, @remote}, "000022eb00000000"}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1}, 0xc) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000001500)=ANY=[@ANYBLOB="020000000000000002004e1fe0000002"], 0x110) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x8}}) sendmmsg(r6, &(0x7f0000000100)=[{{&(0x7f0000000040)=@phonet={0x23, 0xfc, 0x1, 0xff}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)="9740f684ba6df3360c62bbc9f5ed047f6cd90497ca4cd8a43808c164e717307860948c21a383dcd7f33883bde13012d5473cc58dfc7c56553dbbe6561e59563f8fdff986293b4ccb18eb351c7b302a6356194637d6f80a51b79f247912747509f41370e33715b963bdc2c9b7f2b59792dd2115f9a14eef0160b257d9220255fbccef72dd5f7f289a2b36b900e7c2cd538cc29a5706c9cea79b802df483be749e3845db6951779b1062f2f383de14dbdac737fdc72929a3", 0xb7}, {&(0x7f0000000280)="a2b66e242e366277be8fa7e807b05c7d2d9f2e15924dc197fc520a3552a43ad5f3ac195cfd3967617c86fca8872c802307a7639ace997b819d5782ef599755df6a518c912887518d445d17489c90ae1bcbeede1d1b8f91e2b866ba6bbbe6d426073be997d4f093e6b64b5349682623c0cd5c3b6d60c8bd7c4c488e6d3c01eeb56428bc72f7c8e7c217e7d562e707f8a138f3b5e27b80c8e633ff0c8a5554d58b6fca7d26756ec4eaa4a3e0e127469984e0ffa1ed0d4e0dee32304527d975394193440c151b722fd0b7c4309d6f86228f836af9", 0xd3}], 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="9800000000000000140100000300000006f8a0cab69d51043094286be0c8f71c5254ba9fca3af8641a132ae1d5bbe2df6162e9885760e5cb2cabb913ef729e4428afb3e36e7b2710968df584de4b7e84ac1a50e7fe51dcc375bf7e852381639ffb7adee13164e9376b6ad15d3a625ffb4d6a85e3df5bea9bbc334b07e5cc1c252e795446bbdcfda1d4831d08dc984fcacdc4a563000000004000000000000000ff00000068070000b24cad69c72df997e3984980c69331e177680a3dcc589f401ec2f9ca030b0da957f84fd61edc6e6ba14a974ed6d1000080000000000000001801000008000000ed6c00c162b7905464b882a6e147c8816ef0b886604f5be9c817d1666de29a10d5b322ffcdadbcfe75751fea63aef45eb34186f3ac4208e6a1c44f52de7347fce7f72c74e0d14ba08128cb2e0cb6973c068c32bc97671c9565c82fa9be4e69475128e345927dac9753180000000000006000000000000000bc0200009f0900002cbe0191937f38527f69aac5a0bce26c6d9d55537e2c7e61bea792e863e65defedf6a0bfdb9d9d827c1e53bb307c6c24b839157c6afbda38b1ee66a2f20ad98bd1ac71d366470e4ae6d128aa800000002800000000000000090100060000000036a4b84ef5f7c30d1c911fe2765e35e9210000000000000010010000000000000100000004000000f19c26091d400d2bf57825255927e69689bfcb3dfc8c7339c8fe14d5b758dfaa211cb72435789a23ea2fe29e42f023ed8211e5bbe86de7d225c5dc3316288deb4d7afc9b833fd01ac5a64609714c80496b40161ea89e39f2f65a3b1ce8b479561b481c3753d67eb6ad80998d7902587ed311f1a46934f34a0539bff56b6a3038dfa860175d009c2db12855cd9ed503358e8731255e93bb8c90430b43e7691524da54e54e1f038d78cec4d8ca9eb728507db6b667b4d6c1a472be931cfa4d628c3ac86e8e810cfda42ee94925004a6f37bec296bae2d9898eb2dc62708ffc0d354b6c4d44293faed008931551f2c783d5fc37045e28f0918e530a2943ca00000010010000000000000a01000002000000d4c980a4e88ac67e77c8be61cb6d4a10b3cbf51c5e52cbc3c64fb77118eb6553a13360e2ad1f381f72db02931f2f7245f3c32a4ea5980df32ffb2b69dd0bbe8bc440916726cb65fe5f23797a21181d5391d92f94b20933af38d9c0a5cea04e8081ba78c92bd56e15c8b105113309b9436050bd554daf78cf063bd28666c35497a13e63ed007c5e167341c54a2466b0df1074ad0f4cfa12b5d4812f0959f18ca07124cc499876a4017d4070b9ae7dc8c1dbe1151600ade449a5fd140acee9cf0a439f388c8ec60f9d878158131f976047683d1cdf57431f55f170435674d81e649c05cd58ebbdbbbb0ec6dfec8697a9a95995a950f8bd5f64d8287a6383000000"], 0x400}}], 0x1, 0x20004880) 2.228309473s ago: executing program 3 (id=3581): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000047c0)=r2, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000011040)=@newtaction={0x60, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x3, 0xffffffffffffffff, 0x3ff, 0x7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x48010) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x271b, 0x2, 0xd09c}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x34) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r5, 0x701, 0x0, 0x25dfdbfc, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x24000040) mkdirat$cgroup(r3, &(0x7f0000000200)='syz0\x00', 0x1ff) 2.115108643s ago: executing program 4 (id=3583): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="4800056800080000f2ff00"/20, @ANYRES32=0x0, @ANYRESDEC, @ANYRES8=0x0, @ANYBLOB="fe88"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.066160538s ago: executing program 4 (id=3584): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup, 0xffffffffffffffff, 0x2f, 0x22, 0x4}, 0x20) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000240)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044090}, 0x0) recvmsg$unix(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x1402, 0x400, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x4004000) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)={0x34, r3, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x8040) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000200000280012800b00010062f2696467650012a300020005002600010000000c002e0000000000010000000000"], 0x48}}, 0x0) 1.962127698s ago: executing program 3 (id=3585): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) unshare(0x8010100) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffa888}}}}}}}, 0xfdef) 1.802918219s ago: executing program 4 (id=3586): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000071123500000000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2e1}}, 0x7, 0x4002}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2e1}}, 0x7, 0x4002}, 0x90) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xff}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x48d6}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010003b0c28bd7000fedbdf8eb4000000", @ANYRES32=r3, @ANYBLOB="0008000000620000300012800b00010065727370616e0000200002800400120006000f00f321000006000e00000000000500130001"], 0x50}, 0x1, 0x0, 0x0, 0x180}, 0x40080c0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (async) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) accept4$rose(r1, &(0x7f0000000040)=@full={0xb, @dev, @rose, 0x0, [@bcast, @bcast, @default, @default, @bcast]}, &(0x7f0000000280)=0x40, 0x80800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000210"], 0x18}}, 0x0) 1.522601808s ago: executing program 4 (id=3587): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0xa0, 0x1, 0x1}, 0x1c) (async) recvmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000400)={0x1f, 0x1}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x4000000) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x14, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r1, 0x4, 0x3ff, 0x9}) r4 = socket$kcm(0x10, 0x2, 0x10) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x1, @remote}, 0xa}}, 0x26) (async) sendmmsg$inet(r6, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) close(0x3) bind$bt_hci(r2, &(0x7f0000001800)={0x1f, 0x1, 0x1}, 0x6) (async) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394", 0xf}], 0x1}, 0x0) (async) recvmsg$kcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) pselect6(0x40, &(0x7f0000001680)={0x8, 0x4, 0x8703, 0xffffffffffffff7e, 0xf, 0x101, 0x800, 0x7}, &(0x7f00000016c0)={0x0, 0x9, 0x0, 0x4, 0x7, 0x1, 0x4, 0x9}, &(0x7f0000001700)={0x3, 0x10000, 0x8bf, 0x9, 0x73b, 0xa1a, 0x7, 0x1ff}, &(0x7f0000001740)={0x0, 0x989680}, &(0x7f00000017c0)={&(0x7f0000001780)={[0xfff]}, 0x8}) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800900068004"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@deltaction={0x90, 0x31, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x24004000}, 0x844) 1.063575452s ago: executing program 2 (id=3588): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000d0a000000000000000200000604"], &(0x7f0000000f40)=""/4089, 0x96, 0xff9, 0x8}, 0x28) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000140)={{r0, &(0x7f0000000000)='\xe6#)-p^$@!\x00', 0x240200, &(0x7f0000000040)={@_ha_fsid={[0x3, 0xffff0001]}, {0x3, 0x6, 0x6, 0x6}}, 0xb49, &(0x7f0000000080), &(0x7f00000000c0)=0xc8ee}, {[0x8, 0x5, 0x0, 0x4]}, 0x80, 0x1000, &(0x7f0000001f40)=""/4096}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19e5328759f044c9be0000000500008ebb57b300", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) recvmmsg(r5, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/9, 0x9}], 0x1, 0x0, 0x18}, 0xb7}], 0x1, 0x40002021, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x1000a8d0}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) r10 = gettid() r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r9, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r7, r3, 0x25, 0x0, @val=@uprobe_multi={&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)=[0x7ca, 0x7ca], &(0x7f00000007c0)=[0x1, 0x2, 0x3, 0x3, 0x1, 0x5], 0x7, 0x2, 0x0, r10}}, 0x40) recvmsg$unix(r1, &(0x7f0000000540)={&(0x7f0000000300), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f0000000640)=""/206, 0xce}], 0x3, &(0x7f0000000500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000380), &(0x7f0000000580)=r7}, 0x20) r14 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$NS_GET_PARENT(r14, 0xb702, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbf59c09c55f1086dd6100000000102bfffe8000000000000000000000000000aa0000000000000000000000000000000186009078002d0600990900000b000000"], 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r12, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x14020}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x124, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4046014}, 0x800) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r17, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xf, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x8b}, @call={0x85, 0x0, 0x0, 0x3b}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r15}}, @map_val={0x18, 0x2, 0x2, 0x0, r16, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r17, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, r18, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r19}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.053864864s ago: executing program 1 (id=3589): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYBLOB="00000000223803001c1b3fdd9d516dfdc96c61ffffffff000c0002800600010000544fa53f0008000500", @ANYRES32=r1, @ANYBLOB="08001f0005000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x240400c0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYBLOB="00000000223803001c1b3fdd9d516dfdc96c61ffffffff000c0002800600010000544fa53f0008000500", @ANYRES32=r1, @ANYBLOB="08001f0005000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x240400c0) (async) 882.533984ms ago: executing program 1 (id=3590): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xffffffff, 0x4e2, 0xa000}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4600}, 0x24044800) 881.665767ms ago: executing program 3 (id=3591): r0 = socket(0x10, 0x3, 0x0) r1 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000cc0)=ANY=[@ANYBLOB="2400000076001f0300000000000000000800a100", @ANYRES32=0x0, @ANYBLOB="0c000d8008000300b1"], 0x24}], 0x1}, 0x24040080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x4}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200440a5}, 0x0) 867.345187ms ago: executing program 0 (id=3592): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000000)={{0x0, 0x3, 0x9, 0x7}, [{0x8000000, 0x0, 0x3, 0xa}, {0x8, 0x4, 0x1, 0x31}, {0x10001, 0xc, 0x10, 0x5}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x3) (async) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000680)) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000000c0)={{0x33, @multicast1, 0x4e22, 0x4, 'wlc\x00', 0x2, 0x4, 0x5d}, {@rand_addr=0x64010100, 0x4e22, 0x10000, 0xffffffff, 0x9, 0x8}}, 0x44) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) 750.458342ms ago: executing program 1 (id=3593): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a00060001117e6d92600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6e001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79811835d3a71d85667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000011008af26ca6823a45b8f3ef47b9daff4270dff3beac799e87bd711ac353", 0xd8}], 0x1}, 0x94) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x581402, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'pimreg0\x00', 0x800}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="e002000040000100fcff0700fedbdf250100000004004780c0020180bc02108008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x2e0}, 0x1, 0x0, 0x0, 0x400c051}, 0x4004024) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000240)=ANY=[], 0xfdef) 686.558964ms ago: executing program 3 (id=3594): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x19) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000002bc0)=[{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000000080)="f2f4d3333581a12dbcc2576e866ca1c5d899df637d00e4318829eb8b66d78d4afd1016f8ec257740dec697a77552a70c5611f53ef182c10ee7c119651f04dead", 0x40}, {&(0x7f00000003c0)="b71812561a74d8c54d4d1fb69fc98404de8694b68dbf566c61ffe1acd45829562334f640211f18fc49238e1fb0d0e3bc901f0f280e66e6be9ab5dcc140522fd036bcdc2659d6d88b7488e024d0e78e18e81a6d9c43755f499fb274b8e01df1b511ba829b82e63589a67a1b6295c6f202d9c38f5a4dea5846f2c508ac6b4489f4bd51ceb731ff70bb4c1c74d4af89fbe1", 0x90}, {&(0x7f0000000280)="b3e31cab0d6b0e7c295501492894df957d807cdad6c84feb391377c8a680d900b77aeaf91e17db6bd112915cc86b118ad822abc3c11ce1283f6c6a54d002c5758fa14fe514ac1cb3dda66df8324151ff2c79dfe715314d1b7b64e4c20b356d61b073bd8d837693463db8bb3ef4508c5430df0d53ee3fd0044401", 0x7a}, {&(0x7f00000000c0)="36ed994f59b65997c8f5fefc91852cf5e1ffc4", 0x13}, {&(0x7f00000004c0)="ab513c9f93d60f515750566fa43498d8a136fb0c63cdd7e26530ff344a4c79b5efcd", 0x22}, {&(0x7f0000000500)="dc2f2c3d2cd6778dee9d6eb586c046282a3bf810dd483f8f0afd99c944d9e17858b216a70be23d8865003afbb3651da9821d68684ac5d13f26f80066fd39f3a7444383", 0x43}, {&(0x7f00000005c0)="5935746f90188e37d4449ac2c91f044d887845deb580a9ad59679e64a60b66d0aa4015bf7af1122e723c6477602fc854d21c73ca19a0ec6cb8f233f0beefe762e695855292f5f06e02e40c544bfecc5dbbe8d36f335aebbc398e350e65ea98681ecdec7ac58538d013e56f296ed1c4f32e6a8716a2c2409f379ecbef8547bac58480369ccaa4d575156e4536f5e76348b78fc60b1b0ec71d3596c4d52b649073e1e4f595520d37b7142dddd42068503c7ce6e5125e7048ac4eb47024", 0xbc}, {&(0x7f0000000740)="2282f659343ace55ed13aff19eeabcf444e8cda763763303d3dffcc7f4c0fcee63ddf51dca54052b43bb8d4cb1db6dcb40d87eaa84183645d6f43d59530124f869d5fa4d8cdebf01b215b5e8977253086e997f8f4b481c8d1718f8158151e1071fba25bcbb3eff1f5c211248bb565b1d205246c3fbf404978c4ad4d22a6962098ce42d6a5d225f92b275645d7879b2ac39309ec685c24e410de3d79395502c409bd86e", 0xa3}], 0x9, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], 0x1d8, 0x20040000}, {0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000680)}, {&(0x7f0000001c00)="f3720621a21b66c5c5af5f89225bb538526942b9ff935c1fcc282543fc65e0821d7abe7af2731ea2adb0ad4fa00b5c9f2494378ea6ec3246ab72a444426c852b328e97b2b9b2b129bfd11e80704dad5e57f8b467bc0759684021ca1f76f36dfb8006abe6fc145b53a6230d55aed1d199e181e791cfd1c9e4124ca3eb943004a2bcd00737f50a7f92073ccc90775bafc6948e212ba0cc2ea217d9533b5f353c7e5ef28f1ff35f8c1efdd51997042ac6d2ae3c42501a3452990785fdf056732b699e0f67ffeb3ebc7434eed1d98c808f211032aa931de660deb06f7c0f50cdf1f41395984b2ebb20464c5224c5", 0xec}, {&(0x7f0000001d00)="afa2f66cb77220f86ce037275a7283185ede9b2f3ffa53eef3fc14dc81d2a637d82456563e79319adec361fec8debda93ef4a06228aa14e5fa13b20d9653bd3ffc8d262a1bc64026eaf20a538eaf2ccd133c7970e71a6cd55b04f2a3bb36722769fc45cbc9801658929bce2ff4fdd78c3131e78976fee8a416066d7c6dbf58da49ee0c73d749da3d8bca59f973ddd7e0f88c3931ec60ccc4acc24b7301a8a22dfc74985e", 0xa4}], 0x3, &(0x7f0000001dc0)=[@assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x48, 0x60000}, {0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001e40)="1f491c13b1f898c8a0205725ba5ed1958fa3faf12450fea8e144759119680323fa11275d0f5a90f68af709f67f24bb8768b67a06f837a729e087d3dee3e4fb1256788f8af2f72b0a5b9e4d019e8ffeda86457ef7c4092eb15c358cf44fcdb70819625df19794573bfb1de181368fc396d6bcc722458769031565bb3f647c0ab57c620ba750ead10acb1f9968f9f0c04cc6ba8965012691aee622979571907a6d96a9092c145e1bdb03676ee5e6dc1d42fa57514fb210de9b73a0890a5a07703e2cb079d2a0daf8c3ad87654b687dea3c78a8", 0xd2}, {&(0x7f0000001f40)="76048dc4c8d7d89212701e668fb66e2ecd5f8b0c4b170709d4a93fd972ca59b37df673508ee7c78d35d08a524467caceaae895630603df3378", 0x39}, {&(0x7f0000001f80)="75f7eee54bda19af31f028ef9e711e387b372bf6c60cceb018398010ab703ff08a89830dd5ee1f18b598d625223c94dba315af43769599b9ff7a336b01e1d12cee7cba50c4a5674dacb88253389684d7779bf2222da83e185c21cab0c302a5daf3eedd81b9a489e58e3ac7e215403213e60c95143a9bfe9c6094775fabc85cda4135694c008dc7768392b96066d1f773202c0c7e5f052dde251dea83658c8f4a187baf63ec83713241e09f7fc4a07e40c3360ff8f1057ffe9c4b9df0551b224cc20336119c671feec84ea672526ff58f0657c64c4cb37efdabe244adee1763", 0xdf}], 0x3, &(0x7f00000020c0)=[@iv={0xb0, 0x117, 0x2, 0x97, "c9a557d5cb2e5f9c70776ecd70a1e5e5aeddfdc78cd06ca43c3d06bf04bfa41899f4093b50dd1dbf4283d75352cfceddd7134b9b92bced9b60bd913a24da58f23ba52c0671e5697e66639afc91a7228872154ad9ea65668ea96085b204c417d22eb5a084d89eb725d4011a48012eb2e88d4688a4d173e124cd2628d268bf4221d68a828eed3a33b4e7fdb60250fe3811af2f81ef85baec"}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0xe0, 0x117, 0x2, 0xcc, "bc647b856f3f775b5abd1fd46acc2861770ae966c48430495f41573df218f016ac1061636a196cb83b6da6f1a7091243ba277f8f13c3172f425b773b08e57b9761f51ae4badbb01afa0a9785576a5321e2a6333e87314897329e35af186c59eddefb99a1944054d5285cae0ccb4dda87b073cc0cc5bbb10a7cdf6bcfc01c23b2c480227e86d2e7d7dde368ed8091a49a9ddb467c6e87b95a07fbba2c71d28b46d36b9bdb237424cf5ebac64d47a852a7b77e47f0440d7aba12be40d66455442418fbc3a332a1789a3619fca5"}], 0x1a8}, {0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002280)="a3640b16e203b3761136e6798c023d7878cdc111524206a160fd5e864ff086a3bb0efde6a4f4d7883f855ed42630c8e519c5aadc2832784cfe3c307b62551d7bffa2aa793d2be90d51241cec06df58951f46d768dfe418ced8e43b1dbfea29bd8435ca30bbe04899e0858acbe8440d0dc9dba52d70756e5d489dfab63260917a79313a5ce357e5d9bac1b654afaa1db6d14191ae692a1256dc25eab8f20cdabebe7fc4b961b7a6c6887bb1c60b22a50eed653a76abfb1f2e05cf1514", 0xbc}, {&(0x7f0000002340)="beca24c23df2002f2af1b7a24002bcca0fca15f90bc9fc8bc184381fd8f9516846be672113e6c17de813703dea715cd51dbb726c172a8a2c0d46063b2ad3f6f98a30020d1cd77420bba9ac21eb08f372cd0d8181cb5965da06c9e105c450a04dd80a35bb5c7110d441c53a5551c1f41d8c14a1787c4d078ed319e7a8e746", 0x7e}, {&(0x7f00000023c0)="cf7f2c398689b82a50c25303aa18f6a2539e5acf4d3e46320f7fd7057a4d67fc679227fb36060deb3798265df44a6db7aabf687e17b8974aeadebd9c7b17c5fc9383c842c9185dfc4a4d6ab61aade500baf08d951a032b4fa5e2222d5f9811e13a028af1efc067046fcc3c97c9546f44d82a37ff2708a94dcf9bbe6cee8ab1b9d105947dd12236271481677709d12838997b3ebd478985879445d885e736fb514012", 0xa2}, {&(0x7f0000002480)="ffaca42ddd25fdd493f2fd87123c4a6f95ce4936eef8ee5d3e699bd86d7de9f6965aed2a69b8ffaaf575805d18d9ea003f62a04c4e47bec64f6fe154c6db89c714924cd95427d92fec7c714c2f041917385d1be918e20dd009e5619a8f5b8a3a8dddf2295e0cc1e30ae0ad4347196353822ea5a62332536c3cd499065fb43cd201b55869f6f96408b7c6e0ca29a37a3d3da86de8961f764d7bed28c6a8a50c73ef40d7d049b3e4cd44fc", 0xaa}, {&(0x7f0000002540)="60f07442655c387ac8cc0c3728e5a3646acac104117d73c2cf290cb72e3027116b6ad6088f40e9abeafb82f312f379a25af2df6fa289d35a67a6b0fb987b", 0x3e}, {&(0x7f0000002580)="05f2407f7fc50f3799d79a4ca16ad4d722142c623f484b99883004edcc92d2c01556bd5688ca18961709ae51b07d4bcc9e02", 