last executing test programs: 2.642996785s ago: executing program 4 (id=1284): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2, 0x9}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x4000}, 0x18) ppoll(&(0x7f00000010c0)=[{r6, 0x2000}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc1f0b000) close(r5) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="090000000000000000000000fcdbdf250a801a000300080017004e234e2714000200fc0200f98000000000000000000000011400010020010000000000000000000000000001"], 0x4c}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="00980000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000165000200fc0200"/68], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[r4, r4, 0xffffffffffffffff, r4, r6], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x2, 0x4, 0xc}, {0x5, 0x1, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r9, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 2.514217332s ago: executing program 1 (id=1286): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="700000000f14000829bd7000fcdbdf25080003000400000008000100000000000800030001006963617374000000000800030003000000080003000300000008000300040000001100450069625f6d756c7469636173740000000008000100"/112], 0x70}, 0x1, 0x0, 0x0, 0x40040}, 0x4000810) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0xcc, 0x10, 0x1, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1210, 0x116245af0baa48c7}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}, @IFLA_MASTER={0x8}, @IFLA_PROP_LIST={0x90, 0x34, 0x0, 0x1, [{0x14, 0x35, 'netpci0\x00'}, {0x14, 0x35, 'gretap0\x00'}, {0x14, 0x35, 'ip6tnl0\x00'}, {0x14, 0x35, 'veth1_to_bond\x00'}, {0x14, 0x35, 'batadv_slave_0\x00'}, {0x14, 0x35, 'ip_vti0\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x0, 0x35, 'wg1\x00'}, {0x0, 0x35, 'pimreg1\x00'}]}]}, 0x12e}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$kcm(0xa, 0x3, 0x87) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}}, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000200)={{0x2, 0xfff, @local}, {0x306, @multicast}, 0x40, {0x2, 0x4e23, @rand_addr=0x64010102}, 'pim6reg1\x00'}) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000080), 0x4) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000e40)=ANY=[@ANYBLOB="54010000100001000000000000000000fc00000000f7ff000000000000000001e000000200"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe80000000000000000000000000008a000000006c000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000050000000000000000000000000000000a0000004000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d00000000000c001500590735000500000008001e0030040000"], 0x154}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x55, 0x2e5, 0x70bd26, 0x1, {0x7, r8}}, 0x18}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r8}, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000080000090059"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in=@private, 0x0, 0x32}, @in6=@loopback, {}, {0x3}, {0x4}, 0x70bd25, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x138}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r6) 1.909069674s ago: executing program 2 (id=1291): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r3, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x1}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x26, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xfffe, 0xb}, {0x3, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r8) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r8, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r9, 0x4a3, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x200440c1}, 0x40010) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r3, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xe, 0x35}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x8}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x81}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xfb}]}, 0x40}, 0x1, 0x0, 0x0, 0x44800}, 0x20040011) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f787900001400028008000140000000020800024000000003180001800d00010073796e70726f787900000000040002900900010073797a30000000000900020073797a320000000014000000110001"], 0xb8}}, 0x40880) 1.907275716s ago: executing program 1 (id=1292): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/21], 0x50) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth1_to_batadv\x00'}) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004b80)={0x0}, 0x1, 0x0, 0x0, 0x4000084}, 0x40000) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[], 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYRES8=0x0, @ANYRESDEC], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r6, @ANYRES16=r6, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4008840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200000009000200"], 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.848922376s ago: executing program 3 (id=1293): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket(0x10, 0x803, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000b4de21f00000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000180)={'syzkaller0\x00', @ifru_names='ip6erspan0\x00'}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18d84fe647d4a3f9e12e66e8020000070000000000000000000000850000008700001a00000020202004aa8a70005f5c47a1a1000000000500000000000000ffffb702000008000000b703000000000000850000007b00000095008d00000000000000000000000000000084c0769c73f2163659216022c1d9f7d6b6db"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="d40100001000000018000000000000000000000000000000950000000000000038720a013653e84c584fdd38a1990000df9e190a587bed507002e83640d72226cbc0c89b926a"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xdd, &(0x7f0000000000)=""/156}, 0x80) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="88010000"], 0x188}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r10, 0x0, 0xd}, 0x18) bind$bt_hci(r9, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000000)="05000000010000", 0x7) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\b', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r11}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r8}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r7, 0x89f6, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000380)={@local, 0x0, 0x0, 0x90, 0x0, [{@local}, {@multicast1}, {@empty}, {@multicast2}, {@dev}, {}, {@local}, {@empty}, {@multicast2}]}}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r11, &(0x7f0000000040)}, 0x20) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x3}}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r12, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18) 1.668756084s ago: executing program 2 (id=1295): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x7, 0xfffff010}, {0x34, 0x29, 0x0, 0xfffff00d}, {0x6, 0x80}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000009d48e65af3dbe18b67238f046f654d27b22f146432af5e71ac6b670e85f1ff36b0b6453e0fe1beb2199ab34dbb3db4d11acad9ce86ac768fb4cb9e23829d5711258cd942c082b2fe284146fbad1f2d67e9dc0db57ef7e84c7678ad8b53c70d2ca78b37b6e95bb4f9e201a6660d33df6ed9a1331a449786016fe51fd28491d6087ab812a9c1e267f2d0f8ab574537ea8513210a23a9fd5feca837e9e9a4a5e8d4b32f558f91518c3a5a4c7a59816d82c72dc9235329531465acffa38b6ffe4be98be4e62675bf3165", @ANYRES16=0x0, @ANYBLOB="050027bd7000fedbdf250600000008000300", @ANYRES32=0x0, @ANYBLOB="0800050006000000100017800400020004000600040002000c00178004000200040006001400178004000400040005000400060004000500"], 0x54}, 0x1, 0x0, 0x0, 0x40048}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000400), &(0x7f0000000440)=0x4) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x9}, 0x8) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x7ffffffe, 0x8, 0x8, 0xc7}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000200000000000000000000009500000000000000bbd687ed5521d54f8c2b59a1a8421c7c67fa75bf4d9451c499b7b36e00b5219f7d20e06edf8ffa0ca7832092452d3081836621dc5eba7c3f1eb3145e9f1bd5837e93ae5098b2ea1811907b450c36337b833fc98e97a8be63ac9fa6f0f7556c2abb16a352ee9529f8a6d3345107540d8b70af79ef2a53733387d843b53ffcca18994e4993d38f1bd3f6287a1d17909e2a40c5e7bc9655958a556a55"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r3}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socket$packet(0x11, 0x2, 0x300) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x18, 0x0, 0x0) socket(0x2, 0x3, 0x100000001) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$alg(0x26, 0x5, 0x0) accept4(r7, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(r4, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) gettid() socket(0x10, 0x803, 0x0) 1.667269011s ago: executing program 4 (id=1296): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000180)={@val, @void, @eth={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x32) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 1.437201503s ago: executing program 2 (id=1299): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000b40)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000001}, [@call={0x85, 0x0, 0x0, 0x41}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x7fff, 0x0, 0xffffffffffffff37, 0x0, 0x0, 0x0, 0x3, 0x9}, 0x50) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x340440f1) setsockopt$sock_attach_bpf(r1, 0x1, 0x12, &(0x7f00000007c0), 