0x32}, {&(0x7f00000025c0)="c4e7b40311034c570013e328e516c55fbc3f7e6f4329b440a41f55cceb2f6a5357ef8e497a915f39f64dd2a58652d51685f92d202a98333ad86e42ebda9521718c2702536aa526a1d407a78615679a24f86588e0b8dc", 0x56}, {&(0x7f0000002640)="5164f1d7733dd851c70e3b46de09e21b882a0ea2ad087e396ebb4a045690d0158585158a117e6ea83ee8e16a6b0702c93e25f21402c359be7830fa2148e6cb5eee78e67a2c6cb51f8c7d72e502d97c83fd33b809073620fd4bc7497674b496c24f0da270e3f3c7d90f08de45efaabdb2e12172ab76ba8c6890f6e3bd76f82bff5cb9fc1e503cc9cc2fc65147bd9b0692f769f225407c08226b78f82041e628cf1dc4b0d6bdc1c65506af606c79f32a", 0xaf}], 0x8, 0x0, 0x0, 0x40000}, {0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000002780)="8dc3bc1e5d9590b54b1c3ddae123b687416c624ebbe3dc9d5670b7ff983075768076e2a04ca2797ca532f603f3aaf702b31d96bb4d15b9b180a8de575f84166092d340ff0f51f09d1c6f54c48db16533d62d5cf229893c643139148a269986d58bb6bf5ea8f711f12234fae1d36047ea3681c7ddff1a9e9d4de82d68868a4bb8ea50cca29125c96080f1f4ecb8cb39130402f52a137851cb68a9d112d951dfe9afba9c", 0xa3}], 0x1, 0x0, 0x0, 0x8000}, {0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002880)="d0013c547ebf65c94adf1851dc5ef88656593317716658ee9461eb4d8ad51b75c328b955bb6a5f4d2e3e83ac754495fcd28970a23e6bfcc22af636beefcaf29485b04f710e3a3a879ab866feaa71400231537e6d6ccc36a72a63483535845929049f253e50958f9a82f6ca9b02e918bd8e228e0dcc229306f1c9b9b0ff4a32b9a57b6d4375730cb8d03afbbbc01b89c200b105ce130619b3bcc6dbffa33f14872763de2b4112f27ad6b4e2cf11040b", 0xaf}, {&(0x7f0000002940)="8a6e01117f5527939b8d6c7ab5e30166eaf0b5ac7a9c9844f84a7fdb018072836abba04c420579326f59b98f89deb55e11f1a1a939abdec71a16ed5240abf2ef9913a47b7769293fa68123dae78c26c7b99cb7680545dcb3c13e980e", 0x5c}, {&(0x7f00000029c0)="26910d6a04457a545c5d87f91a46daf0c16135e1af8b4b029724440c020615960b0e85b4aae245c75aaa38cb02c108e1d562ec253c9fb4cc322c56bb3a913c0bfa64e5335d47dcf77eac2ed8ba7a1f4820fe3b204eeea853a11dd59dc67b3de67a98513ead4e8cb8d233946832af6a044bbd95a0c48c852b3245c1d36bc32bd9e76195129237bd8e8efcc210c7cbe92e7aa42fa9c8520d5a682906f22693b715eb1ffd88d6a3a8c5f2f1bcb035bb936314bfd82a", 0xb4}, {&(0x7f0000002a80)="ac974b9b269def2b6377498b3c5826f742cb3bfc3d29d20334901925", 0x1c}, {&(0x7f0000002ac0)="f3862211c6", 0x5}], 0x5, &(0x7f0000002b80)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x30, 0x10}], 0x6, 0x8040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600004008000300fe4910f6313d86fc17c7ecd3b43a5f2d2c2269c2ba6122b506ccc6ce4d4fb5e023", @ANYRES32=r4, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="e00000000d0000000000000013000b0063616c6c666f7277617264696e67000013000b0063616c6c666f7277617264696e67000008000a8004000280500003800c00028005000100110000002c00018014000300fe8000000000040000000000000000bb14000400fe88000000000000000000000000000114000180080001006401010208000200023c0001802c00018014000300fe80000000000000000000aa14000400fe800000000000000000ff01000000aa0c0002800500010021000000080005400000007f0600074000"/216], 0xe0}, 0x1, 0x0, 0x0, 0x8014}, 0x4040) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24044800}, 0x0) (async) unshare(0x2c020400) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmsg$TIPC_NL_NODE_GET(r6, 0x0, 0x5) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) (async) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) (async) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async) sendmmsg(r7, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 685.667586ms ago: executing program 4 (id=3595): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000001ff4e10bb3edf250200000047d903196c6f000000000000000000df0000000000000000000300"/52], 0x30}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0xfd4badcd6aaa7a73) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r4, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10, &(0x7f0000001380)}}, 0x10) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x71}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @ldst={0x1, 0x0, 0x0, 0x3, 0x5, 0x6}, @jmp={0x5, 0x0, 0x7, 0xb, 0x3, 0xfffffffffffffff8}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffd}, @call={0x85, 0x0, 0x0, 0x35}, @call={0x85, 0x0, 0x0, 0x92}]}, &(0x7f0000000240)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000280)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x0, 0x3, 0x8}, 0x10, 0x68c3, r4, 0x7, &(0x7f0000000380)=[r5], &(0x7f00000003c0)=[{0x3, 0x3, 0x5, 0x1}, {0x3, 0x5, 0x5}, {0x0, 0x5, 0x0, 0x8}, {0x4, 0x5, 0xa, 0xc}, {0x2, 0x5, 0x1, 0xc}, {0x5, 0x4, 0xd, 0x2}, {0x2, 0x5, 0x8, 0x3}], 0x10, 0x2}, 0x94) (async) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) 555.407162ms ago: executing program 3 (id=3596): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200100d4}, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000000000000000000d0aaa0000000000000100000604"], &(0x7f0000000f40)=""/4089, 0x3c, 0xff9, 0x1, 0xfffffffa}, 0x28) listen(r0, 0x0) (async) r2 = socket(0x28, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000000100)={'vcan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}) (async) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) (async) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1}, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xfffffff7, '\x00', r6, r1, 0x2, 0x3, 0x2}, 0x50) (async) close(0x4) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000000)={0x0, 0x7e65, 0xffffffff}) 501.795811ms ago: executing program 4 (id=3597): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x118, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dvmrp1\x00'}}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x14}, 0x2d6}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x78}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb3}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x40, 0x107, 0xfffffffe, 0x0, {0x14, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @uid}, @generic]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xac}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd7000000000400200000008000300", @ANYRES32=r10, @ANYBLOB="0c009900d308000079000000080026006c0900000800a08d1d4a2a390800270002"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x94}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8004002d8030000a80050008"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 402.809229ms ago: executing program 1 (id=3598): r0 = socket$alg(0x26, 0x5, 0x0) accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000100)) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511ce", 0xb9}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:'], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r2, &(0x7f0000000340)='devices.allow\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000200)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) (async) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000200)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400020601080000000000000000010000080c00078008001240000000050500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a69702c6d616300"], 0x54}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180), 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180), 0x4) splice(r2, 0x0, r4, 0x0, 0x8, 0x0) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/7, 0x7}, {&(0x7f00000006c0)=""/215, 0xd7}], 0x2}, 0x0) (async) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/7, 0x7}, {&(0x7f00000006c0)=""/215, 0xd7}], 0x2}, 0x0) 402.114546ms ago: executing program 3 (id=3599): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r4, @ANYBLOB='.\x00\x00\x00'], 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x700, 0x7800, 0xffffffff, 0x3, {{0x16, 0x4, 0x0, 0x16, 0x58, 0x64, 0x0, 0xa4, 0x29, 0x0, @broadcast, @multicast1, {[@lsrr={0x83, 0x17, 0xcc, [@empty, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}, @generic={0x44, 0x2}, @ssrr={0x89, 0xb, 0xfb, [@loopback, @loopback]}, @ssrr={0x89, 0x13, 0x6f, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x84, 0x3, 0x4, [{@broadcast, 0x6}]}]}}}}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x20, &(0x7f0000003e40)=""/222}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000680)=ANY=[@ANYBLOB="0180c2008d00aaaaaaaaaa1f86dd69c315be00181100fe80000000000000008000000000002fff011b000000000000000000000000014e244e220018907804000000070000000300000000000000"], 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f5ff0000", @ANYRES16=r2, @ANYBLOB="04002cbd7000ffdbdf253a0000000c00990004000000080000000600650000040000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x48011) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet(0x2, 0x2, 0x1) r11 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r11, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000980)={0x34, 0x0, @multicast2}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000bc0)='\b\x00', 0x2}, {&(0x7f0000000400)='\x00\x00\x00\x00\x00\x00', 0x6}], 0x2}, 0x4004800) writev(r9, &(0x7f0000002180)=[{&(0x7f0000000b80)="2eec711f70abb5a31ead08c7571d8dbe3513461cdae3e277bb4a0c321145a64f7d3038a9", 0x24}], 0x1) 297.818982ms ago: executing program 1 (id=3600): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e2b, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x77f}, 0x1c) getsockopt$inet6_mreq(r2, 0x29, 0x1, 0x0, &(0x7f0000000740)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) socket$inet6(0xa, 0x803, 0x6) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e2b, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x77f}, 0x1c) (async) getsockopt$inet6_mreq(r2, 0x29, 0x1, 0x0, &(0x7f0000000740)) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) close(r3) (async) 109.669832ms ago: executing program 2 (id=3601): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = gettid() ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000000)=r6) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000300000000000008001300", @ANYRES32=r6, @ANYBLOB="08080500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x38}}, 0x884) 0s ago: executing program 1 (id=3602): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x4c, 0x2, {0x10, "000000000000000000001000000010dc"}}}]}, 0x48}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@rr={0x7, 0x3, 0xdd}, @generic={0x0, 0x10, "ee0dd9de36ed4bcc5b4e23737a58"}, @timestamp_prespec={0x44, 0xc, 0xa, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0xf, 0x0, [@dev={0xac, 0x14, 0x14, 0x2b}, @broadcast, @broadcast]}]}}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001e000100fdffffff000000000200000001000006000000ff07000d002ada000008000100640101026d009db52b558e4f0eebfff4590ff101d9487c0b9774534cc7735103c3245e63e0055f99f7e7b1f4f7ba4b6e91c5c7de6805347d81fc07c8f71920ea675b1dfd"], 0x2c}, 0x1, 0x0, 0x0, 0x42812}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB="0020000000000010"], 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x20000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x44, 0x20}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)="c9b970a518ab", &(0x7f0000000140), 0x1003, r7, 0x0, 0x2000000}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000000140)=""/83, &(0x7f0000000080), &(0x7f0000000080), 0x6, r7}, 0x38) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f00000002c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2c000000170a01e6ffffffffffffff00020000000900010073797a30000000000900020073797a30000000"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newlink={0x1f4, 0x10, 0xffffffffffffffff, 0x70bd29, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0xd422864fd73fa2a8}, [@IFLA_MTU={0x8, 0x4, 0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_VFINFO_LIST={0x1b8, 0x16, 0x0, 0x1, [{0xe8, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x200, 0x12cd56cb}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0xf4a5}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xcb7, 0x5a8, 0xfffffff7, 0x8100}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0xc65c, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7b8}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7fff, 0x5}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x9bf, 0x74, 0x8100}}, {0x14, 0x1, {0x80, 0x96b, 0x7, 0x88a8}}, {0x14, 0x1, {0x6, 0x409, 0x1a5, 0x8100}}, {0x14, 0x1, {0x2, 0x717, 0x3, 0x8100}}, {0x14, 0x1, {0x80, 0xaf3, 0x9, 0x8100}}, {0x14, 0x1, {0xbdf, 0x29d, 0xffffff2f, 0x8100}}]}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xc, 0x8a4, 0xd}}, @IFLA_VF_TRUST={0xc, 0x9, {0x9, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x3, 0x7a}}, @IFLA_VF_VLAN={0x10, 0x2, {0x9, 0xc68, 0xe7ee}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xc, 0x100}}]}, {0x84, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x6dad}}, @IFLA_VF_VLAN={0x10, 0x2, {0x39a1000, 0xf72, 0x80}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x6}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3ff, 0x7}}, @IFLA_VF_RATE={0x10, 0x6, {0x7b, 0x93, 0x7}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x0, 0x8}}, @IFLA_VF_RATE={0x10, 0x6, {0x1, 0x0, 0x5}}, @IFLA_VF_VLAN={0x10, 0x2, {0x5b, 0xc91, 0x10000000}}]}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4c800}, 0x8040002) kernel console output (not intermixed with test programs): _fallback+0x1d82/0x22e0 [ 401.434242][T15210] ? __pfx_gup_fast_fallback+0x10/0x10 [ 401.434266][T15210] ? is_valid_gup_args+0x11f/0x200 [ 401.434290][T15210] ? get_user_pages_fast+0x4d/0xb0 [ 401.434314][T15210] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 401.434342][T15210] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 401.434370][T15210] iov_iter_get_pages2+0x5e/0xa0 [ 401.434395][T15210] __se_sys_vmsplice+0x7b3/0x1490 [ 401.434438][T15210] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 401.434458][T15210] ? __pfx_futex_wait+0x10/0x10 [ 401.434514][T15210] ? vm_mmap_pgoff+0x3b1/0x4f0 [ 401.434574][T15210] do_syscall_64+0x14d/0xf80 [ 401.434606][T15210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.434626][T15210] ? trace_irq_disable+0x37/0x100 [ 401.434649][T15210] ? clear_bhb_loop+0x40/0x90 [ 401.434684][T15210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.434711][T15210] RIP: 0033:0x7f00b739c629 [ 401.434730][T15210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.434746][T15210] RSP: 002b:00007f00b82ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 401.434776][T15210] RAX: ffffffffffffffda RBX: 00007f00b7615fa0 RCX: 00007f00b739c629 [ 401.434791][T15210] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000008a [ 401.434804][T15210] RBP: 00007f00b7432b39 R08: 0000000000000000 R09: 0000000000000000 [ 401.434817][T15210] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 401.434829][T15210] R13: 00007f00b7616038 R14: 00007f00b7615fa0 R15: 00007ffe5a368078 [ 401.434863][T15210] [ 401.829823][T15235] IPVS: set_ctl: invalid protocol: 4 172.30.1.5:20000 [ 402.071262][T15249] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20001 [ 403.143912][T15252] lo speed is unknown, defaulting to 1000 [ 403.164795][T15252] lo speed is unknown, defaulting to 1000 [ 403.370154][T15271] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 403.487434][T15278] netlink: 'syz.4.2304': attribute type 16 has an invalid length. [ 403.495405][T15278] netlink: 'syz.4.2304': attribute type 17 has an invalid length. [ 403.584294][T15278] erspan0: left promiscuous mode [ 403.618471][T15278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.630308][T15278] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.642804][T15278] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 403.828310][T15286] __nla_validate_parse: 11 callbacks suppressed [ 403.828329][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2307'. [ 403.957792][T15292] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2310'. [ 404.810347][T15329] ip6t_srh: unknown srh invflags BA61 [ 404.817610][T15333] netlink: 'syz.1.2321': attribute type 1 has an invalid length. [ 404.868058][T15333] 8021q: adding VLAN 0 to HW filter on device bond4 [ 405.210972][T15361] x_tables: duplicate underflow at hook 2 [ 405.297557][T15366] netlink: 'syz.4.2332': attribute type 3 has an invalid length. [ 405.640294][T15388] tipc: Invalid UDP bearer configuration [ 405.640342][T15388] tipc: Enabling of bearer rejected, failed to enable media [ 405.768855][T15395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.790919][T15393] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2341'. [ 406.083300][T15410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2347'. [ 406.166262][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 406.174366][ C1] lec:lec_tx_timeout: lec0 [ 406.179063][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 406.270393][T15416] dvmrp6: entered allmulticast mode [ 406.323349][T15420] xt_hashlimit: size too large, truncated to 1048576 [ 406.340869][T15420] xt_hashlimit: max too large, truncated to 1048576 [ 406.413857][T15423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2354'. [ 406.431001][T15420] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 406.507109][T15428] netlink: 428 bytes leftover after parsing attributes in process `syz.0.2353'. [ 406.571780][T15428] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2353'. [ 406.601315][T15425] sock: sock_timestamping_bind_phc: sock not bind to device [ 406.605119][T15431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2356'. [ 406.633264][T15431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2356'. [ 406.642435][T15431] netlink: 'syz.1.2356': attribute type 14 has an invalid length. [ 406.824842][T15441] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 406.920143][T15437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2358'. [ 406.982066][T15444] netlink: 'syz.0.2358': attribute type 322 has an invalid length. [ 407.014841][T15444] lo speed is unknown, defaulting to 1000 [ 407.050740][T15444] lo speed is unknown, defaulting to 1000 [ 407.521109][T15473] netlink: 'syz.0.2368': attribute type 1 has an invalid length. [ 407.529186][T15473] netlink: 'syz.0.2368': attribute type 2 has an invalid length. [ 407.537462][T15473] netlink: 'syz.0.2368': attribute type 1 has an invalid length. [ 407.546650][T15473] netlink: 'syz.0.2368': attribute type 3 has an invalid length. [ 408.334887][T15507] syzkaller1: entered promiscuous mode [ 408.356417][T15507] syzkaller1: entered allmulticast mode [ 409.645220][T15563] netlink: 'syz.2.2400': attribute type 11 has an invalid length. [ 409.680147][T15563] netlink: 'syz.2.2400': attribute type 23 has an invalid length. [ 409.688861][T15563] __nla_validate_parse: 9 callbacks suppressed [ 409.688877][T15563] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2400'. [ 409.711822][T15566] syzkaller0: entered promiscuous mode [ 409.717539][T15566] syzkaller0: entered allmulticast mode [ 409.951307][T15581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.007019][T15587] Cannot find add_set index 0 as target [ 410.131955][T15590] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2407'. [ 410.424900][T15596] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2409'. [ 410.650889][T15618] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 410.885199][T15624] tipc: Enabled bearer , priority 0 [ 410.902059][T15624] syzkaller0: entered promiscuous mode [ 410.908189][T15624] syzkaller0: entered allmulticast mode [ 410.939958][T15624] tipc: Resetting bearer [ 410.995794][T15623] tipc: Resetting bearer [ 411.038849][T15623] tipc: Disabling bearer [ 411.193148][T15651] netlink: 'syz.2.2421': attribute type 10 has an invalid length. [ 411.238824][T15651] team0: Device vxcan1 is of different type [ 411.333662][T15654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2424'. [ 411.474019][T15674] netlink: 'syz.1.2428': attribute type 32 has an invalid length. [ 411.498418][T15670] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2426'. [ 411.516288][T15670] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2426'. [ 411.704150][T15682] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2431'. [ 411.910406][T15702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2433'. [ 411.986203][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 411.994299][ C1] lec:lec_tx_timeout: lec0 [ 412.000031][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 412.100401][T15693] lo speed is unknown, defaulting to 1000 [ 412.114126][T15697] ip6gre3: entered promiscuous mode [ 412.135106][T15693] lo speed is unknown, defaulting to 1000 [ 412.172311][T15706] lo speed is unknown, defaulting to 1000 [ 412.256069][T15713] netlink: 'syz.1.2438': attribute type 1 has an invalid length. [ 412.385529][T15722] macvlan3: entered promiscuous mode [ 412.438991][T15722] macvlan3: entered allmulticast mode [ 412.456523][T15722] bond5: entered promiscuous mode [ 412.468770][T15722] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 412.478779][T15722] bond5: left promiscuous mode [ 412.920170][T15743] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2444'. [ 412.995177][T15706] lo speed is unknown, defaulting to 1000 [ 413.310093][T15760] netlink: 'syz.2.2448': attribute type 1 has an invalid length. [ 413.368094][T15760] 8021q: adding VLAN 0 to HW filter on device bond32 [ 413.403229][T15763] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 413.525811][T15767] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2450'. [ 413.547930][T15767] syzkaller0: entered promiscuous mode [ 413.553532][T15767] syzkaller0: entered allmulticast mode [ 413.981447][T15792] netlink: 'syz.4.2455': attribute type 3 has an invalid length. [ 414.147510][T15783] nbd0: detected capacity change from 0 to 63 [ 414.179129][T15787] nbd: couldn't find device at index 2 [ 414.349000][ T5831] block nbd0: Receive control failed (result -104) [ 414.451378][T15809] syzkaller0: entered promiscuous mode [ 414.461366][T15809] syzkaller0: entered allmulticast mode [ 414.545449][T15811] : entered promiscuous mode [ 414.840422][T15820] lo speed is unknown, defaulting to 1000 [ 414.868035][T15829] __nla_validate_parse: 3 callbacks suppressed [ 414.868062][T15829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2466'. [ 414.912538][T15820] lo speed is unknown, defaulting to 1000 [ 415.791583][T15850] netlink: 'syz.3.2470': attribute type 5 has an invalid length. [ 416.042159][T15857] netlink: 'syz.1.2472': attribute type 13 has an invalid length. [ 416.070623][T15857] netlink: 'syz.1.2472': attribute type 17 has an invalid length. [ 416.157994][T15870] netlink: 'syz.2.2475': attribute type 3 has an invalid length. [ 416.165963][T15870] netlink: 'syz.2.2475': attribute type 1 has an invalid length. [ 416.194581][T15870] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2475'. [ 416.195037][T15867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2474'. [ 416.344586][T15876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2475'. [ 416.472866][T15857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.477988][T15878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2475'. [ 416.500746][T15857] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.578395][T15857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 416.616463][T14412] lo speed is unknown, defaulting to 1000 [ 416.634824][T14412] syz0: Port: 1 Link ACTIVE [ 416.825241][T15877] ipvlan0: entered promiscuous mode [ 416.899641][T15885] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2477'. [ 417.006219][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 417.014351][ C1] lec:lec_tx_timeout: lec0 [ 417.019548][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 417.210233][T14412] lo speed is unknown, defaulting to 1000 [ 417.356954][T15902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2476'. [ 417.376125][T15895] netlink: 'syz.3.2477': attribute type 3 has an invalid length. [ 417.406027][T15895] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2477'. [ 417.438757][T15888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2476'. [ 417.801078][T15914] lo speed is unknown, defaulting to 1000 [ 417.813382][T15914] lo speed is unknown, defaulting to 1000 [ 418.431060][T15934] netlink: 'syz.3.2488': attribute type 1 has an invalid length. [ 418.477125][T15934] 8021q: adding VLAN 0 to HW filter on device bond10 [ 418.578323][T15934] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 418.594955][T15934] bond10: (slave batadv2): making interface the new active one [ 418.606803][T15934] bond10: (slave batadv2): Enslaving as an active interface with an up link [ 418.912823][T15955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2492'. [ 419.170821][T15954] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 419.887808][T15816] Set syz1 is full, maxelem 65536 reached [ 420.359111][T16004] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 420.533772][T15999] __nla_validate_parse: 1 callbacks suppressed [ 420.533794][T15999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2504'. [ 420.654986][T16013] netlink: 'syz.4.2508': attribute type 1 has an invalid length. [ 420.675377][T16013] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2508'. [ 420.769796][T16023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2509'. [ 420.881393][T16027] netlink: 'syz.4.2511': attribute type 14 has an invalid length. [ 421.300205][T16057] netlink: 428 bytes leftover after parsing attributes in process `syz.3.2518'. [ 421.321389][T16057] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2518'. [ 421.341620][T16059] IPVS: set_ctl: invalid protocol: 22 172.20.20.23:20004 [ 421.565051][T16068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2521'. [ 421.637213][T16073] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 421.704476][T16068] vlan0: entered allmulticast mode [ 421.710861][T16068] bridge10: entered allmulticast mode [ 421.757465][T16068] bridge10: port 1(veth9) entered blocking state [ 421.767868][T16068] bridge10: port 1(veth9) entered disabled state [ 421.782429][T16068] veth9: entered allmulticast mode [ 421.799589][T16068] veth9: entered promiscuous mode [ 421.854866][T16075] sctp: [Deprecated]: syz.1.2522 (pid 16075) Use of struct sctp_assoc_value in delayed_ack socket option. [ 421.854866][T16075] Use struct sctp_sack_info instead [ 421.995685][T16088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2525'. [ 422.026261][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 422.034400][ C1] lec:lec_tx_timeout: lec0 [ 422.039511][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 422.187398][T16099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2528'. [ 422.197115][T16099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2528'. [ 422.206109][T16099] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2528'. [ 422.236130][T16099] netlink: 'syz.2.2528': attribute type 3 has an invalid length. [ 422.260997][T16099] netlink: 'syz.2.2528': attribute type 2 has an invalid length. [ 422.285151][T16102] 8021q: adding VLAN 0 to HW filter on device bond11 [ 422.287221][T16099] netlink: 'syz.2.2528': attribute type 2 has an invalid length. [ 422.360749][T16111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.075444][T16149] lo speed is unknown, defaulting to 1000 [ 423.101543][T16149] lo speed is unknown, defaulting to 1000 [ 423.328456][T16175] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 423.457582][T16178] lo speed is unknown, defaulting to 1000 [ 423.545910][T16178] lo speed is unknown, defaulting to 1000 [ 427.046308][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 427.054356][ C1] lec:lec_tx_timeout: lec0 [ 427.059101][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 432.066449][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 432.074496][ C1] lec:lec_tx_timeout: lec0 [ 432.079249][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 437.086292][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 437.094358][ C1] lec:lec_tx_timeout: lec0 [ 437.099079][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 442.106452][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 442.114503][ C1] lec:lec_tx_timeout: lec0 [ 442.119191][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 444.626628][ T1727] block nbd0: Possible stuck request ffff888050bc0000: control (read@0,1024B). Runtime 30 seconds [ 444.638731][ T1727] block nbd0: Possible stuck request ffff888050bc0200: control (read@1024,1024B). Runtime 30 seconds [ 444.649883][ T1727] block nbd0: Possible stuck request ffff888050bc0400: control (read@2048,1024B). Runtime 30 seconds [ 444.662033][ T1727] block nbd0: Possible stuck request ffff888050bc0600: control (read@3072,1024B). Runtime 30 seconds [ 445.269722][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.126266][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 447.134365][ C1] lec:lec_tx_timeout: lec0 [ 447.139119][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 452.146261][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 452.154299][ C1] lec:lec_tx_timeout: lec0 [ 452.158917][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 457.166262][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 457.174310][ C1] lec:lec_tx_timeout: lec0 [ 457.179110][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 463.186308][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6010 ms [ 463.194365][ C1] lec:lec_tx_timeout: lec0 [ 463.199165][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 468.946254][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 468.954318][ C1] lec:lec_tx_timeout: lec0 [ 468.959159][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 473.986246][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 473.994318][ C1] lec:lec_tx_timeout: lec0 [ 473.999055][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 474.706695][ T1727] block nbd0: Possible stuck request ffff888050bc0000: control (read@0,1024B). Runtime 60 seconds [ 474.719288][ T1727] block nbd0: Possible stuck request ffff888050bc0200: control (read@1024,1024B). Runtime 60 seconds [ 474.730356][ T1727] block nbd0: Possible stuck request ffff888050bc0400: control (read@2048,1024B). Runtime 60 seconds [ 474.741405][ T1727] block nbd0: Possible stuck request ffff888050bc0600: control (read@3072,1024B). Runtime 60 seconds [ 475.585801][ T5189] udevd[5189]: worker [14784] /devices/virtual/block/nbd0 is taking a long time [ 479.006247][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 479.014319][ C1] lec:lec_tx_timeout: lec0 [ 479.019114][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 484.026263][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 484.034392][ C1] lec:lec_tx_timeout: lec0 [ 484.039210][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 486.318373][T16205] __nla_validate_parse: 7 callbacks suppressed [ 486.318394][T16205] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2556'. [ 486.372665][T16208] netlink: 'syz.2.2558': attribute type 4 has an invalid length. [ 486.387041][T16208] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2558'. [ 486.389536][T16213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2559'. [ 486.430890][T16213] ip6gre1: entered promiscuous mode [ 486.441182][T16213] ip6gre1: entered allmulticast mode [ 486.451495][T16213] netlink: 'syz.3.2559': attribute type 6 has an invalid length. [ 486.459473][T16213] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2559'. [ 486.789316][T16249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2567'. [ 487.021715][T16261] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2573'. [ 487.033118][T16258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2572'. [ 487.047179][T16258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2572'. [ 487.060893][T16264] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2574'. [ 487.075454][T16261] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2573'. [ 487.180425][T16272] netlink: Conntrack attr has 4 unknown bytes [ 487.217838][T16269] xt_recent: hitcount (262143) is larger than allowed maximum (65535) [ 487.418741][T16286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.447422][T16286] netlink: 'syz.4.2580': attribute type 2 has an invalid length. [ 487.496407][T16278] netlink: 'syz.3.2579': attribute type 1 has an invalid length. [ 487.616690][T16299] tipc: Failed to remove unknown binding: 66,1,1/361899457:138045381/138045382 [ 487.845405][T16309] lo speed is unknown, defaulting to 1000 [ 487.919503][T16309] lo speed is unknown, defaulting to 1000 [ 488.055921][T16324] netlink: 'syz.2.2595': attribute type 8 has an invalid length. [ 488.555161][T16319] netlink: 'syz.0.2592': attribute type 1 has an invalid length. [ 488.583294][T16348] tipc: Enabled bearer , priority 0 [ 488.643068][T16348] syzkaller0: entered promiscuous mode [ 488.651416][T16348] syzkaller0: entered allmulticast mode [ 488.854561][T16347] tipc: Resetting bearer [ 488.923813][T16347] tipc: Disabling bearer [ 488.948929][T16360] lo speed is unknown, defaulting to 1000 [ 488.965716][T16360] lo speed is unknown, defaulting to 1000 [ 489.046176][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 489.054265][ C1] lec:lec_tx_timeout: lec0 [ 489.533040][T16393] syzkaller0: entered promiscuous mode [ 489.543716][T16393] syzkaller0: entered allmulticast mode [ 490.424840][T16396] veth6: entered allmulticast mode [ 490.478348][T16411] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 490.702835][T16430] syzkaller0: entered promiscuous mode [ 490.736273][T16430] syzkaller0: entered allmulticast mode [ 490.996310][T16435] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 491.002402][T16435] syzkaller1: linktype set to 778 [ 491.047828][T16435] 8021q: adding VLAN 0 to HW filter on device bond1 [ 491.188907][T16447] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 491.365204][T16454] netlink: 'syz.1.2634': attribute type 1 has an invalid length. [ 491.376343][T16454] __nla_validate_parse: 12 callbacks suppressed [ 491.376360][T16454] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2634'. [ 491.537019][T16461] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2636'. [ 491.565650][T16461] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2636'. [ 491.631094][T16463] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2638'. [ 491.732420][T16473] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2636'. [ 491.751847][T16473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2636'. [ 491.814139][T16463] syzkaller0: entered promiscuous mode [ 491.820663][T16463] syzkaller0: entered allmulticast mode [ 491.921785][T16489] lo speed is unknown, defaulting to 1000 [ 491.929758][T16489] lo speed is unknown, defaulting to 1000 [ 492.083740][T16493] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2642'. [ 492.116790][T16493] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2642'. [ 492.137448][T16493] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2642'. [ 495.485804][T16534] netlink: 'syz.4.2653': attribute type 1 has an invalid length. [ 495.552375][T16541] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2653'. [ 495.631710][T16534] 8021q: adding VLAN 0 to HW filter on device bond5 [ 495.642935][T16541] bond5: entered promiscuous mode [ 495.648401][T16541] bond5: entered allmulticast mode [ 495.714092][T16534] bond5: (slave dummy0): making interface the new active one [ 495.731785][T16534] dummy0: entered promiscuous mode [ 495.754125][T16534] dummy0: entered allmulticast mode [ 495.780846][T16534] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 496.091583][T16563] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 496.479655][T16605] veth1_to_bridge: entered promiscuous mode [ 496.723361][T16624] __nla_validate_parse: 3 callbacks suppressed [ 496.723381][T16624] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2677'. [ 496.747246][T16622] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2677'. [ 496.913398][T16635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2681'. [ 496.948069][T16639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.088554][T16653] netlink: 'syz.0.2685': attribute type 27 has an invalid length. [ 497.121569][T16655] syzkaller0: entered promiscuous mode [ 497.135675][T16655] syzkaller0: entered allmulticast mode [ 497.287793][T16666] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2688'. [ 497.305961][T16666] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2688'. [ 497.379489][T16674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2691'. [ 497.396029][T16674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2691'. [ 497.442268][T16677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2692'. [ 497.515003][T16680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2693'. [ 497.515011][T16681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2693'. [ 497.640509][T16686] block nbd4: not configured, cannot reconfigure [ 497.706978][T16686] team0: Port device syz_tun removed [ 497.717506][T16686] bond5: (slave dummy0): Releasing active interface [ 497.724263][T16686] dummy0: left promiscuous mode [ 497.731422][T16686] dummy0: left allmulticast mode [ 497.771105][T16686] bond0: (slave bond_slave_0): Releasing backup interface [ 497.781342][T16686] bond0: (slave bond_slave_1): Releasing backup interface [ 497.800004][T16686] team_slave_0: left promiscuous mode [ 497.808433][T16686] team0: Port device team_slave_0 removed [ 497.817633][T16686] team_slave_1: left promiscuous mode [ 497.824911][T16686] team0: Port device team_slave_1 removed [ 497.841020][T16686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.854364][T16686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.862750][T16686] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 504.787785][ T1727] block nbd0: Connection timed out, retrying (0/1 alive) [ 504.794925][ T1727] block nbd0: Connection timed out, retrying (0/1 alive) [ 504.802299][ T1727] block nbd0: Connection timed out, retrying (0/1 alive) [ 504.809725][ T11] block nbd0: Dead connection, failed to find a fallback [ 504.818322][ T1727] block nbd0: Connection timed out, retrying (0/1 alive) [ 506.710106][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.718328][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 511.986269][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5270 ms [ 511.994346][ C1] lec:lec_tx_timeout: lec0 [ 511.999294][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 517.006203][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 517.014255][ C1] lec:lec_tx_timeout: lec0 [ 543.508038][T16716] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.2701'. [ 543.556851][T16718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2698'. [ 543.573131][T16718] 8021q: VLANs not supported on vxcan0 [ 543.620845][T16719] lo speed is unknown, defaulting to 1000 [ 543.629502][T16719] lo speed is unknown, defaulting to 1000 [ 544.014753][T16726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2704'. [ 544.026795][T16727] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2705'. [ 