0x4) r2 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES64], 0x70}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x1de, 0x0, 0x1, 0xba1, '\x00', r3, 0xffffffffffffffff, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r8 = socket(0x10, 0x5, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000bc0)="ad7f046a140faec2007dec3832c0d0381b19d0e7fc47371b8e80c4f951584ab47630869ec71b71e6232f01b6f7cbb6318f2e078c5882cc", 0x37) accept4(r7, 0x0, 0x0, 0x800) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r7, 0x40049366, &(0x7f0000000b00)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000580)={@local, @private, 0x0}, &(0x7f00000005c0)=0xc) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000740)=@raw=[@tail_call, @call={0x85, 0x0, 0x0, 0xae}, @map_fd={0x18, 0x4}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], &(0x7f0000000800)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x4, 0xb, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000008c0)=[0x1], &(0x7f0000000900)=[{0xfffffffd, 0x3, 0xf, 0x8}, {0x5, 0x1, 0x6}, {0x2, 0x2, 0x9, 0xb}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x20, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@generic={0x0, 0x7, 0x2, 0xfffc, 0x10000}, @exit, @exit, @generic={0x80, 0x7, 0x7, 0xa}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_fd={0x18, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', r10, 0x17, r11, 0x8, &(0x7f00000006c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0xb, 0x6, 0x8}, 0x10, 0x30c57, r12, 0x1, 0x0, &(0x7f0000000a00)=[{0x4, 0x5, 0x2, 0x3}], 0x10, 0xbe8}, 0x94) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r13, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) listen(r13, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="021808070a00000029bd7000fedbdf2503001700ff8000000200da23ffffffff000000000000000002000a000900000000020000000000000100140006000000020013000100000029bd700006350000"], 0x50}}, 0x20000150) getsockopt$IP_SET_OP_GET_BYNAME(r4, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000b80)=0x28) 1.384481023s ago: executing program 2 (id=1300): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'veth1_to_batadv\x00', {'team_slave_1\x00'}, 0x65e}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000040)={'netdevsim0\x00', {0x2, 0x0, @local}}) unshare(0x20000000) unshare(0x10000000) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x4) pwritev(r1, &(0x7f0000000280)=[{&(0x7f0000000100)="3319e0ac1d31958984400ead249720f5338f57037329d27454eda2ddd0c60491c9bf65433dd7c5ea500f7af482d3216e50550c0e10e8c929ef535da941e9503ee59d917fe4604c40b499256e02313c102f8118bef3cedffe1b4b4ebf03d7b6d49b75778a0bb6a6a8d3e9e5dcb35aadc8cccc6139ca592187977424ab21a7eae08b9daeaccf9ec461d159f24cb11729131a41703b82e081ce47c6da620fb23ec30703", 0xa2}, {&(0x7f00000001c0)="46945f08516687defe5e6f8e998b18944077fb57b4fe33f703b712873814f33e4674b0e4cb324d1986d5cc3e29a750157f1e873b2cc9258d483a495df14a19e8577712006abd4512f97aec759d4c25cf601018e2471c8a33ee999c3f10d1caef0110bff2499f9b58eddc9ddb120209cd6695e0568fa1f47e3d1e1e0568b2b5b5fe4863fc641e7d07a24c9f9b51b3ea6f62c8b483ed333e84e6774a35d5629f62f5559d3d", 0xa4}], 0x2, 0x81, 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f00000002c0)=0x4f96) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x2f, 0x97, 0xff, 0x7, 0x51, @dev={0xfe, 0x80, '\x00', 0x15}, @empty, 0x7800, 0x80, 0x7, 0x10001}}) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000003c0)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, r5}, 0xc) setsockopt(r0, 0x1, 0x2, &(0x7f0000000400)="a97e79c7a47873fd8bc1d17b1438e053f10ccbfc42599ad555e05b72e7eff0b45d15f5c820b951dd3e96b4ef3d78c88e249ff2870baf87259054b28df760ab6ccb034a3842036945622105c1aed6bc899cf901854dd8d160f29c0c41b5d098374104f605a93d317714607daad662d0c85108e37ba664ddd34f3a5d92c15d843f10f7f82b215b8d71f8bcb92ea6c85f2950ecd87007f8358d931624eb1fa1d183fc3ce1176942ac2a8eb6816a7de768d6893eaccff3a60e411841a1aa7cede25a2696666bc841a73073631cf0643ddea931fe4675e4f2e75687c377e0d760f8bb83c44f1d07aee312bb526d23353146cbb929dc754081", 0xf6) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x4, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004014) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000640)={0x1, [0x0]}) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@dev}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000780)=0xe8) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x8, [@struct={0xd, 0x9, 0x0, 0x4, 0x0, 0xe, [{0x6, 0x4}, {0x7, 0x2, 0x2}, {0x4, 0x0, 0x6}, {0xc, 0x0, 0x79fac050}, {0x5, 0x4, 0xb57}, {0x10, 0x0, 0xe}, {0x3, 0x5, 0x6}, {0x6, 0x0, 0x8}, {0x2, 0x3, 0x4}]}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x26}}]}, {0x0, [0x2e, 0x61, 0x0, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000000880)=""/4096, 0xbc, 0x1000, 0x1, 0x8, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=@bloom_filter={0x1e, 0x28d4, 0x1ff, 0x400, 0x20008, 0x1, 0x4, '\x00', 0x0, r8, 0x2, 0x2, 0x3, 0x1}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r0) r9 = syz_genetlink_get_family_id$gtp(&(0x7f00000019c0), r1) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x60, r9, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_FAMILY={0x5, 0xd, 0x18}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_TID={0xc}, @GTPA_FAMILY={0x5, 0xd, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r10, &(0x7f0000001b00)="a5d97482254b99b832645284829affd1c73f5746a592bab474b1d2dc7640c135681cbed2b5486999e54a3f097d098011f946784847297796f6dae3294dc3e4adc3b095b63a3ecec21812ad84af3126eff67fbf33ee1802733004fc9621853a3265efd3478efb9c5f66c600ac5c272e169c6546b0bbbcbad26f5fd68916b940439453a73f40ba33da37c14b2d0b6cb48f14cc7f47d9d7633faa59f15c1422a9516817e93d03d2f91c9c5fe1df773a8f4aa6a750ae96b5df4f2d9a67640285d59c403757808bb5c49573884e9e", 0xcc, 0x4040, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040800}, 0x40488c1) 1.353883131s ago: executing program 4 (id=1301): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 32) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) (rerun: 32) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) (async) sendmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x530}}], 0x2, 0x0) (async, rerun: 32) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1e) (async, rerun: 64) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000010d000)={{0x0, 0x54, 0x4, 0x20000000000081, 0x8, 0x2, 0x5, 0x9, 0x6, 0x7c7, 0x3, 0x4, 0x4, 0x9, 0x6}}) (async, rerun: 64) shutdown(r0, 0x0) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r7}, 0x18) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000005c0), &(0x7f00000005c0), 0x208, r5}, 0x38) (async, rerun: 64) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7, r5, 0x0, 0xfeff}, 0x38) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) socket(0x1e, 0x4, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) (rerun: 32) 1.255451895s ago: executing program 4 (id=1302): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xaf14, 0x7656, 0xff, 0x0, 0x7b0136d0, 0x65}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0x10, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x170, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@private=0xa010101, @in=@broadcast, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x20}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x0, 0x0, 0x0, 0x4000}, {}, {}, 0x70bd29, 0x3502, 0xa, 0x4, 0x0, 0x10}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@private=0xa010101}}, @encap={0x1c, 0x4, {0x1, 0x4e21, 0xfffc}}]}, 0x170}}, 0x0) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x414, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x401, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x311, 0x64, 0x0, 0x1, [@nested={0x145, 0x121, 0x0, 0x1, [@generic="d9b45c1c72ea0f6ec741f650e5d8f1c76e4d6e6f78dffc221296c2686a3b0e577e85e2", @generic="d42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481b87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d3888", @typed={0x8, 0xfa, 0x0, 0x0, @fd=r5}, @nested={0xb9, 0x1d, 0x0, 0x1, [@generic="395659cbee1ee6766c7549af751fbf2eb8788253b47d23023a32d9788c32998ee026024e276914d0aae70d786e120337fe9cbc0c9e9e9008c238dd702409482c45a977476e6638789f", @nested={0x6c, 0x1e, 0x0, 0x1, [@nested={0x59, 0xd4, 0x0, 0x1, [@generic="a4803e3fd1af764643b73de45d768de8db52619a63255c11ccef20dfffd887a99225e2f5ecae032cafb7216b237a1429eed88bc6f84aeb562009f34ab2a8894cd1d7697087420e5ab42922b7a9a487ed10c5c0e82b"]}, @typed={0xc, 0xf, 0x0, 0x0, @u64=0x100}]}]}]}, @generic="180187793ce4954a2d0c6394198efd86259a455b383d61a34aed593c5da530877c3102231ea96aa5cefb6c2d99b6fadffd0e3bd891225e8c0d45e6019a16c008707e0724a0a436faaabd146ae5a60224ca6e64f9e38c4349e259ac91811a57b5f522ff05f1", @nested={0x15d, 0xf, 0x0, 0x1, [@typed={0xc, 0x63, 0x0, 0x0, @u64}, @generic="796c3d3cc1f3db290ab3ff8af9998d01a9067f3cebdf5f818852b98b44e11fd441db5f6ccaf5833e192b4dca10fdf86450cae212660821bc12a1c14800e1893737f187022031f06b8d0f53b1090720f9f986853c93b418a7611f89d950d13b469a32796fe9d499cf7fd95151ff157e7e60ea88c4d6be9376ea4b50d5bd551481c915564cb2c452ed234ea4a800df8f95d198d2da935b789495ea7bb9ce6531ae7e6abf36751dba41809d5b16363323", @generic="9d22bafd4ac33962ab17d0d990f22e0ce4779bac24155d82f05498da6c9fa05cee888ef71b4755c9931b0200f564a52cdcc89114643ffd15fb495cd1bbb51ebd9f651e6ad3b3473949c0e79dcb948e0d4396e8c8a09ba50decb89def4523931fc20ba6e7ab5647f65f5ba45c278eec780cb651cd9c4ca1dc794060194b5f6e02947c12ad911895f1c0c5eee9b25581c2b4f2", @typed={0x8, 