544.128497][T16733] syzkaller0: entered promiscuous mode [ 544.156486][T16733] syzkaller0: entered allmulticast mode [ 544.226513][T16738] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2704'. [ 544.301489][T16727] tipc: Enabled bearer , priority 0 [ 544.335133][T16724] tipc: Resetting bearer [ 544.380988][T16724] tipc: Disabling bearer [ 544.459627][T16744] veth0_virt_wifi: entered promiscuous mode [ 544.468059][T16744] veth0_virt_wifi: left promiscuous mode [ 544.661936][T16749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.672020][T16749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.692533][T16752] ip6t_srh: unknown srh match flags 4000 [ 544.742972][T16749] tipc: Disabling bearer [ 545.039990][T16771] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2719'. [ 545.139857][T16778] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 545.149669][T16778] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 545.159118][T16778] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 545.169612][T16771] netlink: 'syz.1.2719': attribute type 3 has an invalid length. [ 545.178092][T16778] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 545.190716][T16778] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 545.236562][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 545.244417][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 545.253344][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 545.261489][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 545.270692][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 545.477865][T16775] lo speed is unknown, defaulting to 1000 [ 545.494830][T16775] lo speed is unknown, defaulting to 1000 [ 545.571026][T16788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2721'. [ 545.928547][T16795] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2725'. [ 545.979105][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2725'. [ 546.289832][T16775] chnl_net:caif_netlink_parms(): no params data found [ 546.729797][T16775] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.737400][T16775] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.745854][T16775] bridge_slave_0: entered allmulticast mode [ 546.754370][T16775] bridge_slave_0: entered promiscuous mode [ 546.763666][T16775] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.771908][T16775] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.779831][T16775] bridge_slave_1: entered allmulticast mode [ 546.788343][T16775] bridge_slave_1: entered promiscuous mode [ 546.890924][T16775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.924713][T16775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.110950][T16850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2735'. [ 547.124631][T16775] team0: Port device team_slave_0 added [ 547.148004][T16775] team0: Port device team_slave_1 added [ 547.243192][T16855] netlink: 'syz.3.2738': attribute type 10 has an invalid length. [ 547.327607][T16861] netlink: 'syz.3.2738': attribute type 10 has an invalid length. [ 547.344301][T16855] team0: Port device dummy0 added [ 547.349538][T16778] Bluetooth: hci5: command tx timeout [ 547.424475][T16869] netlink: 'syz.1.2739': attribute type 89 has an invalid length. [ 547.490035][T16861] team0: Port device dummy0 removed [ 547.504915][T16861] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 547.580238][T16775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.596486][T16775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.676404][T16775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.729980][T16775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.760869][T16775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.803630][T16775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.857785][T16884] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:8188 [ 548.144120][T16775] hsr_slave_0: entered promiscuous mode [ 548.157715][T16775] hsr_slave_1: entered promiscuous mode [ 548.534236][T16906] netlink: 'syz.0.2748': attribute type 1 has an invalid length. [ 548.555749][T16906] __nla_validate_parse: 4 callbacks suppressed [ 548.555826][T16906] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2748'. [ 548.658309][T16908] lo speed is unknown, defaulting to 1000 [ 548.716928][T16775] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.728737][T16775] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.753638][T16908] lo speed is unknown, defaulting to 1000 [ 548.901470][T16775] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.926939][T16775] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.038894][T16775] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.049629][T16775] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.065806][T16916] netlink: 'syz.3.2749': attribute type 13 has an invalid length. [ 549.074123][T16916] netlink: 'syz.3.2749': attribute type 17 has an invalid length. [ 549.177302][T16916] ip6_vti0: left promiscuous mode [ 549.221299][T16916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.231893][T16916] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.241857][T16916] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 549.272409][T16775] bond0: (slave netdevsim0): Releasing backup interface [ 549.283629][T16775] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.294504][T16775] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.354592][T16920] syzkaller0: entered promiscuous mode [ 549.360400][T16920] syzkaller0: entered allmulticast mode [ 549.426255][T16778] Bluetooth: hci5: command tx timeout [ 550.805192][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2750'. [ 550.816387][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2750'. [ 550.825754][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2750'. [ 550.835694][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2750'. [ 550.845784][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2750'. [ 550.855311][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2750'. [ 550.864715][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2750'. [ 550.878971][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2750'. [ 550.888301][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2750'. [ 551.168981][T16775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 551.202149][T16775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 551.325772][T16775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 551.379970][T16775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 551.500597][T16966] netlink: 'syz.0.2760': attribute type 4 has an invalid length. [ 551.516595][T16778] Bluetooth: hci5: command tx timeout [ 551.733428][T16775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.764535][T16775] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.781462][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.788727][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.815556][ T9780] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.822784][ T9780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.171882][T16775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.273724][T16775] veth0_vlan: entered promiscuous mode [ 552.291891][T16775] veth1_vlan: entered promiscuous mode [ 552.344697][T16775] veth0_macvtap: entered promiscuous mode [ 552.359980][T16775] veth1_macvtap: entered promiscuous mode [ 552.384389][T16775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.409433][T16775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.431640][T16991] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 552.440186][ T140] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.451743][ T140] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.473870][ T140] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.486218][ T140] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.522729][T16993] bond6: entered promiscuous mode [ 552.552386][T16991] syzkaller1: entered promiscuous mode [ 552.564688][T16991] syzkaller1: entered allmulticast mode [ 552.692783][ T9780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.712463][ T9780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.759836][ T9779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.771201][ T9779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.142078][T17015] bond1: option updelay: invalid value (18446744072924056005) [ 553.150795][T17015] bond1: option updelay: allowed values 0 - 2147483647 [ 553.161061][T17015] bond1 (unregistering): Released all slaves [ 553.550883][T17036] lo speed is unknown, defaulting to 1000 [ 553.572115][T17036] lo speed is unknown, defaulting to 1000 [ 553.586767][T16778] Bluetooth: hci5: command tx timeout [ 553.682679][T17040] tipc: Enabled bearer , priority 0 [ 553.758690][T17040] syzkaller0: entered promiscuous mode [ 553.769761][T17040] syzkaller0: entered allmulticast mode [ 553.807028][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 553.817134][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 553.838388][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 553.886403][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 553.899398][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 553.946257][T17043] __nla_validate_parse: 107 callbacks suppressed [ 553.946277][T17043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2780'. [ 554.060227][T17066] netlink: 424 bytes leftover after parsing attributes in process `syz.2.2783'. [ 554.071789][T17066] netlink: 'syz.2.2783': attribute type 1 has an invalid length. [ 554.121025][T17067] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 554.150823][T17067] bridge1: entered allmulticast mode [ 554.276743][T17039] tipc: Resetting bearer [ 554.346909][T17039] tipc: Disabling bearer [ 554.361423][T17059] lo speed is unknown, defaulting to 1000 [ 554.446084][T17059] lo speed is unknown, defaulting to 1000 [ 554.525602][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2785'. [ 554.587337][T17074] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2785'. [ 554.613769][T17073] vlan3: entered promiscuous mode [ 554.644052][T17073] geneve1: entered promiscuous mode [ 554.666952][T17073] vlan3: entered allmulticast mode [ 554.672875][T17073] geneve1: entered allmulticast mode [ 554.825178][T17091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2784'. [ 554.853878][T17091] netlink: 'syz.0.2784': attribute type 21 has an invalid length. [ 554.879858][T17091] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2784'. [ 554.995154][T17091] netlink: 'syz.0.2784': attribute type 4 has an invalid length. [ 555.005933][T17091] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2784'. [ 555.033575][T17097] netlink: 'syz.4.2789': attribute type 22 has an invalid length. [ 555.063636][T17097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2789'. [ 555.132467][ T1338] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.282994][ T1338] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.323232][ T1338] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.465108][ T1338] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.500995][T17107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2792'. [ 555.790537][ T9772] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.878460][ T9772] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.922989][ T9779] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.987320][ T5831] Bluetooth: hci2: command tx timeout [ 556.038347][ T9779] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.146688][T17122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2796'. [ 556.247190][ T140] bridge_slave_1: left allmulticast mode [ 556.253308][ T140] bridge_slave_1: left promiscuous mode [ 556.308251][ T140] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.340039][T17129] syz.1.2794 uses old SIOCAX25GETINFO [ 556.347372][ T140] âÿÿ: left allmulticast mode [ 556.362524][ T140] âÿÿ: left promiscuous mode [ 556.378848][ T140] bridge0: port 1(âÿÿ) entered disabled state [ 556.796751][T17143] openvswitch: netlink: Flow actions attr not present in new flow. [ 556.826591][T17122] netlink: 'syz.4.2796': attribute type 3 has an invalid length. [ 556.844598][T17122] netlink: 'syz.4.2796': attribute type 3 has an invalid length. [ 557.161712][ T140] bond3 (unregistering): (slave bridge3): Releasing active interface [ 557.170285][ T140] bond3 (unregistering): (slave bridge3): the permanent HWaddr of slave - 96:6b:e3:fc:7a:3e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 557.211716][ T140] bond3 (unregistering): (slave bridge4): Releasing active interface [ 557.272798][ T140] bond6 (unregistering): (slave bridge5): Releasing active interface [ 557.480612][ T140] bond9 (unregistering): (slave bridge10): Removing an active aggregator [ 557.490147][ T140] bond9 (unregistering): (slave bridge10): Releasing backup interface [ 557.499133][ T140] bridge10 (unregistering): left promiscuous mode [ 557.505577][ T140] bridge10 (unregistering): left allmulticast mode [ 557.612239][ T140] bond0 (unregistering): (slave 30): Releasing backup interface [ 557.622087][ T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 557.633240][ T140] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 557.647713][ T140] bond0 (unregistering): Released all slaves [ 557.659612][ T140] bond1 (unregistering): Released all slaves [ 557.679319][ T140] bond2 (unregistering): Released all slaves [ 557.693809][ T140] bond3 (unregistering): Released all slaves [ 557.711203][ T140] bond4 (unregistering): Released all slaves [ 557.731056][ T140] bond5 (unregistering): Released all slaves [ 557.745487][ T140] bond6 (unregistering): Released all slaves [ 557.760534][ T140] bond7 (unregistering): Released all slaves [ 557.783379][ T140] bond8 (unregistering): Released all slaves [ 557.798107][ T140] bond9 (unregistering): Released all slaves [ 557.814251][ T140] bond10 (unregistering): (slave batadv2): Releasing active interface [ 557.825265][ T140] bond10 (unregistering): Released all slaves [ 557.846649][ T140] bond11 (unregistering): Released all slaves [ 558.067156][ T5831] Bluetooth: hci2: command tx timeout [ 558.120613][ T140] tipc: Left network mode [ 558.121022][T17059] chnl_net:caif_netlink_parms(): no params data found [ 558.794372][T17059] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.801887][T17059] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.813988][T17059] bridge_slave_0: entered allmulticast mode [ 558.830257][T17195] netlink: Unknown conntrack attr (0) [ 558.860170][T17059] bridge_slave_0: entered promiscuous mode [ 558.926385][T17059] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.942260][T17059] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.962104][T17059] bridge_slave_1: entered allmulticast mode [ 558.979884][T17059] bridge_slave_1: entered promiscuous mode [ 559.265928][T17059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.294054][T17059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.457544][T17059] team0: Port device team_slave_0 added [ 559.473489][T17217] x_tables: duplicate underflow at hook 1 [ 559.481511][T17059] team0: Port device team_slave_1 added [ 559.589120][T17059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.606479][T17059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.655317][T17059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.693216][T17059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.707568][T17059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.765312][T17059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.982739][T17059] hsr_slave_0: entered promiscuous mode [ 559.992429][T17059] hsr_slave_1: entered promiscuous mode [ 560.008680][T17059] debugfs: 'hsr0' already exists in 'hsr' [ 560.014533][T17059] Cannot create hsr debugfs directory [ 560.022822][T17238] __nla_validate_parse: 5 callbacks suppressed [ 560.022841][T17238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2823'. [ 560.106422][T17243] netlink: 'syz.0.2824': attribute type 10 has an invalid length. [ 560.147114][ T5831] Bluetooth: hci2: command tx timeout [ 560.233116][T17252] netlink: 'syz.0.2824': attribute type 1 has an invalid length. [ 560.251573][T17243] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 560.270404][T17243] .`: (slave netdevsim0): Enslaving as an active interface with an up link [ 560.579844][T17250] bond6: invalid ARP target 0.0.0.0 specified for addition [ 560.674286][T17250] bond6: option arp_ip_target: invalid value (0) [ 560.708185][T17250] bond6 (unregistering): Released all slaves [ 561.124233][ T29] audit: type=1800 audit(1771466137.997:12): pid=17267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2827" name="memory.events" dev="tmpfs" ino=86 res=0 errno=0 [ 561.600885][T17059] netdevsim netdevsim3 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.781340][T17059] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.919134][ T140] team0 (unregistering): Port device batadv1 removed [ 562.242426][ T5831] Bluetooth: hci2: command tx timeout [ 562.282024][ T140] team0 (unregistering): Port device 76žÿ removed [ 562.314133][ T140] team0 (unregistering): Port device team_slave_0 removed [ 562.566888][T17301] lo speed is unknown, defaulting to 1000 [ 562.601121][T17059] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.628367][T17314] tipc: Started in network mode [ 562.633547][T17314] tipc: Node identity ce0d8d9f66f, cluster identity 4711 [ 562.643103][T17314] tipc: Enabled bearer , priority 0 [ 562.653151][T17315] syzkaller0: entered promiscuous mode [ 562.660512][T17315] syzkaller0: entered allmulticast mode [ 562.669249][T17325] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 562.740378][T17301] lo speed is unknown, defaulting to 1000 [ 562.779341][T17059] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.817231][T17315] tipc: Resetting bearer [ 562.850098][T17315] tipc: Disabling bearer [ 562.880068][T17325] syzkaller1: entered promiscuous mode [ 562.885701][T17325] syzkaller1: entered allmulticast mode [ 563.510368][T17059] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 563.621253][T17059] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 563.643053][ T140] IPVS: stop unused estimator thread 0... [ 563.673656][T17059] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 563.732315][T17059] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 563.944631][T17363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2838'. [ 564.190450][T17059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.210837][T17059] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.235784][ T9780] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.243005][ T9780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.296133][ T9780] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.303319][ T9780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.467931][T17371] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 564.838804][T17378] bond0: (slave rose0): Enslaving as an active interface with an up link [ 564.875769][T17385] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2843'. [ 565.060802][T17059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.184250][T17059] veth0_vlan: entered promiscuous mode [ 565.234074][T17059] veth1_vlan: entered promiscuous mode [ 565.312741][T17059] veth0_macvtap: entered promiscuous mode [ 565.339279][T17059] veth1_macvtap: entered promiscuous mode [ 565.369598][T17059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.400825][T17059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.419247][ T9780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.448175][T17395] netlink: 'syz.4.2846': attribute type 15 has an invalid length. [ 565.456243][T17395] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2846'. [ 565.480900][ T9780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.539895][ T9772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.590987][ T9772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.941297][T17419] lo speed is unknown, defaulting to 1000 [ 565.944203][ T9772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.979661][ T9772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.015397][T17419] lo speed is unknown, defaulting to 1000 [ 566.096579][T17439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2852'. [ 566.133631][T17440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2851'. [ 566.252935][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.305038][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.347806][T17497] IPVS: length: 36 != 24 [ 567.386379][T17496] netlink: 'syz.4.2861': attribute type 1 has an invalid length. [ 567.394173][T17496] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2861'. [ 567.813704][T17512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2866'. [ 567.832588][T17512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2866'. [ 567.867428][T17520] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2867'. [ 568.103960][T17535] netlink: 'syz.1.2872': attribute type 1 has an invalid length. [ 568.121969][T17535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2872'. [ 568.159546][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.172219][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 568.331197][T17542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2874'. [ 568.410834][T17544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2876'. [ 568.510528][T17551] syzkaller0: entered promiscuous mode [ 568.546324][T17551] syzkaller0: entered allmulticast mode [ 568.577861][T17551] tipc: Enabled bearer , priority 0 [ 568.608295][T17549] tipc: Resetting bearer [ 568.682850][T17555] netlink: 'syz.4.2879': attribute type 19 has an invalid length. [ 568.691152][T17555] netlink: 'syz.4.2879': attribute type 20 has an invalid length. [ 569.152694][T17549] tipc: Disabling bearer [ 569.182842][T17562] ip6gretap3: entered allmulticast mode [ 569.206458][T17573] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 569.540473][T17588] netlink: 'syz.3.2887': attribute type 10 has an invalid length. [ 569.592107][T17588] hsr0: entered promiscuous mode [ 569.600019][T17588] bridge0: port 3(hsr0) entered blocking state [ 569.625635][T17588] bridge0: port 3(hsr0) entered disabled state [ 569.639840][T17588] hsr0: entered allmulticast mode [ 569.646380][T17588] hsr_slave_0: entered allmulticast mode [ 569.652070][T17588] hsr_slave_1: entered allmulticast mode [ 569.662538][T17588] bridge0: port 3(hsr0) entered blocking state [ 569.668951][T17588] bridge0: port 3(hsr0) entered forwarding state [ 569.785736][T17593] team1: entered promiscuous mode [ 569.791259][T17593] team1: entered allmulticast mode [ 569.804805][T17593] 8021q: adding VLAN 0 to HW filter on device team1 [ 569.877375][T17596] team2: entered promiscuous mode [ 569.892815][T17596] team2: entered allmulticast mode [ 569.903466][T17596] 8021q: adding VLAN 0 to HW filter on device team2 [ 570.136492][T17606] syzkaller0: entered promiscuous mode [ 570.154194][T17606] syzkaller0: entered allmulticast mode [ 571.736360][T17627] __nla_validate_parse: 9 callbacks suppressed [ 571.736383][T17627] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2897'. [ 571.814249][T17622] lo speed is unknown, defaulting to 1000 [ 571.822973][T17622] lo speed is unknown, defaulting to 1000 [ 571.920713][T17630] openvswitch: netlink: Message has 16 unknown bytes. [ 572.209860][T17647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2902'. [ 572.324923][T17647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2902'. [ 572.394375][T17657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2905'. [ 572.847041][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2907'. [ 573.096277][T17673] lo speed is unknown, defaulting to 1000 [ 573.110096][T17673] lo speed is unknown, defaulting to 1000 [ 573.357610][T17688] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 573.798712][T17672] siw: device registration error -23 [ 573.851160][T17687] lo speed is unknown, defaulting to 1000 [ 573.875176][T17687] lo speed is unknown, defaulting to 1000 [ 573.943740][T17708] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2917'. [ 573.986212][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 573.989307][ T5831] Bluetooth: hci2: command tx timeout [ 573.994570][ C1] lec:lec_tx_timeout: lec0 [ 574.162534][T17715] syzkaller0: entered promiscuous mode [ 574.168295][T17715] syzkaller0: entered allmulticast mode [ 574.386700][T17725] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2924'. [ 574.845906][T17742] lo speed is unknown, defaulting to 1000 [ 574.931213][T17742] lo speed is unknown, defaulting to 1000 [ 575.133880][T17760] netlink: 'syz.2.2933': attribute type 2 has an invalid length. [ 575.246042][T17763] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2934'. [ 575.359533][T17766] netlink: 'syz.2.2935': attribute type 1 has an invalid length. [ 575.408718][T10395] lec:lec_start_xmit: lec0:No lecd attached [ 575.495159][T17773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2935'. [ 575.543790][T17766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 575.657718][T17769] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 575.689241][T17769] bond1: (slave batadv1): making interface the new active one [ 575.699142][T17769] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 575.740399][T17773] bond1 (unregistering): (slave batadv1): Releasing active interface [ 575.751304][T17773] bond1 (unregistering): Released all slaves [ 575.778296][T17774] syzkaller1: entered promiscuous mode [ 575.784006][T17774] syzkaller1: entered allmulticast mode [ 575.998233][T17789] netlink: 'syz.2.2940': attribute type 1 has an invalid length. [ 576.070997][T17794] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2942'. [ 576.260832][T17789] 8021q: adding VLAN 0 to HW filter on device bond1 [ 576.270637][T17797] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 576.379888][T17804] bond1: invalid ARP target 0.0.0.0 specified for addition [ 576.413003][T17804] bond1: option arp_ip_target: invalid value (0) [ 576.423953][T17804] bond1 (unregistering): Released all slaves [ 576.661419][ T9780] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.673876][ T9780] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.727720][ T9780] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.777900][ T9780] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.044426][T17855] xt_cgroup: path and classid specified [ 577.187660][T17862] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 577.211853][T17862] syzkaller0: entered promiscuous mode [ 577.218497][T17862] syzkaller0: entered allmulticast mode [ 577.231810][T17862] netlink: 'syz.2.2963': attribute type 21 has an invalid length. [ 577.483938][T17886] xt_hashlimit: size too large, truncated to 1048576 [ 577.561817][T17892] __nla_validate_parse: 8 callbacks suppressed [ 577.561839][T17892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2972'. [ 577.907687][T17908] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2975'. [ 577.919929][T17908] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2975'. [ 577.929437][T17908] netlink: 'syz.3.2975': attribute type 6 has an invalid length. [ 577.937550][T17908] netlink: 'syz.3.2975': attribute type 5 has an invalid length. [ 577.945538][T17908] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2975'. [ 578.125876][T17917] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2977'. [ 578.134538][T17919] delete_channel: no stack [ 578.143742][T17917] ieee802154 phy1 wpan1: encryption failed: -90 [ 578.625312][T17946] batadv_slave_0: entered promiscuous mode [ 578.627860][T16778] Bluetooth: hci2: command 0x0405 tx timeout [ 578.716978][T17951] syzkaller0: entered promiscuous mode [ 578.722627][T17951] syzkaller0: entered allmulticast mode [ 578.738189][T17952] netlink: 'syz.2.2986': attribute type 10 has an invalid length. [ 578.766930][T17952] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2986'. [ 578.886567][T17952] team0: Failed to send options change via netlink (err -105) [ 578.894368][T17952] team0: Port device geneve0 added [ 578.909590][T17939] batadv_slave_0: left promiscuous mode [ 579.066521][T17962] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2990'. [ 579.104830][T16778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 579.108314][T17962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2990'. [ 579.123564][T16778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 579.131925][T16778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 579.144629][T16778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 579.152706][T16778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 579.333899][T17963] lo speed is unknown, defaulting to 1000 [ 579.412073][T17963] lo speed is unknown, defaulting to 1000 [ 579.729655][T17990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2997'. [ 580.002520][ T1338] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 580.016828][ T1338] .`: (slave netdevsim0): Releasing backup interface [ 580.024530][ T1338] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 580.180905][ T9772] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.206720][ T49] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.243474][ T49] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.270158][ T1338] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 580.277188][ T1338] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 580.284093][ T1338] bridge0: port 2(wlan0) entered disabled state [ 580.294171][ T1338] bridge_slave_0: left allmulticast mode [ 580.301120][ T1338] bridge_slave_0: left promiscuous mode [ 580.310934][ T1338] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.674054][T18027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3005'. [ 580.687979][ T1338] erspan0 (unregistering): left promiscuous mode [ 580.723585][ T1338] bond3 (unregistering): (slave erspan1): Releasing active interface [ 580.732188][ T1338] erspan1 (unregistering): left promiscuous mode [ 580.761931][ T1338] gretap0 (unregistering): left promiscuous mode [ 580.794238][ T1338] bond4 (unregistering): (slave gretap1): Releasing active interface [ 580.945355][ T1338] dvmrp6 (unregistering): left allmulticast mode [ 580.956758][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5550 ms [ 580.964896][ C1] lec:lec_tx_timeout: lec0 [ 581.059188][ T1338] bridge0 (unregistering): left promiscuous mode [ 581.186337][T16778] Bluetooth: hci3: command tx timeout [ 581.254880][ T1338] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.264874][ T1338] bond_slave_0: left promiscuous mode [ 581.272304][ T1338] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.281452][ T1338] bond_slave_1: left promiscuous mode [ 581.289395][ T1338] .` (unregistering): (slave dummy0): Releasing backup interface [ 581.298735][ T1338] dummy0: left promiscuous mode [ 581.304498][ T1338] .` (unregistering): Released all slaves [ 581.315729][ T1338] bond1 (unregistering): Released all slaves [ 581.333912][ T1338] bond2 (unregistering): Released all slaves [ 581.352783][ T1338] bond3 (unregistering): Released all slaves [ 581.369156][ T1338] bond0 (unregistering): (slave bridge_slave_1): Releasing active interface [ 581.379730][ T1338] bond0 (unregistering): Released all slaves [ 581.399207][ T1338] bond4 (unregistering): Released all slaves [ 581.414775][ T1338] bond5 (unregistering): Released all slaves [ 581.432787][ T1338] bond6 (unregistering): Released all slaves [ 581.449482][ T1338] bond7 (unregistering): Released all slaves [ 581.464342][ T9772] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.557442][T18039] tipc: Enabling of bearer rejected, failed to enable media [ 581.577448][T18063] netlink: 'syz.3.3006': attribute type 1 has an invalid length. [ 581.673731][T18048] syzkaller0: entered promiscuous mode [ 581.686382][T18048] syzkaller0: entered allmulticast mode [ 581.768306][ T1338] mÿ5nè‹Ò: left promiscuous mode [ 581.800524][T18069] netlink: 'syz.2.3009': attribute type 1 has an invalid length. [ 581.818195][T18069] sctp: [Deprecated]: syz.2.3009 (pid 18069) Use of int in max_burst socket option. [ 581.818195][T18069] Use struct sctp_assoc_value instead [ 582.033865][T18072] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 583.270734][T16778] Bluetooth: hci3: command tx timeout [ 583.417954][T17963] chnl_net:caif_netlink_parms(): no params data found [ 583.430607][ T1338] : left promiscuous mode [ 583.435194][T18066] lo speed is unknown, defaulting to 1000 [ 583.454775][T18075] syzkaller0: entered promiscuous mode [ 583.462278][T18075] syzkaller0: entered allmulticast mode [ 583.479023][T18078] tipc: Started in network mode [ 583.484145][T18078] tipc: Node identity 2ae8c4c0061a, cluster identity 4711 [ 583.491777][T18078] tipc: Enabled bearer , priority 0 [ 583.500722][T18086] tipc: Resetting bearer [ 583.532340][ T1338] tipc: Left network mode [ 583.533196][T18066] lo speed is unknown, defaulting to 1000 [ 583.613070][T18068] lo speed is unknown, defaulting to 1000 [ 583.732895][T18086] tipc: Resetting bearer [ 583.807429][T18086] tipc: Disabling bearer [ 583.999028][T18068] lo speed is unknown, defaulting to 1000 [ 584.255349][T17963] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.276784][T17963] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.306695][T17963] bridge_slave_0: entered allmulticast mode [ 584.326017][T17963] bridge_slave_0: entered promiscuous mode [ 584.361461][T17963] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.386760][T17963] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.412872][T17963] bridge_slave_1: entered allmulticast mode [ 584.438434][T17963] bridge_slave_1: entered promiscuous mode [ 584.458712][T18113] netlink: 'syz.3.3016': attribute type 1 has an invalid length. [ 584.632892][T18113] bond1: entered promiscuous mode [ 584.640377][T18113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 584.665476][T17963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.708534][T18120] 8021q: adding VLAN 0 to HW filter on device bond2 [ 584.721367][T18120] bond1: (slave bond2): making interface the new active one [ 584.729115][T18120] bond2: entered promiscuous mode [ 584.735387][T18120] bond1: (slave bond2): Enslaving as an active interface with an up link [ 584.831123][T17963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.978840][T18131] __nla_validate_parse: 5 callbacks suppressed [ 584.978861][T18131] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3018'. [ 585.184092][T18136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3020'. [ 585.215602][T18136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3020'. [ 585.228011][T17963] team0: Port device team_slave_0 added [ 585.245050][T17963] team0: Port device team_slave_1 added [ 585.349290][T16778] Bluetooth: hci3: command tx timeout [ 585.398521][T17963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.419641][T17963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.481681][T17963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.517520][T17963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.524543][T17963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.551667][T17963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.000054][T17963] hsr_slave_0: entered promiscuous mode [ 586.045743][T17963] hsr_slave_1: entered promiscuous mode [ 586.057499][T17963] debugfs: 'hsr0' already exists in 'hsr' [ 586.081332][T17963] Cannot create hsr debugfs directory [ 586.101884][T18151] siw: device registration error -23 [ 586.154569][T18154] siw: device registration error -23 [ 586.237212][ T1338] hsr_slave_0: left promiscuous mode [ 586.257983][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.417052][T18166] netlink: 'syz.3.3026': attribute type 1 has an invalid length. [ 586.430652][T18166] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3026'. [ 586.454237][T18166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3026'. [ 586.564522][ T1338] team0 (unregistering): Port device team_slave_1 removed [ 586.614041][ T1338] team0 (unregistering): Port device team_slave_0 removed [ 586.930736][T18180] netlink: 'syz.3.3028': attribute type 1 has an invalid length. [ 586.944000][T18180] netlink: 'syz.3.3028': attribute type 2 has an invalid length. [ 586.953145][T18180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3028'. [ 586.965675][T18180] netlink: 'syz.3.3028': attribute type 3 has an invalid length. [ 586.978957][T18180] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3028'. [ 587.155784][T18184] ipt_ECN: cannot use operation on non-tcp rule [ 587.174287][T18184] Cannot find add_set index 2 as target [ 587.198610][T17963] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.302937][ T1338] IPVS: stop unused estimator thread 0... [ 587.340967][T18188] lo speed is unknown, defaulting to 1000 [ 587.374114][T17963] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.401587][T18198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3031'. [ 587.423786][T18197] netlink: 23 bytes leftover after parsing attributes in process `syz.3.3030'. [ 587.435033][T16778] Bluetooth: hci3: command tx timeout [ 587.522237][T18203] xt_TCPMSS: Only works on TCP SYN packets [ 587.563456][T18188] lo speed is unknown, defaulting to 1000 [ 587.710940][ T9772] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.747801][ T9772] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.970557][T17963] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.014159][ T9772] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.052816][ T9772] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.099726][T17963] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.343960][T18231] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3035'. [ 588.411581][T18233] netlink: 'syz.4.3036': attribute type 3 has an invalid length. [ 588.735977][T17963] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 588.809493][T17963] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 588.878377][T17963] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 588.977897][T17963] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 589.326008][T18280] veth0_vlan: entered allmulticast mode [ 589.411920][T17963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.479580][T17963] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.537294][ T9778] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.544467][ T9778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.604507][ T9778] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.611790][ T9778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.719224][T18302] netlink: 'syz.1.3048': attribute type 11 has an invalid length. [ 590.029277][T18320] hsr0: left promiscuous mode [ 590.034084][T18320] hsr0: left allmulticast mode [ 590.091109][T18320] hsr_slave_0: left allmulticast mode [ 590.103988][T18320] hsr_slave_1: left allmulticast mode [ 590.134964][T18320] ip6gre1: left promiscuous mode [ 590.148967][T18320] geneve2: left promiscuous mode [ 590.155882][T18320] geneve2: left allmulticast mode [ 590.161596][T18320] ip6gre4: left promiscuous mode [ 590.201162][T18320] ip6gre4: left allmulticast mode [ 590.217435][T18320] bond4: left promiscuous mode [ 590.229090][T18320] bond5: left promiscuous mode [ 590.234111][T18320] bond5: left allmulticast mode [ 590.236069][T18338] __nla_validate_parse: 2 callbacks suppressed [ 590.248062][T18320] team1: left promiscuous mode [ 590.255609][T18320] team1: left allmulticast mode [ 590.261547][T18320] team2: left promiscuous mode [ 590.263149][T18337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3056'. [ 590.266697][T18338] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.3055'. [ 590.285235][T18320] team2: left allmulticast mode [ 590.305027][T18337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3056'. [ 590.336741][T18331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3055'. [ 590.488825][T18346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3058'. [ 590.613920][T17963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.708934][T17963] veth0_vlan: entered promiscuous mode [ 590.789946][T17963] veth1_vlan: entered promiscuous mode [ 590.866010][T18377] netlink: 15672 bytes leftover after parsing attributes in process `syz.4.3062'. [ 590.890873][T18377] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3062'. [ 590.924161][T18377] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3062'. [ 591.068827][T18383] lo speed is unknown, defaulting to 1000 [ 591.187836][T18383] lo speed is unknown, defaulting to 1000 [ 591.190908][T17963] veth0_macvtap: entered promiscuous mode [ 591.206861][T18393] sctp: [Deprecated]: syz.2.3064 (pid 18393) Use of struct sctp_assoc_value in delayed_ack socket option. [ 591.206861][T18393] Use struct sctp_sack_info instead [ 591.246570][T18384] syzkaller1: entered promiscuous mode [ 591.265700][T18384] syzkaller1: entered allmulticast mode [ 591.374756][T17963] veth1_macvtap: entered promiscuous mode [ 591.541660][T17963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.598744][T17963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.753596][T18400] syzkaller0: entered promiscuous mode [ 591.759405][T18400] syzkaller0: entered allmulticast mode [ 591.772530][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.825905][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.878820][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.907590][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.646446][T18419] pim6reg: entered allmulticast mode [ 593.705848][ T9779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.717495][ T9779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.798349][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.808354][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.872400][T18439] bond2: entered allmulticast mode [ 593.921015][T18445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3070'. [ 593.950457][T18445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3070'. [ 593.983859][T18449] veth0_to_bridge: entered promiscuous mode [ 594.162447][T18439] bridge2: entered promiscuous mode [ 594.193988][T18439] bridge2: entered allmulticast mode [ 594.211425][T18448] veth0_to_bridge: left promiscuous mode [ 594.419737][T18462] syzkaller0: entered promiscuous mode [ 594.436408][T18462] syzkaller0: entered allmulticast mode [ 594.475453][T18460] syzkaller0: entered promiscuous mode [ 594.491691][T18460] syzkaller0: entered allmulticast mode [ 594.560180][T18469] netlink: 'syz.2.3077': attribute type 1 has an invalid length. [ 594.603087][T18470] gretap1: entered allmulticast mode [ 594.760826][T18474] lo speed is unknown, defaulting to 1000 [ 594.785078][T18474] lo speed is unknown, defaulting to 1000 [ 594.875639][T18489] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3 [ 595.031134][T18493] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 595.140520][T18497] netlink: 'syz.4.3085': attribute type 13 has an invalid length. [ 595.166016][T18497] netlink: 'syz.4.3085': attribute type 17 has an invalid length. [ 595.247737][T18497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.259854][T18497] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.278480][T18497] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 595.418345][T18502] __nla_validate_parse: 3 callbacks suppressed [ 595.418368][T18502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3087'. [ 595.637274][T18521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3091'. [ 595.649512][T18521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3091'. [ 595.711207][T18521] geneve2: entered promiscuous mode [ 595.727226][T18521] geneve2: entered allmulticast mode [ 595.752362][T18527] netlink: 'syz.1.3094': attribute type 4 has an invalid length. [ 595.770197][T18528] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3092'. [ 595.888437][T18526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3093'. [ 595.899858][T14397] lo speed is unknown, defaulting to 1000 [ 595.905646][T14397] syz0: Port: 1 Link DOWN [ 595.927491][ T5881] lo speed is unknown, defaulting to 1000 [ 596.250577][T18541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3096'. [ 596.598436][T18563] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 596.623690][T18560] lo speed is unknown, defaulting to 1000 [ 596.641610][T18560] lo speed is unknown, defaulting to 1000 [ 597.137456][T18573] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3104'. [ 597.209499][T18583] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20003 [ 597.360653][T18577] syzkaller0: entered promiscuous mode [ 597.376651][T18577] syzkaller0: entered allmulticast mode [ 597.641716][T18596] netlink: 'syz.2.3111': attribute type 21 has an invalid length. [ 597.677240][T18596] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3111'. [ 597.727507][T18595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3112'. [ 598.069524][T18610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3115'. [ 598.283350][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 598.328085][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 598.355931][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 598.375924][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 598.383834][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 599.715079][T18596] netlink: 'syz.2.3111': attribute type 4 has an invalid length. [ 599.909516][T18613] lo speed is unknown, defaulting to 1000 [ 599.958554][T18613] lo speed is unknown, defaulting to 1000 [ 600.309765][T18638] netlink: 'syz.3.3121': attribute type 4 has an invalid length. [ 600.467900][ T5831] Bluetooth: hci0: command tx timeout [ 600.675570][ T9780] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.688931][T18652] __nla_validate_parse: 4 callbacks suppressed [ 600.688953][T18652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3126'. [ 600.755863][T18656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3128'. [ 600.770186][T18656] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3128'. [ 600.849624][ T9775] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.859202][ T9775] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.947583][T18658] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 600.996185][T18658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 601.147438][ T9780] netdevsim netdevsim4 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.481892][T18677] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3133'. [ 601.501178][T18675] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3130'. [ 601.618951][T18680] netlink: 'syz.1.3127': attribute type 7 has an invalid length. [ 602.214248][ T1338] bond2 (unregistering): (slave geneve3): Releasing active interface [ 602.375901][T18694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3134'. [ 602.450693][T18695] netlink: 356 bytes leftover after parsing attributes in process `syz.3.3134'. [ 602.547399][ T5831] Bluetooth: hci0: command tx timeout [ 602.555063][ T1338] bond0 (unregistering): Released all slaves [ 602.567035][ T1338] bond1 (unregistering): Released all slaves [ 602.589704][ T1338] bond2 (unregistering): Released all slaves [ 602.608853][ T1338] bond3 (unregistering): Released all slaves [ 602.625254][ T1338] bond4 (unregistering): Released all slaves [ 602.646669][ T1338] bond5 (unregistering): Released all slaves [ 602.666617][T18668] syzkaller0: entered promiscuous mode [ 602.672255][T18668] syzkaller0: entered allmulticast mode [ 602.683995][T18671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3127'. [ 602.706190][T18671] lo: Caught tx_queue_len zero misconfig [ 602.824752][ T1338] : left promiscuous mode [ 602.958935][ T1338] tipc: Left network mode [ 603.000769][ T1338] IPVS: stopping backup sync thread 16004 ... [ 603.113883][T18704] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3138'. [ 603.125849][T18708] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3138'. [ 603.198104][T18709] netlink: 'syz.2.3138': attribute type 1 has an invalid length. [ 603.383711][T18724] netlink: 'syz.0.3143': attribute type 7 has an invalid length. [ 603.406231][T18724] netlink: 'syz.0.3143': attribute type 8 has an invalid length. [ 603.418447][T18724] netlink: 'syz.0.3143': attribute type 9 has an invalid length. [ 603.535424][T18613] chnl_net:caif_netlink_parms(): no params data found [ 604.277169][T18613] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.284576][T18613] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.314523][T18613] bridge_slave_0: entered allmulticast mode [ 604.350271][T18613] bridge_slave_0: entered promiscuous mode [ 604.411895][T18763] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 604.524091][T18613] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.544807][T18613] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.561805][T18613] bridge_slave_1: entered allmulticast mode [ 604.593537][T18613] bridge_slave_1: entered promiscuous mode [ 604.627643][ T5831] Bluetooth: hci0: command tx timeout [ 604.645308][T18773] netlink: 'syz.3.3152': attribute type 1 has an invalid length. [ 604.886006][T18613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.983923][T18613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.122058][ T1338] hsr_slave_0: left promiscuous mode [ 605.140839][ T1338] hsr_slave_1: left promiscuous mode [ 605.688700][T18613] team0: Port device team_slave_0 added [ 605.705688][T18613] team0: Port device team_slave_1 added [ 605.811350][T18613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.829567][T18613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.871900][T18613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.887079][T18613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.894462][T18613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.958835][T18613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.297217][T18613] hsr_slave_0: entered promiscuous mode [ 606.314578][T18613] hsr_slave_1: entered promiscuous mode [ 606.336631][T18613] debugfs: 'hsr0' already exists in 'hsr' [ 606.342440][T18613] Cannot create hsr debugfs directory [ 606.517138][T18820] rdma_op ffff88804b73b1f0 conn xmit_rdma 0000000000000000 [ 606.530258][T18826] tipc: Enabled bearer , priority 0 [ 606.545794][T18830] syzkaller0: entered promiscuous mode [ 606.558569][T18830] syzkaller0: entered allmulticast mode [ 606.706297][ T5831] Bluetooth: hci0: command tx timeout [ 606.775728][T18830] tipc: Resetting bearer [ 606.852948][T18844] ieee802154 phy1 wpan1: encryption failed: -22 [ 606.873403][T18825] tipc: Resetting bearer [ 606.971870][T18825] tipc: Disabling bearer [ 607.074268][T18851] delete_channel: no stack [ 607.177384][T18613] netdevsim netdevsim4 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.452779][T18613] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.690698][T18880] SET target dimension over the limit! [ 608.169052][T18613] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.317832][T18895] tipc: Enabled bearer , priority 0 [ 608.328874][T18891] __nla_validate_parse: 5 callbacks suppressed [ 608.328896][T18891] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3184'. [ 608.375985][T18898] syzkaller0: entered promiscuous mode [ 608.383440][T18898] syzkaller0: entered allmulticast mode [ 608.459741][T18894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3184'. [ 608.500367][T18891] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3184'. [ 608.542229][T18613] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.641450][T18894] syzkaller0: mtu less than device minimum [ 608.664636][T18890] tipc: Resetting bearer [ 608.717454][T18890] tipc: Disabling bearer [ 608.810502][T18917] xt_CONNSECMARK: invalid mode: 0 [ 608.821448][T18915] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3187'. [ 608.924588][T18915] syzkaller0: entered promiscuous mode [ 608.956929][T18915] syzkaller0: entered allmulticast mode [ 608.974018][T18923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3190'. [ 609.124601][T18923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3190'. [ 609.218420][T18613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 609.243086][T18931] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3191'. [ 609.264152][T18613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 609.289564][T18923] netlink: 5120 bytes leftover after parsing attributes in process `syz.2.3190'. [ 609.342310][T18934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3191'. [ 609.359319][T18613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 609.372811][T18923] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3190'. [ 609.392461][T18613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 609.656711][T18948] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 609.917803][T18613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.999686][T18613] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.032407][ T9778] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.039676][ T9778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.091372][ T9779] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.098613][ T9779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.265994][T18975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 610.923991][T18613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.559903][T19032] netlink: 'syz.2.3210': attribute type 1 has an invalid length. [ 611.663013][T19032] 8021q: adding VLAN 0 to HW filter on device bond4 [ 611.750452][T19034] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 611.823680][T19034] bond4: (slave batadv2): making interface the new active one [ 611.833581][T19034] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 611.969359][T19050] x_tables: ip_tables: ah match: only valid for protocol 51 [ 612.008617][T19052] ip6t_srh: unknown srh invflags BA61 [ 612.062403][T19056] netlink: 'syz.3.3215': attribute type 5 has an invalid length. [ 612.317478][T18613] veth0_vlan: entered promiscuous mode [ 612.386583][T18613] veth1_vlan: entered promiscuous mode [ 612.501801][T18613] veth0_macvtap: entered promiscuous mode [ 612.526594][T18613] veth1_macvtap: entered promiscuous mode [ 612.565659][T19076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 612.872250][T19085] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 613.392058][T18613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.410214][T19107] __nla_validate_parse: 12 callbacks suppressed [ 613.410233][T19107] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3224'. [ 613.456547][T19113] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 613.464392][T19113] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 613.488602][T19113] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 613.514772][T18613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.524835][T19113] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 613.561227][ T9772] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.570646][T19113] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 613.577994][ T9772] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.589566][ T9775] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.605570][ T9775] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.621838][T19113] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 613.646627][T19113] net_ratelimit: 29 callbacks suppressed [ 613.646649][T19113] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 613.662736][T19113] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 613.674175][T19113] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 613.730613][T19113] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 613.740866][T19113] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 613.755176][T19113] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 613.770283][T19113] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 613.779744][T19113] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 613.789397][T19113] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 613.799841][T19113] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 613.845181][ T9775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.858273][ T9775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.006053][ T9775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.026321][ T9775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.034661][T19129] netlink: 'syz.0.3229': attribute type 10 has an invalid length. [ 614.061795][T19129] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3229'. [ 614.319917][T19147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3234'. [ 614.742774][T19173] lo speed is unknown, defaulting to 1000 [ 614.887320][T19173] lo speed is unknown, defaulting to 1000 [ 615.813315][ T5484] veth0_vlan: left promiscuous mode [ 615.902037][ T5484] veth0_vlan: entered promiscuous mode [ 615.976202][ T29] audit: type=1800 audit(1771466192.847:13): pid=19206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3246" name="blkio.bfq.time_recursive" dev="tmpfs" ino=440 res=0 errno=0 [ 616.552026][T16778] Bluetooth: hci0: command 0x0405 tx timeout [ 616.760118][T19234] sctp: [Deprecated]: syz.2.3253 (pid 19234) Use of struct sctp_assoc_value in delayed_ack socket option. [ 616.760118][T19234] Use struct sctp_sack_info instead [ 616.956854][T19246] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 617.167402][T19246] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 617.227173][T19246] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 617.302779][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 617.317529][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 617.328334][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 617.338720][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 617.355943][T19246] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 617.373181][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 617.452338][T19246] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 617.483939][T19246] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 