0x94, 0x0, 0x0, @fd=r5}, @nested={0x4, 0x30}]}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x414}], 0x1}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@ipv6_delrule={0x30, 0x21, 0x11, 0x0, 0x0, {0xa, 0x0, 0x20}, [@FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, 0x30}}, 0x58) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000043000701fefffffffcdbdf25037c0000040045801800018014009c00fe8000000000000000eeff0000000029"], 0x30}}, 0xc000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000)={0x8000000, 0x0, 0x0, 0xb}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.037867803s ago: executing program 2 (id=1304): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x114, 0x2}], 0x10}, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$WPAN_SECURITY(r1, 0x0, 0x21, 0x0, &(0x7f0000000240)) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x6a, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) socket$igmp(0x2, 0x3, 0x2) 960.897116ms ago: executing program 1 (id=1306): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="11072abd7000fcdbdf250500000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10008200}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x6c, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x800}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44080}, 0x1) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000100)={0x5, &(0x7f0000000480)=[{0x7fff, 0x1f, &(0x7f0000000080)="36df2d11b387375fefe97a3e9dc45008b4cf9c7725ad0cd5e464afc37f5b85", 0x1}, {0x0, 0x92, &(0x7f0000000180)="1835963e489f4eed1e804278dd3c8b20638eac1b00a1bb8f23258578a3fc33d018aab590c4d9330e1dbdf1880a2a3352d3219412bbbf53be18b4a8dd7261a5113fd4cc80ed6ae6095dd63203cabcefc117b67183a221fd03056eeebd89a29bb982276896a6214bef8187487afb897979b6d4e52da4b29940bef4a6ed6da9d0d218e9776bf775b3081fc4459471bc8e0d8e81"}, {0x6, 0x3e, &(0x7f00000000c0)="0f68a3d8741084b06cd8988373f45ab08868908870dcf2221e015760ed99cd259c31a306e4738e79748e0baa77623a2fc3f358329d0373f0bdc059a723e0", 0x1, 0x1}, {0x7, 0xdd, &(0x7f00000002c0)="b582914d7a0cb7e978261220a7aeb87dd89686d97f4f0f71bb82aa16d413f8c53c26967c5ea7382ebb0c61f5929b74a66314f799effa916c6d8a803c4691a7dd01564c5cbe774328c5e6511a1f9e0d8ba331f9134dee8b64715783b02a6ec05576aa2107b2e94411f03c4a912de2448613d80fd7ad0a8379b9d953a5d1414f27c360e32fe0d4a59416dd58da9ed4d09a76f6646f2357160a8710c83d314efc6fdb5a1db3d16cf4101b502777a30ea3f81fffe2960ffb99658e83f775080a29865ee0c820fbd7b89cb086c0985a587b727a0c9d50e6f0370140289e7dae"}, {0x2, 0x9c, &(0x7f00000003c0)="ce2004ce1c83c2f6b0765784d36e6ac99a8fc93be07200856d5acbc0a2e1f60124ab4d73858565d9e5d5f20c1416c42e129a546fe9dcfd9fbd11c8f336289e41ed1eb7f7e54d534be78bbbdd1be758673e5b78c1b13b8c2b2a1685d5e52fcb2a0f7ce59acfa77f56e677e109e60022f2bc789531950160b734b6cc8dfae8b88d01a3e5db158b0d52364aa656b2255a8b3fb6a4d4cd9672ed1406cb9f", 0x0, 0x1}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) socket$igmp6(0xa, 0x3, 0x3a) socket(0x11, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0x1d, "43720702ca0917b3352050360ad4bc4c3f954c58e8fe0252c0c4397d24"}}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="880000000314010000000000fbdbdf000000080041007369770014003300627269646765300000000000000000000900020073797a320000000009004100727865001400330076657468305f746f5f627269646765000200020073797a3100000000080041007369770014003300766972745f776966693000000000000062997cb358"], 0x88}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) 924.536083ms ago: executing program 4 (id=1307): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 829.169316ms ago: executing program 4 (id=1309): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x49}, 0x48) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x4000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) syz_genetlink_get_family_id$nl802154(0x0, r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) unshare(0x6a040000) socket(0x8, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)="f752c7c837bbf515759f68851946e40332d888d1842c9c59ef35e1a890accd1ce28628722b70fa0891c356fcba68d0ca24900b812ab3af152b431aa86978dc73db9b", 0x42}], 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 828.566118ms ago: executing program 2 (id=1310): sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001214000427bd7000fddbdf25080001000000000008004f00e1dbcd46fda2f2d71300000008000300ffffffff0800030000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000010000104040000010000000000000000", @ANYRES32=0x0, @ANYBLOB="0305000000000200080025000100000008000500", @ANYRES32=0x0, @ANYBLOB="6f6fa8c176507c456d5e217f672c74e0f4aa0e32151cceae29f8465d443b3cc969be6e5546c1a0cef8d58bce7f856c413dc265a2a23c0f8831fb62726a3dde3df4d68541604660d1ef52c27af754de1c4bad8f9e810be8b034d05323149e59ece4a5522566dfa4397913f22663e1acc4f2bee46614987be9e883cfaeff5e664c9db285a45def74b8b97a16fa7e38d33ae818742d29484b51778f9028b1dc04"], 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0100000004001000040102000400000001000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000008000000000dba605ed567e46a0fc0519c7393485928c51f76b76ba152abb3bfccbda78c7eaa172da1f5ed5a346578ab446fa345ec4efe5cfd9c49e51909d0d44bd1ce3d4e65d47e6ff65ed055f3a312113917829031d87d1f69394a7dc6202c08e4bf7891af6daf117f5f1235470e1e97ac16e78794988c0c165bfe60ce3179a158b1d157091e3c12f2d6fbea9893729a96c33873e504158798990e8c4cd9f3c194f41da0e4450eeca2d39802325e6cd98ed1a10859b58374460e01d8e9a00"/218, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r2, &(0x7f0000000040), 0x0}, 0x20) recvmsg$can_bcm(r1, &(0x7f0000000540)={&(0x7f0000000180)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000040)=""/58, 0x3a}, {&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000200)=""/17, 0x11}, {&(0x7f0000000240)=""/243, 0xf3}, {&(0x7f0000000340)=""/249, 0xf9}], 0x5, &(0x7f0000000580)=""/112, 0x70}, 0x12100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000f0000009500000000000000eec6bae088646c1a"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r4}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0020400000000700000a001400110076657468305f746f5f62726964676500080017004e224e24140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x48000) sendmsg$nl_route(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000300)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4000890) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x80010, r0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRESDEC=r5], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x20000090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x80000, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000940)) 800.961488ms ago: executing program 1 (id=1311): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000400851000000600000018100000", @ANYRES32=r4, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000007030000000000009500000000004000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_addrs=@isdn={0x22, 0x0, 0x2a, 0x34, 0x81}}) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000000000)=0xd938, 0x4) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newtfilter={0x6c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x7}, {0x2}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_bpf={0x2c, 0x11d, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x6c}}, 0x0) 696.22425ms ago: executing program 0 (id=1312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000001040102000000000000b2258e98d736d2818a0f25000000000000da84696659cebaa45dd2fff3107b62224c10c28dae38582f48d8e5f1158c6eb49127639737e288d49b2bff0100000000b95dbbd1a2e247e1266c4cd260ba15a8d7059a0d5f9b420b3bddc9b5fe0ff1686d9afaf35a81"], 0x1c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x3, 0x10}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xf}}}, 0x24}}, 0x14000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004"], 0xb4}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x20, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x14) unshare(0x8000000) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffffff57, 0x3}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 622.456935ms ago: executing program 3 (id=1313): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000006c000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000044010500ac14143b000000000000000000000000000004d22b00000000000000ac14140c000000000000000000000000000000000001ff00000000000000000000000000fc020000000000000000000000000000000000006c0000000000000064010102000000000000000000000000023500000400000000000000fcffffff0000000000000000000000000000000000000001000000003c"], 0x1fc}}, 0x0) 509.48424ms ago: executing program 0 (id=1314): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005008000000000000000000018111800", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf090000000000005509010000000000950000000000000018000000d200000000ff8000ffffff7f18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000e0000008500000006000000bf91000000000000b702000000000000850000002a000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x590b}, 0x94) 429.965271ms ago: executing program 0 (id=1315): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe000000003408000000001700638a00fe00000000bfa102010000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b703000008000000620000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 