617.505865][T19246] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 617.605256][T19246] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 617.640402][ T5818] bond3: (slave syz_tun): Releasing backup interface [ 617.691208][T19246] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 617.705698][T19259] lo speed is unknown, defaulting to 1000 [ 617.724122][T19259] lo speed is unknown, defaulting to 1000 [ 618.078509][T19262] infiniband !yz!: set active [ 618.085562][T19262] infiniband !yz!: added team_slave_0 [ 618.165781][T19262] RDS/IB: !yz!: added [ 618.172619][T19262] smc: adding ib device !yz! with port count 1 [ 618.179599][T19262] smc: ib device !yz! port 1 has no pnetid [ 618.308013][T19259] chnl_net:caif_netlink_parms(): no params data found [ 618.460752][T19259] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.473361][T19259] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.481896][T19259] bridge_slave_0: entered allmulticast mode [ 618.490619][T19259] bridge_slave_0: entered promiscuous mode [ 618.503305][T19259] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.511095][T19259] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.518757][T19259] bridge_slave_1: entered allmulticast mode [ 618.527537][T19259] bridge_slave_1: entered promiscuous mode [ 618.580969][T19259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.594546][T19259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.646609][T19259] team0: Port device team_slave_0 added [ 618.657502][T19259] team0: Port device team_slave_1 added [ 618.702672][T19259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.713389][T19259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.743942][T19259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.757620][T19259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.764605][T19259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.797916][T19259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.871052][T19259] hsr_slave_0: entered promiscuous mode [ 618.880282][T19259] hsr_slave_1: entered promiscuous mode [ 618.887407][T19259] debugfs: 'hsr0' already exists in 'hsr' [ 618.893314][T19259] Cannot create hsr debugfs directory [ 619.427726][ T5831] Bluetooth: hci4: command tx timeout [ 619.670432][T19232] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 619.694673][T19259] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 619.753159][T19259] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 619.816622][T19259] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 619.872545][T19259] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 619.891776][T19282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3262'. [ 619.939941][T19282] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 619.969303][T19282] tipc: Enabled bearer , priority 26 [ 620.006479][T19287] IPVS: stopping backup sync thread 19297 ... [ 620.008828][T19297] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0, syncid = 786440, id = 0 [ 620.247152][T19259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.301969][T19259] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.334425][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.341687][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.382255][ T9776] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.389603][ T9776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.485838][T19305] macsec1: entered allmulticast mode [ 620.492858][T19305] macsec0: entered allmulticast mode [ 620.499359][T19305] veth1_macvtap: entered allmulticast mode [ 620.518501][T19259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 620.598610][T19312] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3268'. [ 620.702987][T19315] tipc: Started in network mode [ 620.710263][T19316] xt_socket: unknown flags 0xfc [ 620.717898][T19315] tipc: Node identity 725aa2f440e3, cluster identity 4711 [ 620.725261][T19315] tipc: Enabled bearer , priority 0 [ 620.748163][T19315] syzkaller0: entered promiscuous mode [ 620.762607][T19315] syzkaller0: entered allmulticast mode [ 620.865964][T19321] tipc: Resetting bearer [ 620.944056][T19315] dvmrp12: entered allmulticast mode [ 620.996417][T19314] tipc: Resetting bearer [ 621.049202][T19314] tipc: Disabling bearer [ 621.106205][ T5927] tipc: Node number set to 2835189151 [ 621.154306][T19314] dvmrp12: left allmulticast mode [ 621.207972][T19330] team_slave_0: entered promiscuous mode [ 621.213770][T19330] team_slave_1: entered promiscuous mode [ 621.219593][T19330] geneve0: entered promiscuous mode [ 621.258206][T19330] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 621.288996][T19259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.332017][T19336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3273'. [ 621.363562][T19336] netlink: 'syz.3.3273': attribute type 29 has an invalid length. [ 621.425531][T19340] netlink: 'syz.0.3274': attribute type 10 has an invalid length. [ 621.455827][T19333] lo speed is unknown, defaulting to 1000 [ 621.479819][T19343] netlink: 'syz.0.3274': attribute type 10 has an invalid length. [ 621.504126][T19340] team0: Port device netdevsim0 added [ 621.511258][ T5831] Bluetooth: hci4: command tx timeout [ 621.519182][T19259] veth0_vlan: entered promiscuous mode [ 621.525679][T19333] lo speed is unknown, defaulting to 1000 [ 621.553676][T19259] veth1_vlan: entered promiscuous mode [ 621.602775][T19259] veth0_macvtap: entered promiscuous mode [ 621.615713][T19259] veth1_macvtap: entered promiscuous mode [ 621.718257][T19259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.754355][T19259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.797307][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.815791][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.834890][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.853648][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.015818][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.025398][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.057792][T19357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3279'. [ 622.135032][T19357] bond5: (slave vcan1): refused to change device type [ 622.162524][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.186021][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.319776][T19365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3257'. [ 622.352017][T19364] bridge0: entered promiscuous mode [ 622.359015][T19364] macsec1: entered promiscuous mode [ 622.391763][T19366] xt_bpf: check failed: parse error [ 622.536712][T19368] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3281'. [ 622.546293][T19368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3281'. [ 622.555793][T19368] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3281'. [ 622.577313][T19368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3281'. [ 622.587140][T19368] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3281'. [ 623.526988][T19410] net_ratelimit: 20 callbacks suppressed [ 623.527007][T19410] netlink: zone id is out of range [ 623.586473][ T5831] Bluetooth: hci4: command tx timeout [ 623.602236][T19410] netlink: zone id is out of range [ 623.682964][T19419] netlink: 'syz.0.3294': attribute type 2 has an invalid length. [ 623.693949][T19419] netlink: 'syz.0.3294': attribute type 11 has an invalid length. [ 623.715332][T19410] netlink: zone id is out of range [ 623.739093][T19410] netlink: zone id is out of range [ 623.744294][T19410] netlink: zone id is out of range [ 623.780783][T19410] netlink: zone id is out of range [ 623.846498][T19410] netlink: zone id is out of range [ 623.851688][T19410] netlink: zone id is out of range [ 623.878524][T19410] netlink: zone id is out of range [ 623.896166][T19410] netlink: zone id is out of range [ 623.978654][T19425] tc_dump_action: action bad kind [ 623.991474][T19427] syzkaller0: entered promiscuous mode [ 624.007013][T19427] syzkaller0: entered allmulticast mode [ 624.884055][T19470] syzkaller0: entered promiscuous mode [ 624.889933][T19470] syzkaller0: entered allmulticast mode [ 625.352607][T19488] __nla_validate_parse: 9 callbacks suppressed [ 625.352628][T19488] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3315'. [ 625.381217][T19488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3315'. [ 625.392748][T19488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3315'. [ 625.501718][T19505] netlink: 'syz.1.3319': attribute type 1 has an invalid length. [ 625.666492][ T5831] Bluetooth: hci4: command tx timeout [ 625.912063][T19521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3321'. [ 626.088002][T19524] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3322'. [ 626.103350][T19524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.115172][T19524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.126237][T19524] bond0 (unregistering): Released all slaves [ 626.142384][T19525] xt_hashlimit: size too large, truncated to 1048576 [ 626.288139][T19527] SET target dimension over the limit! [ 626.337082][T19529] x_tables: duplicate underflow at hook 2 [ 626.396015][T19531] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3324'. [ 626.397198][T19499] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 626.478710][T19533] netlink: 212048 bytes leftover after parsing attributes in process `syz.3.3324'. [ 626.578807][T19535] bond1: option updelay: invalid value (18446744072924056005) [ 626.586992][T19535] bond1: option updelay: allowed values 0 - 2147483647 [ 626.611128][T19535] bond1 (unregistering): Released all slaves [ 626.647834][T19545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3328'. [ 626.672598][T19546] dvmrp6: entered allmulticast mode [ 626.684733][T19545] sit1: entered promiscuous mode [ 626.794385][T19548] IPVS: length: 4096 != 24 [ 626.831353][T19548] netlink: 'syz.1.3329': attribute type 4 has an invalid length. [ 627.213433][T19567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3336'. [ 627.551674][T19591] lo speed is unknown, defaulting to 1000 [ 627.564180][T19591] lo speed is unknown, defaulting to 1000 [ 627.601367][T19585] gretap0: refused to change device tx_queue_len [ 627.811803][T19609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3345'. [ 627.979977][T19616] netlink: 'syz.2.3349': attribute type 9 has an invalid length. [ 628.219573][T19643] netlink: 'syz.3.3351': attribute type 4 has an invalid length. [ 628.334943][T19640] netlink: 'syz.4.3352': attribute type 4 has an invalid length. [ 629.288949][T19683] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.297563][T19683] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.592978][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.607847][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 629.946634][T19699] syzkaller1: entered promiscuous mode [ 629.955784][T19699] syzkaller1: entered allmulticast mode [ 630.182311][T19709] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 630.206375][T19711] netlink: 'syz.4.3365': attribute type 3 has an invalid length. [ 630.219261][T19708] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 630.876574][T19745] __nla_validate_parse: 4 callbacks suppressed [ 630.876595][T19745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3374'. [ 630.907953][T19744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3374'. [ 630.950825][T19750] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3376'. [ 631.098522][T19763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3379'. [ 631.141082][T19768] IPVS: set_ctl: invalid protocol: 50 172.20.20.63:20003 [ 631.197479][T19769] Bluetooth: MGMT ver 1.23 [ 631.474057][T19778] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3384'. [ 631.683895][T19752] vlan2: entered promiscuous mode [ 631.703082][T19752] bridge0: entered promiscuous mode [ 631.783169][T19796] mac80211_hwsim hwsim35 wlan0: left promiscuous mode [ 631.840412][T19798] lo speed is unknown, defaulting to 1000 [ 631.853208][T19798] lo speed is unknown, defaulting to 1000 [ 632.028694][T19801] netlink: 'syz.2.3391': attribute type 12 has an invalid length. [ 632.036718][T19801] netlink: 'syz.2.3391': attribute type 29 has an invalid length. [ 632.044573][T19801] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3391'. [ 632.199287][T19808] syzkaller0: entered promiscuous mode [ 632.239814][T19808] syzkaller0: entered allmulticast mode [ 632.243987][T19802] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3390'. [ 632.257188][T19808] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3393'. [ 632.290565][T19812] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3392'. [ 632.417857][T19805] lo speed is unknown, defaulting to 1000 [ 632.448554][T19805] lo speed is unknown, defaulting to 1000 [ 632.448631][T19809] lo speed is unknown, defaulting to 1000 [ 633.137703][T19835] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3397'. [ 633.223211][T19809] lo speed is unknown, defaulting to 1000 [ 633.543286][T19849] xt_CONNSECMARK: invalid mode: 0 [ 633.578799][T19849] syzkaller0: entered promiscuous mode [ 633.585125][T19849] syzkaller0: entered allmulticast mode [ 634.946200][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5340 ms [ 634.954288][ C1] lec:lec_tx_timeout: lec0 [ 636.809120][T19935] __nla_validate_parse: 6 callbacks suppressed [ 636.809140][T19935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3427'. [ 636.975867][T19914] bridge0: port 3(hsr0) entered disabled state [ 636.982373][T19914] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.990099][T19914] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.097889][T19914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.120829][T19914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.301117][T19914] bond1: left promiscuous mode [ 637.310369][T19914] bond2: left promiscuous mode [ 637.320216][T19914] macsec1: left promiscuous mode [ 637.337436][T19935] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode [ 637.344714][T19935] macvtap1: entered promiscuous mode [ 637.418552][T19937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3428'. [ 637.471627][T19623] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.487954][T19623] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.551591][T19955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3432'. [ 637.560887][T19623] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.571119][T19953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.585794][T19623] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.605524][T19957] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3433'. [ 637.617927][T19957] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3433'. [ 637.658733][T19961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.692476][T19955] bridge10: entered promiscuous mode [ 637.704713][T19953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3430'. [ 637.724237][T19955] macsec1: entered promiscuous mode [ 637.742192][T19955] bridge10: port 1(macsec1) entered blocking state [ 637.756293][T19955] bridge10: port 1(macsec1) entered disabled state [ 637.768037][T19961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.783506][T19955] macsec1: entered allmulticast mode [ 637.793224][T19955] bridge10: entered allmulticast mode [ 637.807376][T19965] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3434'. [ 637.810579][T19955] macsec1: left allmulticast mode [ 637.825314][T19955] bridge10: left allmulticast mode [ 637.835682][T19955] bridge10: left promiscuous mode [ 637.899279][T19965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 637.925700][T19965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 637.956684][T19965] bond0 (unregistering): Released all slaves [ 638.162423][T19975] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3436'. [ 638.265465][T19980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3438'. [ 638.294789][T19975] bond0: option packets_per_slave: invalid value (1048582) [ 638.328964][T19975] bond0: option packets_per_slave: allowed values 0 - 65535 [ 638.369425][T19975] bond0 (unregistering): Released all slaves [ 638.730949][T19985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.802403][T19999] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3442'. [ 638.907535][ T29] audit: type=1800 audit(1771466215.787:14): pid=19987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3438" name="memory.events" dev="tmpfs" ino=199 res=0 errno=0 [ 639.088192][T20002] netlink: 'syz.0.3443': attribute type 1 has an invalid length. [ 639.364974][T10395] lec:lec_start_xmit: lec0:No lecd attached [ 639.456635][T20031] netlink: 'syz.2.3448': attribute type 1 has an invalid length. [ 639.477437][T20029] bond_slave_0: entered promiscuous mode [ 639.481608][T20032] net_ratelimit: 769 callbacks suppressed [ 639.481664][T20032] openvswitch: netlink: Flow key attr not present in new flow. [ 639.483772][T20029] bond_slave_1: entered promiscuous mode [ 639.502741][T20032] openvswitch: netlink: Flow key attr not present in new flow. [ 639.532243][T20032] openvswitch: netlink: Flow key attr not present in new flow. [ 639.563344][T20032] openvswitch: netlink: Flow key attr not present in new flow. [ 639.563952][T20029] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 639.583937][T20032] openvswitch: netlink: Flow key attr not present in new flow. [ 639.606603][T20032] openvswitch: netlink: Flow key attr not present in new flow. [ 639.628937][T20032] openvswitch: netlink: Flow key attr not present in new flow. [ 639.638837][T20032] openvswitch: netlink: Flow key attr not present in new flow. [ 639.655020][T20032] openvswitch: netlink: Flow key attr not present in new flow. [ 639.672768][T20032] openvswitch: netlink: Flow key attr not present in new flow. [ 639.965624][T20052] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 641.410892][T20121] netlink: 'syz.0.3473': attribute type 1 has an invalid length. [ 641.545150][T20130] atomic_op ffff888079e86198 conn xmit_atomic 0000000000000000 [ 641.843681][T20150] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 641.950370][T20157] xt_CONNSECMARK: invalid mode: 0 [ 642.288635][T20179] __nla_validate_parse: 79 callbacks suppressed [ 642.288654][T20179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3488'. [ 642.337165][T20179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3488'. [ 642.454667][T20184] netlink: 'syz.4.3489': attribute type 3 has an invalid length. [ 642.515034][T20185] syzkaller0: entered promiscuous mode [ 642.526164][T20185] syzkaller0: entered allmulticast mode [ 642.539164][T20187] bridge0: entered allmulticast mode [ 642.556859][T20187] pim6reg: left allmulticast mode [ 642.562064][T20187] bridge0: left allmulticast mode [ 642.581574][T20191] netlink: 'syz.3.3492': attribute type 3 has an invalid length. [ 642.627454][T20193] netlink: 566 bytes leftover after parsing attributes in process `syz.4.3494'. [ 642.871437][T20201] bond1 (unregistering): Released all slaves [ 643.376352][T20246] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3508'. [ 643.422130][T20251] xt_hashlimit: size too large, truncated to 1048576 [ 643.429938][T20251] xt_hashlimit: invalid interval [ 643.468583][T20251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3509'. [ 643.729374][T20260] syzkaller1: entered promiscuous mode [ 643.759063][T20260] syzkaller1: entered allmulticast mode [ 643.854669][T20269] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3514'. [ 643.872919][T20266] lo speed is unknown, defaulting to 1000 [ 643.883168][T20269] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3514'. [ 643.895248][T20266] lo speed is unknown, defaulting to 1000 [ 643.897088][T20272] netlink: 'syz.0.3512': attribute type 2 has an invalid length. [ 644.946958][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5580 ms [ 644.955038][ C1] lec:lec_tx_timeout: lec0 [ 645.344980][T20309] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3525'. [ 645.356319][T20307] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3525'. [ 645.365349][T20307] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3525'. [ 646.786467][ T5189] udevd[5189]: worker [14784] /devices/virtual/block/nbd0 timeout; kill it [ 646.795779][ T5189] udevd[5189]: seq 29844 '/devices/virtual/block/nbd0' killed [ 647.007115][T20348] xt_ecn: cannot match TCP bits for non-tcp packets [ 647.223557][T20355] veth1_virt_wifi: entered promiscuous mode [ 647.248330][T20355] veth1_virt_wifi: entered allmulticast mode [ 647.561816][T20374] syzkaller0: entered promiscuous mode [ 647.567748][T20374] syzkaller0: entered allmulticast mode [ 647.651101][T20383] netlink: 'syz.1.3549': attribute type 4 has an invalid length. [ 647.914135][T20389] __nla_validate_parse: 4 callbacks suppressed [ 647.914156][T20389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3551'. [ 650.238916][T20387] tipc: Started in network mode [ 650.243887][T20387] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 650.251956][T20387] tipc: Enabled bearer , priority 10 [ 650.496752][T20413] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3557'. [ 650.527274][T20422] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 650.769598][T20439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3562'. [ 650.814964][T20444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3564'. [ 650.860233][T20444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3564'. [ 651.087050][T20446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3564'. [ 651.134673][T20446] nbd: must specify a size in bytes for the device [ 651.151927][T20444] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3564'. [ 651.196631][T20454] batman_adv: batadv0: Adding interface: dummy0 [ 651.203133][T20454] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 651.230200][T20454] batman_adv: batadv0: Interface activated: dummy0 [ 651.240808][T20448] lo speed is unknown, defaulting to 1000 [ 651.251360][T20454] net_ratelimit: 57 callbacks suppressed [ 651.251380][T20454] batadv0: mtu less than device minimum [ 651.265570][T20454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 651.277857][T20454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 651.289726][T20454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 651.301590][T20454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 651.313408][T20454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 651.325285][T20454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 651.337151][T20454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 651.348979][T20454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 651.360654][T20454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 651.397488][T20448] lo speed is unknown, defaulting to 1000 [ 651.397503][T17055] tipc: Node number set to 10463914 [ 651.687283][T20471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3571'. [ 651.964856][T20487] xt_hashlimit: max too large, truncated to 1048576 [ 652.037463][T20491] netlink: 'syz.1.3576': attribute type 4 has an invalid length. [ 652.178195][T20499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3577'. [ 652.206504][T20497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3577'. [ 652.418046][T20502] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 652.456245][T20502] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 652.470920][T20502] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 652.765470][T20519] netlink: 'syz.1.3582': attribute type 4 has an invalid length. [ 653.895094][T20552] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.902891][T20552] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.920636][T20552] bridge0: entered allmulticast mode [ 653.960789][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 653.986713][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 653.993585][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.049963][T20558] netlink: 'syz.1.3593': attribute type 6 has an invalid length. [ 654.059645][T20558] netlink: 'syz.1.3593': attribute type 6 has an invalid length. [ 654.084473][T20558] syzkaller1: entered promiscuous mode [ 654.090977][T20558] syzkaller1: entered allmulticast mode [ 654.101666][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.109052][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.177456][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.190240][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.236615][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.243489][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.285602][T20575] tipc: Enabling of bearer rejected, failed to enable media [ 654.294764][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.321962][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.329304][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.336360][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.343291][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.350401][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.362053][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.376398][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.388590][T20577] netlink: 'syz.3.3599': attribute type 10 has an invalid length. [ 654.397524][T20577] batman_adv: batadv0: Interface deactivated: dummy0 [ 654.417029][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.423087][T20577] batman_adv: batadv0: Removing interface: dummy0 [ 654.423900][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.441681][T20582] netlink: 'syz.3.3599': attribute type 10 has an invalid length. [ 654.451731][T20583] __nla_validate_parse: 1 callbacks suppressed [ 654.451749][T20583] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3597'. [ 654.470968][T20577] team0: Failed to send options change via netlink (err -105) [ 654.479142][T20577] team0: Port device dummy0 added [ 654.483809][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.495319][T20583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3597'. [ 654.508966][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.515892][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.523816][T20582] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 654.532912][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.542803][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.550700][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.566403][T20582] team0: Failed to send options change via netlink (err -105) [ 654.574814][T20582] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 654.592917][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.600668][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.609003][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.619419][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.629465][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.631580][T20582] team0: Port device dummy0 removed [ 654.637878][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.671228][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.678521][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.685617][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.694120][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.701826][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.710459][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.717993][T20582] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 654.719674][T20580] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3597'. [ 654.738820][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.752288][T20554] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 654.760446][T20580] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3597'. [ 654.787275][T20590] netlink: 'syz.2.3601': attribute type 1 has an invalid length. [ 654.793603][T20580] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3597'. [ 654.821388][T20580] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3597'. [ 654.830758][T20580] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3597'. [ 654.843941][T20594] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3601'. [ 654.883194][T20580] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3597'. [ 654.916259][T20580] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3597'. [ 655.143318][T20580] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.150919][T20580] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.606451][T20580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.644693][T20580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.827253][ T30] INFO: task kworker/0:0H:11 blocked for more than 143 seconds. [ 655.846201][ T30] Not tainted syzkaller #0 [ 655.851212][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 655.876273][ T30] task:kworker/0:0H state:D stack:26536 pid:11 tgid:11 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 655.890051][ T30] Workqueue: kblockd blk_mq_requeue_work [ 655.895900][ T30] Call Trace: [ 655.900035][ T30] [ 655.903177][ T30] __schedule+0x1568/0x5290 [ 655.908571][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 655.914016][ T30] ? __pfx___schedule+0x10/0x10 [ 655.919804][ T30] ? schedule+0x90/0x360 [ 655.924427][ T30] schedule+0x164/0x360 [ 655.929468][ T30] schedule_timeout+0x158/0x2c0 [ 655.934692][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 655.942150][ T30] ? __pfx_process_timeout+0x10/0x10 [ 655.953196][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 655.959714][ T30] ? prepare_to_wait_event+0x436/0x480 [ 655.965586][ T30] nbd_queue_rq+0x857/0x1100 [ 655.970968][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 655.977568][ T30] ? unwind_next_frame+0xa5/0x23c0 [ 655.982853][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 655.990727][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 655.995868][ T30] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 656.002228][ T30] ? sbitmap_get+0x229/0x390 [ 656.007690][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 656.013988][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 656.020390][ T30] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 656.027753][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 656.034687][ T30] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 656.041713][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 656.049401][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 656.055055][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 656.063435][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 656.069496][ T30] blk_mq_run_hw_queue+0x348/0x4f0 [ 656.074666][ T30] blk_mq_run_hw_queues+0x26c/0x3f0 [ 656.080154][ T30] blk_mq_requeue_work+0x71c/0x780 [ 656.085334][ T30] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 656.091442][ T30] ? process_scheduled_works+0xa0f/0x17a0 [ 656.097607][ T30] ? process_scheduled_works+0xa0f/0x17a0 [ 656.103479][ T30] process_scheduled_works+0xaec/0x17a0 [ 656.109569][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 656.115692][ T30] ? assign_work+0x3d5/0x5e0 [ 656.120472][ T30] worker_thread+0xa50/0xfc0 [ 656.125157][ T30] kthread+0x388/0x470 [ 656.129888][ T30] ? __pfx_worker_thread+0x10/0x10 [ 656.135043][ T30] ? __pfx_kthread+0x10/0x10 [ 656.139796][ T30] ret_from_fork+0x51e/0xb90 [ 656.144470][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 656.150816][ T30] ? __switch_to+0xc7d/0x1400 [ 656.155563][ T30] ? __pfx_kthread+0x10/0x10 [ 656.160592][ T30] ret_from_fork_asm+0x1a/0x30 [ 656.165610][ T30] [ 656.169493][ T30] [ 656.169493][ T30] Showing all locks held in the system: [ 656.177461][ T30] 3 locks held by kworker/0:0/9: [ 656.182542][ T30] #0: ffff88813fe03548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 656.194278][ T30] #1: ffffc900000e7c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 656.207602][ T30] #2: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 656.218490][ T30] 4 locks held by kworker/0:0H/11: [ 656.223651][ T30] #0: ffff88801fab0948 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 656.238636][ T30] #1: ffffc90000107c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 656.253930][ T30] #2: ffff888076f89598 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 656.263660][ T30] #3: ffff888050bc0380 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 656.273242][ T30] 1 lock held by khungtaskd/30: [ 656.278714][ T30] #0: ffffffff8e75e0a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 656.289747][ T30] 2 locks held by getty/5577: [ 656.294464][ T30] #0: ffff888036e9a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 656.305349][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 656.318827][ T30] 1 lock held by udevd/14784: [ 656.323540][ T30] #0: ffff888029811358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 656.332996][ T30] 3 locks held by kworker/u8:2/19619: [ 656.338648][ T30] #0: ffff88813fe44148 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 656.351808][ T30] #1: ffffc9000b28fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 656.362924][ T30] #2: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 656.372381][ T30] 1 lock held by syz.0.3592/20553: [ 656.377610][ T30] #0: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: ppp_release+0x87/0x1f0 [ 656.386646][ T30] 2 locks held by syz.4.3597/20580: [ 656.391897][ T30] #0: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 656.401522][ T30] #1: ffffffff8e764338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 656.413215][ T30] 1 lock held by syz.3.3599/20576: [ 656.418448][ T30] #0: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: bpf_xdp_link_release+0x29/0x540 [ 656.428562][ T30] 2 locks held by syz.2.3601/20590: [ 656.433819][ T30] #0: ffffffff9010c980 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 656.444820][ T30] #1: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 656.455193][ T30] 1 lock held by syz.2.3601/20594: [ 656.460859][ T30] #0: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 656.472292][ T30] 1 lock held by syz.1.3602/20592: [ 656.477576][ T30] #0: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 656.487755][ T30] 2 locks held by syz.1.3602/20593: [ 656.493007][ T30] #0: ffffffff8f2f3d88 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 656.502685][ T30] #1: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 656.512138][ T30] [ 656.514514][ T30] ============================================= [ 656.514514][ T30] [ 656.523577][ T30] NMI backtrace for cpu 0 [ 656.523598][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 656.523622][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 656.523635][ T30] Call Trace: [ 656.523652][ T30] [ 656.523661][ T30] dump_stack_lvl+0xe8/0x150 [ 656.523696][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 656.523718][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 656.523744][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 656.523769][ T30] sys_info+0x135/0x170 [ 656.523799][ T30] watchdog+0xf90/0xfe0 [ 656.523830][ T30] ? watchdog+0x209/0xfe0 [ 656.523863][ T30] kthread+0x388/0x470 [ 656.523891][ T30] ? __pfx_watchdog+0x10/0x10 [ 656.523915][ T30] ? __pfx_kthread+0x10/0x10 [ 656.523943][ T30] ret_from_fork+0x51e/0xb90 [ 656.523971][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 656.523993][ T30] ? __switch_to+0xc7d/0x1400 [ 656.524016][ T30] ? __pfx_kthread+0x10/0x10 [ 656.524045][ T30] ret_from_fork_asm+0x1a/0x30 [ 656.524099][ T30] [ 656.524107][ T30] Sending NMI from CPU 0 to CPUs 1: [ 656.637114][ C1] NMI backtrace for cpu 1 [ 656.637133][ C1] CPU: 1 UID: 0 PID: 42 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 656.637153][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 656.637166][ C1] Workqueue: events iterate_cleanup_work [ 656.637190][ C1] RIP: 0010:nf_ct_iterate_cleanup+0x4ba/0x520 [ 656.637218][ C1] Code: 8b 7c 24 08 be 00 02 00 00 e8 62 86 ca f7 48 c7 c7 e0 6e e2 8c be 2f 09 00 00 31 d2 e8 7f dd d7 f7 2e 2e 2e 31 c0 4c 8b 24 24 <41> ff c4 44 3b 25 90 c2 54 06 73 18 e8 65 c0 07 f8 e9 d0 fb ff ff [ 656.637234][ C1] RSP: 0018:ffffc90000b279b0 EFLAGS: 00000293 [ 656.637248][ C1] RAX: ffffffff89bc7a75 RBX: ffffc90000b27a60 RCX: ffff8880216c3c80 [ 656.637262][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 656.637273][ C1] RBP: 0000000000000001 R08: ffffffff90109077 R09: 1ffffffff202120e [ 656.637285][ C1] R10: dffffc0000000000 R11: fffffbfff202120f R12: 000000000000d45f [ 656.637297][ C1] R13: ffff888148c6a2f8 R14: dffffc0000000000 R15: 1ffff92000164f4c [ 656.637311][ C1] FS: 0000000000000000(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 656.637325][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 656.637337][ C1] CR2: 000000110c2df1a8 CR3: 0000000076366000 CR4: 00000000003526f0 [ 656.637353][ C1] Call Trace: [ 656.637359][ C1] [ 656.637367][ C1] ? nf_ct_iterate_cleanup+0x10e/0x520 [ 656.637395][ C1] ? __pfx_device_cmp+0x10/0x10 [ 656.637413][ C1] iterate_cleanup_work+0xe8/0x1a0 [ 656.637430][ C1] ? __pfx_iterate_cleanup_work+0x10/0x10 [ 656.637451][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 656.637470][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 656.637489][ C1] process_scheduled_works+0xaec/0x17a0 [ 656.637523][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 656.637545][ C1] ? assign_work+0x3d5/0x5e0 [ 656.637566][ C1] worker_thread+0xa50/0xfc0 [ 656.637600][ C1] kthread+0x388/0x470 [ 656.637623][ C1] ? __pfx_worker_thread+0x10/0x10 [ 656.637640][ C1] ? __pfx_kthread+0x10/0x10 [ 656.637664][ C1] ret_from_fork+0x51e/0xb90 [ 656.637685][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 656.637704][ C1] ? __switch_to+0xc7d/0x1400 [ 656.637722][ C1] ? __pfx_kthread+0x10/0x10 [ 656.637745][ C1] ret_from_fork_asm+0x1a/0x30 [ 656.637779][ C1] [ 656.872167][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 656.879088][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 656.888260][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 656.898413][ T30] Call Trace: [ 656.901737][ T30] [ 656.904710][ T30] vpanic+0x1e0/0x670 [ 656.908750][ T30] panic+0xc5/0xd0 [ 656.912529][ T30] ? __pfx_panic+0x10/0x10 [ 656.916995][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 656.922432][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 656.928633][ T30] watchdog+0xfda/0xfe0 [ 656.932838][ T30] ? watchdog+0x209/0xfe0 [ 656.937202][ T30] kthread+0x388/0x470 [ 656.941306][ T30] ? __pfx_watchdog+0x10/0x10 [ 656.946006][ T30] ? __pfx_kthread+0x10/0x10 [ 656.950637][ T30] ret_from_fork+0x51e/0xb90 [ 656.955258][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 656.960393][ T30] ? __switch_to+0xc7d/0x1400 [ 656.965108][ T30] ? __pfx_kthread+0x10/0x10 [ 656.969742][ T30] ret_from_fork_asm+0x1a/0x30 [ 656.974558][ T30] [ 656.978231][ T30] Kernel Offset: disabled [ 656.982573][ T30] Rebooting in 86400 seconds..