415.593018ms ago: executing program 1 (id=1316): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6074280000000000000000000000bbff0200000000000000000000000000018900907800001000fe88"], 0x0) 357.563747ms ago: executing program 3 (id=1317): socket$netlink(0x10, 0x3, 0xa) (async) r0 = socket$netlink(0x10, 0x3, 0xa) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 258.327425ms ago: executing program 3 (id=1318): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r4}, 0x18) sendmmsg(r2, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="1b", 0x1}], 0x1}}], 0x1, 0x0) 249.025449ms ago: executing program 0 (id=1319): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 242.540479ms ago: executing program 1 (id=1320): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7379e9, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x33}}, 0x18}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x34, r3, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x6}]}}}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7379e9, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x33}}, 0x18}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x34, r3, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x6}]}}}]}, 0x44}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) (async) 133.951631ms ago: executing program 0 (id=1321): r0 = socket(0x22, 0x2, 0x1) close(r0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000900)=ANY=[@ANYRES32=r2, @ANYBLOB="70e80600fcfcdb32f2efdcfed58500"], 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0xfff7ffff, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x25, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ldst={0x0, 0x2, 0x0, 0x5, 0x9, 0x2, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x6c}, @alu={0x4, 0x0, 0x3, 0xb, 0x4, 0x19, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0xa, 0x4, 0xb, 0x6, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000e80)=""/4096, 0x40f00, 0x1d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r4, r4, r4, r4, r3], 0x0, 0x10, 0x1}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @multicast2, @remote}, &(0x7f0000000380)=0xc) r7 = getpid() r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="030700006200190000000b0000000800030048"], 0x1c}}, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r10, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_encap(r10, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) sendmsg$MPTCP_PM_CMD_REMOVE(r8, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x5400001}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x54, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7ff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x24008084) setsockopt$inet6_udp_encap(r10, 0x11, 0x64, &(0x7f00000001c0)=0x2, 0x4) r11 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x402, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x37f}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="430000001000010000000000000000001500000a1c000000080a000300000000000000000700000708000a4000000002440000000c0a010100000000000000000a00007f0000000000000031000000000900010073797a31000000001800038033fe00800c00018006000100d1030000040000802c0000000e0a010200000000000000000a000000090d010073797a31000000000900020073797e3100000000140000001100010000000000000000000100000aed3ec69ba687b76e52b8fa64d5f69d1d92f9e4ce982e7ed1eac3b6b2d379367adb0b431e34088da2bccd8cdcf80dee82ed28dec242f6"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0xc850) r14 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r14, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r5, r6, 0x25, 0x10, @val=@iter={&(0x7f0000000440)=@task={r7, 0xffffffffffffffff, r11}, 0x10}}, 0x20) r15 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r15}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 133.296971ms ago: executing program 3 (id=1322): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000000000850000009b000000180100002020752500000000002020207b1af8ff00000000bfa1000000000000d4680000f8ffffffb702000008000000b7030000fcffffff850000007300fff895"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) 1.412577ms ago: executing program 0 (id=1323): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000001000000000000ea04850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x3c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000007f00feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff6f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r5}, 0x18) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 0s ago: executing program 3 (id=1324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts. [ 66.045257][ T5818] cgroup: Unknown subsys name 'net' [ 66.198303][ T5818] cgroup: Unknown subsys name 'cpuset' [ 66.207117][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.598297][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.959426][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.974729][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.982616][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.989996][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.998069][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.006551][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.014166][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.021779][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.029266][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.036876][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.037345][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.044061][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.052884][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.059757][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.072818][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.085176][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.106065][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.113537][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.127132][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.134618][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.137697][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.143467][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.149751][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.155729][ T5152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.225327][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.624345][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 70.911664][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 70.948753][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.956911][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.964348][ T5828] bridge_slave_0: entered allmulticast mode [ 70.973490][ T5828] bridge_slave_0: entered promiscuous mode [ 71.004055][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 71.021915][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.029196][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.036570][ T5828] bridge_slave_1: entered allmulticast mode [ 71.043570][ T5828] bridge_slave_1: entered promiscuous mode [ 71.132781][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 71.166660][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.191647][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 71.204187][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.317148][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.325070][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.332232][ T5829] bridge_slave_0: entered allmulticast mode [ 71.339839][ T5829] bridge_slave_0: entered promiscuous mode [ 71.360814][ T5828] team0: Port device team_slave_0 added [ 71.366656][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.373814][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.381124][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.381817][ T5843] bridge_slave_0: entered allmulticast mode [ 71.387747][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.395397][ T5843] bridge_slave_0: entered promiscuous mode [ 71.407731][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.414988][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.422206][ T5843] bridge_slave_1: entered allmulticast mode [ 71.429313][ T5843] bridge_slave_1: entered promiscuous mode [ 71.441555][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.448878][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.456349][ T5829] bridge_slave_1: entered allmulticast mode [ 71.463295][ T5829] bridge_slave_1: entered promiscuous mode [ 71.476286][ T5828] team0: Port device team_slave_1 added [ 71.578919][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.603838][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.625525][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.632492][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.658696][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.672971][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.691709][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.699758][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.707078][ T5836] bridge_slave_0: entered allmulticast mode [ 71.713999][ T5836] bridge_slave_0: entered promiscuous mode [ 71.724089][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.747966][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.755012][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.781135][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.802828][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.810168][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.817656][ T5836] bridge_slave_1: entered allmulticast mode [ 71.824727][ T5836] bridge_slave_1: entered promiscuous mode [ 71.842429][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.849740][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.857072][ T5835] bridge_slave_0: entered allmulticast mode [ 71.864008][ T5835] bridge_slave_0: entered promiscuous mode [ 71.880840][ T5843] team0: Port device team_slave_0 added [ 71.909533][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.916930][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.924050][ T5835] bridge_slave_1: entered allmulticast mode [ 71.931430][ T5835] bridge_slave_1: entered promiscuous mode [ 71.954730][ T5843] team0: Port device team_slave_1 added [ 71.973286][ T5829] team0: Port device team_slave_0 added [ 71.981545][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.030785][ T5829] team0: Port device team_slave_1 added [ 72.051534][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.073942][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.095672][ T5833] Bluetooth: hci0: command tx timeout [ 72.122102][ T5828] hsr_slave_0: entered promiscuous mode [ 72.128539][ T5828] hsr_slave_1: entered promiscuous mode [ 72.137260][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.161228][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.168468][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.194719][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.206474][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.213430][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.239561][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.255438][ T5848] Bluetooth: hci1: command tx timeout [ 72.255444][ T5846] Bluetooth: hci4: command tx timeout [ 72.255641][ T5846] Bluetooth: hci2: command tx timeout [ 72.261094][ T5833] Bluetooth: hci3: command tx timeout [ 72.282346][ T5836] team0: Port device team_slave_0 added [ 72.301064][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.308164][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.334355][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.346434][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.353382][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.379564][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.404751][ T5836] team0: Port device team_slave_1 added [ 72.411894][ T5835] team0: Port device team_slave_0 added [ 72.450688][ T5835] team0: Port device team_slave_1 added [ 72.482771][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.490243][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.516647][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.578843][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.585989][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.612226][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.629333][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.636366][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.662459][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.688612][ T5843] hsr_slave_0: entered promiscuous mode [ 72.695023][ T5843] hsr_slave_1: entered promiscuous mode [ 72.701122][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 72.707120][ T5843] Cannot create hsr debugfs directory [ 72.732819][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.740173][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.766429][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.795539][ T5829] hsr_slave_0: entered promiscuous mode [ 72.801987][ T5829] hsr_slave_1: entered promiscuous mode [ 72.808284][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 72.814007][ T5829] Cannot create hsr debugfs directory [ 72.918078][ T5835] hsr_slave_0: entered promiscuous mode [ 72.924691][ T5835] hsr_slave_1: entered promiscuous mode [ 72.931125][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 72.936950][ T5835] Cannot create hsr debugfs directory [ 73.027402][ T5836] hsr_slave_0: entered promiscuous mode [ 73.034308][ T5836] hsr_slave_1: entered promiscuous mode [ 73.040753][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 73.046542][ T5836] Cannot create hsr debugfs directory [ 73.430799][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.443078][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.466293][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.478306][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.548931][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.560255][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.584039][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.594609][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.673086][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.690220][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.702818][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.718509][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.800542][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.820533][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.831305][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.865893][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.882064][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.968881][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.982884][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.994579][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.006841][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.019003][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.056710][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.063853][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.073756][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.080879][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.161077][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.185227][ T5833] Bluetooth: hci0: command tx timeout [ 74.206836][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.242982][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.275576][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.308398][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.315605][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.330735][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.337492][ T5833] Bluetooth: hci2: command tx timeout [ 74.346790][ T5833] Bluetooth: hci3: command tx timeout [ 74.347185][ T5846] Bluetooth: hci1: command tx timeout [ 74.352204][ T5833] Bluetooth: hci4: command tx timeout [ 74.383264][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.407226][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.414405][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.459030][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.466206][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.477668][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.484812][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.501311][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.508499][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.541089][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.548208][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.624132][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.671855][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.744693][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.779559][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.805959][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.813122][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.869093][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.876289][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.989970][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.157168][ T5843] veth0_vlan: entered promiscuous mode [ 75.191675][ T5843] veth1_vlan: entered promiscuous mode [ 75.283327][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.321892][ T5843] veth0_macvtap: entered promiscuous mode [ 75.353291][ T5843] veth1_macvtap: entered promiscuous mode [ 75.405948][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.418579][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.449109][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.468269][ T5828] veth0_vlan: entered promiscuous mode [ 75.499633][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.509725][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.533098][ T5828] veth1_vlan: entered promiscuous mode [ 75.539901][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.550306][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.638223][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.665675][ T5835] veth0_vlan: entered promiscuous mode [ 75.684012][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.688608][ T5829] veth0_vlan: entered promiscuous mode [ 75.695783][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.713750][ T5835] veth1_vlan: entered promiscuous mode [ 75.758959][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.760867][ T5829] veth1_vlan: entered promiscuous mode [ 75.774218][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.783779][ T5828] veth0_macvtap: entered promiscuous mode [ 75.823403][ T5828] veth1_macvtap: entered promiscuous mode [ 75.890061][ T5836] veth0_vlan: entered promiscuous mode [ 75.903891][ T5829] veth0_macvtap: entered promiscuous mode [ 75.907858][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.932791][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.943094][ T5835] veth0_macvtap: entered promiscuous mode [ 75.970457][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.982192][ T5829] veth1_macvtap: entered promiscuous mode [ 76.013332][ T5836] veth1_vlan: entered promiscuous mode [ 76.035935][ T1163] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.056553][ T5835] veth1_macvtap: entered promiscuous mode [ 76.068575][ T1163] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.089121][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.103373][ T1163] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.119618][ T1163] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.142008][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.160297][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.181185][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.229223][ T1113] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.256048][ T5833] Bluetooth: hci0: command tx timeout [ 76.265052][ T1113] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.275513][ T1113] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.301988][ T5836] veth0_macvtap: entered promiscuous mode [ 76.318878][ T1113] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.341844][ T1113] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.373729][ T5836] veth1_macvtap: entered promiscuous mode [ 76.382454][ T1113] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.391831][ T1113] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.415355][ T5839] Bluetooth: hci2: command tx timeout [ 76.415372][ T5846] Bluetooth: hci1: command tx timeout [ 76.415403][ T5846] Bluetooth: hci3: command tx timeout [ 76.420906][ T5833] Bluetooth: hci4: command tx timeout [ 76.456419][ T1113] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.511125][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.522158][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.548263][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.584827][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.614356][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.624606][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.632364][ T44] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.669270][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.677635][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.678891][ T44] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.694245][ T1113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.726462][ T1113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.748872][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.773379][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.805986][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.814376][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.905867][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.918495][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.043388][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.062148][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.188309][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.216398][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.559908][ T5981] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14'. [ 77.587119][ T5981] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14'. [ 77.618589][ T5983] warning: `syz.3.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.787786][ T5987] ieee802154 phy0 wpan0: encryption failed: -90 [ 78.061624][ T5995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16'. [ 78.193496][ T6004] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 78.229366][ T6001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19'. [ 78.342866][ T5833] Bluetooth: hci0: command tx timeout [ 78.373815][ T6001] netlink: 'syz.4.19': attribute type 4 has an invalid length. [ 78.433376][ T6010] netlink: 'syz.4.19': attribute type 4 has an invalid length. [ 78.497178][ T5833] Bluetooth: hci3: command tx timeout [ 78.497197][ T5846] Bluetooth: hci4: command tx timeout [ 78.503010][ T5848] Bluetooth: hci2: command tx timeout [ 78.508172][ T5846] Bluetooth: hci1: command tx timeout [ 78.643509][ T6023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.25'. [ 78.653778][ T6023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.25'. [ 78.894536][ T6021] xt_CT: No such helper "snmp" [ 78.912846][ T6032] netlink: 260 bytes leftover after parsing attributes in process `syz.3.28'. [ 79.022703][ T6032] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.299855][ T6046] netlink: 'syz.2.32': attribute type 1 has an invalid length. [ 79.362113][ T6047] netlink: 'syz.2.32': attribute type 1 has an invalid length. [ 79.403167][ T6049] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 79.603487][ T6063] netlink: 40 bytes leftover after parsing attributes in process `syz.3.37'. [ 79.642155][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.36'. [ 79.716720][ T6066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.39'. [ 79.924493][ T6077] syz.3.40 uses obsolete (PF_INET,SOCK_PACKET) [ 80.396365][ T6087] Zero length message leads to an empty skb [ 81.568127][ T6111] netlink: 'syz.3.53': attribute type 5 has an invalid length. [ 81.737830][ T6109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.829417][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.035709][ T6164] netlink: 'syz.2.69': attribute type 1 has an invalid length. [ 83.686223][ T6165] team_slave_0: Device is already in use. [ 84.451189][ T6199] __nla_validate_parse: 7 callbacks suppressed [ 84.451207][ T6199] netlink: 16 bytes leftover after parsing attributes in process `syz.3.75'. [ 84.481410][ T6201] netlink: 68 bytes leftover after parsing attributes in process `syz.4.76'. [ 84.482182][ T6199] netlink: 16 bytes leftover after parsing attributes in process `syz.3.75'. [ 84.645596][ T6207] netlink: 'syz.4.78': attribute type 2 has an invalid length. [ 85.170231][ T6227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.946691][ T6245] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 86.070794][ T6253] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.217621][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.90'. [ 86.245513][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'. [ 86.254270][ T6260] netlink: 'syz.0.90': attribute type 12 has an invalid length. [ 86.626064][ T6274] x_tables: unsorted entry at hook 1 [ 86.633311][ T6274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.764518][ T10] cfg80211: failed to load regulatory.db [ 87.118985][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.99'. [ 87.143709][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'. [ 87.178550][ T6291] netlink: 'syz.4.99': attribute type 6 has an invalid length. [ 87.250993][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.307228][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.390140][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 87.404605][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.423882][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.219498][ T6342] syz.2.106 (6342) used greatest stack depth: 17832 bytes left [ 89.443800][ T6376] netlink: 'syz.1.117': attribute type 2 has an invalid length. [ 89.473646][ T6379] Cannot find set identified by id 0 to match [ 89.707367][ T6391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.123'. [ 89.753784][ T6391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.123'. [ 89.798507][ T6393] netlink: 92 bytes leftover after parsing attributes in process `syz.1.124'. [ 90.097293][ T6409] netlink: 44 bytes leftover after parsing attributes in process `syz.1.129'. [ 90.155296][ T6409] netlink: 20 bytes leftover after parsing attributes in process `syz.1.129'. [ 90.232356][ T6416] tipc: Enabling of bearer rejected, failed to enable media [ 90.236021][ T6419] netlink: 'syz.2.132': attribute type 7 has an invalid length. [ 90.259285][ T6419] netlink: 'syz.2.132': attribute type 8 has an invalid length. [ 90.279744][ T6419] netlink: 36 bytes leftover after parsing attributes in process `syz.2.132'. [ 90.838874][ T6442] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.885616][ T6446] dvmrp12: entered allmulticast mode [ 91.058422][ T6442] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.200924][ T6442] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.323531][ T6442] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.356664][ T6462] netlink: 'syz.2.144': attribute type 5 has an invalid length. [ 91.529587][ T44] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.565415][ T44] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.655620][ T6446] dvmrp12: left allmulticast mode [ 91.740880][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.789824][ T1095] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.035212][ T6469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 92.056605][ T6469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.147'. [ 92.225376][ T6472] netlink: 156 bytes leftover after parsing attributes in process `syz.4.147'. [ 92.676648][ T6476] tipc: Started in network mode [ 92.681588][ T6476] tipc: Node identity 92624ea1cfdc, cluster identity 4711 [ 92.691195][ T6476] tipc: Enabled bearer , priority 0 [ 92.699069][ T6476] syzkaller0: entered promiscuous mode [ 92.704646][ T6476] syzkaller0: entered allmulticast mode [ 92.743090][ T6476] pim6reg: entered allmulticast mode [ 92.777320][ T6476] tipc: Resetting bearer [ 92.786715][ T6475] tipc: Resetting bearer [ 92.832561][ T6475] tipc: Disabling bearer [ 92.892202][ T6482] syzkaller1: entered promiscuous mode [ 92.919700][ T6482] syzkaller1: entered allmulticast mode [ 92.968564][ T6493] netlink: 52 bytes leftover after parsing attributes in process `syz.1.155'. [ 93.573770][ T6516] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 95.463607][ T6612] __nla_validate_parse: 5 callbacks suppressed [ 95.463626][ T6612] netlink: 16 bytes leftover after parsing attributes in process `syz.4.201'. [ 95.515759][ T6612] netlink: 16 bytes leftover after parsing attributes in process `syz.4.201'. [ 96.226909][ T6638] netlink: 20 bytes leftover after parsing attributes in process `syz.2.212'. [ 96.324017][ T6647] netlink: 16 bytes leftover after parsing attributes in process `syz.0.216'. [ 96.385495][ T6647] netlink: 16 bytes leftover after parsing attributes in process `syz.0.216'. [ 96.612501][ T6630] syzkaller0: entered promiscuous mode [ 96.620494][ T6630] syzkaller0: entered allmulticast mode [ 96.645987][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.208'. [ 97.743098][ T6660] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 97.752289][ T6660] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 97.760850][ T6660] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 97.937075][ T6665] gretap0: entered promiscuous mode [ 97.948708][ T6666] vlan0: entered promiscuous mode [ 98.001041][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'. [ 98.301411][ T6683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.227'. [ 99.580815][ T6730] syzkaller0: entered promiscuous mode [ 99.597789][ T6730] syzkaller0: entered allmulticast mode [ 99.610917][ T6730] TC_ACT_REPEAT abuse ? [ 100.738654][ T6784] netlink: 40 bytes leftover after parsing attributes in process `syz.1.257'. [ 101.123943][ T6798] gretap0: entered promiscuous mode [ 101.425953][ T6808] netlink: 'syz.0.266': attribute type 1 has an invalid length. [ 101.540134][ T6808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.652616][ T6819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.271'. [ 101.845687][ T6830] : renamed from veth0_to_bond (while UP) [ 101.921309][ T6830] netlink: 16 bytes leftover after parsing attributes in process `syz.3.274'. [ 102.398941][ T6853] syz.3.280 (6853) used obsolete PPPIOCDETACH ioctl [ 102.809036][ T6869] netlink: 28 bytes leftover after parsing attributes in process `syz.1.287'. [ 102.819655][ T6869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.287'. [ 102.854107][ T6869] Bluetooth: MGMT ver 1.23 [ 102.863146][ T6875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.287'. [ 102.866687][ T6876] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 102.873174][ T6875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.287'. [ 102.941803][ T1095] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 102.954049][ T6881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.289'. [ 103.046660][ T6887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.119441][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 103.621901][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.302'. [ 103.631003][ T6920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.638613][ T6920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.651870][ T6920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.665028][ T6920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.114384][ T6938] tipc: Failed to remove unknown binding: 66,1,1/0:3370809576/3370809578 [ 104.141952][ T6938] tipc: Failed to remove unknown binding: 66,1,1/0:3370809576/3370809578 [ 104.175216][ T6938] tipc: Failed to remove unknown binding: 66,1,1/0:3370809576/3370809578 [ 104.573938][ T6969] netlink: 'syz.1.318': attribute type 3 has an invalid length. [ 104.880706][ T6986] netlink: 'syz.4.325': attribute type 2 has an invalid length. [ 105.206521][ T7000] netlink: 'syz.1.329': attribute type 1 has an invalid length. [ 105.760355][ T7036] netlink: 'syz.3.342': attribute type 5 has an invalid length. [ 105.820183][ T7039] macvlan4: entered allmulticast mode [ 106.269444][ T7049] syzkaller0: create flow: hash 3140271875 index 2 [ 106.428266][ T7048] syzkaller0: delete flow: hash 3140271875 index 2 [ 107.196921][ T7081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.242605][ T7100] netlink: 'syz.3.361': attribute type 5 has an invalid length. [ 108.280446][ T7064] __nla_validate_parse: 9 callbacks suppressed [ 108.280464][ T7064] netlink: 76 bytes leftover after parsing attributes in process `syz.0.349'. [ 108.463196][ T7102] netlink: 7056 bytes leftover after parsing attributes in process `syz.1.362'. [ 108.497479][ T7102] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 108.521605][ T7102] netlink: 16 bytes leftover after parsing attributes in process `syz.1.362'. [ 109.019029][ T7119] macvlan3: entered allmulticast mode [ 109.585720][ T7129] netlink: 52 bytes leftover after parsing attributes in process `syz.1.371'. [ 109.705335][ T7129] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.713691][ T7129] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.291818][ T7154] macvlan4: entered promiscuous mode [ 110.297434][ T7154] macvlan4: entered allmulticast mode [ 110.710358][ T7161] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 110.740873][ T7161] bond2 (unregistering): Released all slaves [ 110.761710][ T7177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.386'. [ 110.786586][ T7178] netlink: 'syz.3.387': attribute type 5 has an invalid length. [ 111.431661][ T7200] macvlan3: entered allmulticast mode [ 111.516037][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'. [ 111.539606][ T7204] netlink: 'syz.1.397': attribute type 30 has an invalid length. [ 111.560082][ T7208] netlink: 'syz.0.398': attribute type 27 has an invalid length. [ 111.569158][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'. [ 111.590327][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'. [ 111.637607][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'. [ 111.648488][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.394'. [ 111.666309][ T7205] netlink: 'syz.1.397': attribute type 30 has an invalid length. [ 111.682544][ T7204] netlink: 'syz.1.397': attribute type 30 has an invalid length. [ 112.051699][ T7208] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.060143][ T7208] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.557718][ T7208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.615789][ T7208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.051226][ T7208] macvlan4: left allmulticast mode [ 113.077921][ T7210] gretap0: left promiscuous mode [ 113.103910][ T7210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.111645][ T7210] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.120904][ T7210] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.137245][ T60] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.146054][ T60] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.154771][ T60] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.175022][ T7205] netlink: 'syz.1.397': attribute type 30 has an invalid length. [ 113.265806][ T60] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.293724][ T60] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.351509][ T7243] netlink: 'syz.3.410': attribute type 21 has an invalid length. [ 113.361050][ T7243] __nla_validate_parse: 2 callbacks suppressed [ 113.361065][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.410'. [ 113.402078][ T60] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.416558][ T60] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.446867][ T7243] netlink: 'syz.3.410': attribute type 21 has an invalid length. [ 113.472008][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.410'. [ 113.488828][ T60] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.536148][ T60] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.791912][ T60] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.814481][ T60] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.823990][ T60] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.473010][ T7295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.425'. [ 114.851011][ T7311] ªªªªªª: renamed from wg2 (while UP) [ 114.918548][ T7311] netlink: 20 bytes leftover after parsing attributes in process `syz.1.433'. [ 114.919661][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.434'. [ 114.950135][ T7313] netlink: 48 bytes leftover after parsing attributes in process `syz.3.434'. [ 114.961163][ T7315] netlink: 224 bytes leftover after parsing attributes in process `syz.2.435'. [ 115.436767][ T7340] IPv6: Can't replace route, no match found [ 115.449906][ T7328] syzkaller1: entered promiscuous mode [ 115.466461][ T7328] syzkaller1: entered allmulticast mode [ 115.484089][ T7325] vlan2: entered promiscuous mode [ 115.500604][ T7325] bond0: entered promiscuous mode [ 115.509802][ T7325] bond_slave_0: entered promiscuous mode [ 115.516119][ T7325] bond_slave_1: entered promiscuous mode [ 115.831770][ T7359] netlink: 20 bytes leftover after parsing attributes in process `syz.3.446'. [ 116.127999][ T7365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.447'. [ 116.141727][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.447'. [ 116.732345][ T7400] Driver unsupported XDP return value 0 on prog (id 214) dev N/A, expect packet loss! [ 116.792620][ T7401] macvlan4: entered allmulticast mode [ 116.944496][ T7413] xt_hashlimit: size too large, truncated to 1048576 [ 118.345275][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 118.370949][ T7481] __nla_validate_parse: 3 callbacks suppressed [ 118.370967][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.481'. [ 118.872591][ T7493] syzkaller0: entered promiscuous mode [ 118.902707][ T7493] syzkaller0: entered allmulticast mode [ 119.057711][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'. [ 119.067114][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'. [ 119.495458][ T7522] nbd0: detected capacity change from 0 to 127 [ 119.575948][ T7521] nbd1: detected capacity change from 0 to 127 [ 119.599319][ T5846] block nbd0: Receive control failed (result -104) [ 119.606073][ T5848] block nbd1: Receive control failed (result -32) [ 119.628656][ T7116] block nbd1: Dead connection, failed to find a fallback [ 119.697501][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.496'. [ 119.867156][ T7546] netlink: 'syz.3.498': attribute type 5 has an invalid length. [ 119.973095][ T7539] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 120.016281][ T7539] bond1 (unregistering): Released all slaves [ 120.097997][ T7549] netlink: 'syz.0.500': attribute type 12 has an invalid length. [ 120.124263][ T7549] netlink: 'syz.0.500': attribute type 29 has an invalid length. [ 120.145965][ T7549] netlink: 148 bytes leftover after parsing attributes in process `syz.0.500'. [ 120.216263][ T7549] netlink: 59 bytes leftover after parsing attributes in process `syz.0.500'. [ 120.343258][ T7558] netlink: 40 bytes leftover after parsing attributes in process `syz.2.502'. [ 120.566673][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.504'. [ 121.016667][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 121.058959][ T7578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.509'. [ 121.791997][ T7596] vlan0: entered promiscuous mode [ 123.014967][ T5846] Bluetooth: hci4: link tx timeout [ 123.020429][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.582226][ T7661] __nla_validate_parse: 7 callbacks suppressed [ 123.582243][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.532'. [ 123.768854][ T7672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.533'. [ 124.193847][ T7683] gretap0: entered promiscuous mode [ 125.052930][ T7715] wlan1 speed is unknown, defaulting to 1000 [ 125.065637][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 125.227069][ T7715] wlan1 speed is unknown, defaulting to 1000 [ 125.237108][ T7715] wlan1 speed is unknown, defaulting to 1000 [ 125.407247][ T7733] bond1: option arp_all_targets: invalid value (3) [ 125.430915][ T7733] bond1 (unregistering): Released all slaves [ 125.540066][ T7735] netlink: 228 bytes leftover after parsing attributes in process `syz.1.552'. [ 125.659199][ T7740] netlink: 220 bytes leftover after parsing attributes in process `syz.4.556'. [ 125.688027][ T7740] netlink: 220 bytes leftover after parsing attributes in process `syz.4.556'. [ 125.707278][ T7740] netlink: 32 bytes leftover after parsing attributes in process `syz.4.556'. [ 125.971512][ T7715] infiniband syz2: set down [ 125.977756][ T43] wlan1 speed is unknown, defaulting to 1000 [ 125.998607][ T7715] infiniband syz2: added wlan1 [ 126.006097][ T7749] netlink: 'syz.1.561': attribute type 15 has an invalid length. [ 126.025285][ T7715] syz2: rxe_create_cq: returned err = -12 [ 126.032545][ T7715] infiniband syz2: Couldn't create ib_mad CQ [ 126.039775][ T7715] infiniband syz2: Couldn't open port 1 [ 126.105226][ T7751] wlan1 speed is unknown, defaulting to 1000 [ 126.150538][ T7715] RDS/IB: syz2: added [ 126.158873][ T7715] smc: adding ib device syz2 with port count 1 [ 126.169223][ T7715] smc: ib device syz2 port 1 has no pnetid [ 126.178601][ T43] wlan1 speed is unknown, defaulting to 1000 [ 126.297483][ T7762] netlink: 'syz.3.565': attribute type 5 has an invalid length. [ 126.500783][ T7715] wlan1 speed is unknown, defaulting to 1000 [ 127.048973][ T7787] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 127.152599][ T7792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.573'. [ 127.267499][ T7795] netlink: 'syz.3.573': attribute type 10 has an invalid length. [ 127.458700][ T7715] wlan1 speed is unknown, defaulting to 1000 [ 127.497149][ T7795] team0: Port device netdevsim0 added [ 127.707439][ T7813] netlink: 36 bytes leftover after parsing attributes in process `syz.1.580'. [ 127.786702][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.581'. [ 127.812325][ T7816] bridge_slave_0: left allmulticast mode [ 127.837218][ T7816] bridge_slave_0: left promiscuous mode [ 127.880074][ T7816] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.938311][ T7816] bridge_slave_1: left allmulticast mode [ 127.960325][ T7816] bridge_slave_1: left promiscuous mode [ 127.973624][ T7816] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.998417][ T7816] bond0: (slave bond_slave_0): Releasing backup interface [ 128.032205][ T7816] bond0: (slave bond_slave_1): Releasing backup interface [ 128.056771][ T7816] team0: Port device team_slave_0 removed [ 128.069846][ T7816] team0: Port device team_slave_1 removed [ 128.076809][ T7816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.086385][ T7816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.096088][ T7816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.103634][ T7816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.117101][ T7816] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 128.140667][ T7817] batadv_slave_0: entered promiscuous mode [ 128.380208][ T7715] wlan1 speed is unknown, defaulting to 1000 [ 128.538150][ T7829] netlink: 'syz.1.585': attribute type 39 has an invalid length. [ 128.753331][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.589'. [ 128.811322][ T7842] netlink: 'syz.4.589': attribute type 1 has an invalid length. [ 128.825416][ T7841] : entered promiscuous mode [ 128.887504][ T7842] bond1: entered promiscuous mode [ 128.893018][ T7842] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.921002][ T7841] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.932127][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.589'. [ 128.943136][ T7841] bond1: (slave gre2): The slave device specified does not support setting the MAC address [ 128.954172][ T7841] bond1: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 128.964509][ T7841] bond1: (slave gre2): Opening slave failed [ 128.980735][ T7715] wlan1 speed is unknown, defaulting to 1000 [ 128.993539][ T7842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.589'. [ 129.075486][ T7849] xt_l2tp: missing protocol rule (udp|l2tpip) [ 129.507946][ T7715] wlan1 speed is unknown, defaulting to 1000 [ 129.567792][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.597'. [ 129.786687][ T7879] raw_sendmsg: syz.1.599 forgot to set AF_INET. Fix it! [ 129.971539][ T7715] wlan1 speed is unknown, defaulting to 1000 [ 130.201638][ T7891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.603'. [ 130.341665][ T7715] wlan1 speed is unknown, defaulting to 1000 [ 130.535062][ T7715] wlan1 speed is unknown, defaulting to 1000 [ 130.687086][ T7715] wlan1 speed is unknown, defaulting to 1000 [ 131.507171][ T7910] netlink: 16 bytes leftover after parsing attributes in process `syz.0.609'. [ 131.523106][ T7910] netlink: 16 bytes leftover after parsing attributes in process `syz.0.609'. [ 131.912962][ T7918] netlink: 28 bytes leftover after parsing attributes in process `syz.3.613'. [ 132.088750][ T7921] wlan1 speed is unknown, defaulting to 1000 [ 132.502775][ T7932] netlink: 52 bytes leftover after parsing attributes in process `syz.4.617'. [ 132.516981][ T7931] bridge0: port 3(batadv1) entered blocking state [ 132.526029][ T7931] bridge0: port 3(batadv1) entered disabled state [ 132.534687][ T7931] batadv1: entered allmulticast mode [ 132.563560][ T7931] batadv1: entered promiscuous mode [ 132.819608][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.826017][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.015732][ T1163] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 133.026636][ T1163] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 133.131922][ T7959] IPVS: persistence engine module ip_vs_pe_ not found [ 133.395133][ T7967] netlink: 'syz.0.630': attribute type 11 has an invalid length. [ 133.687170][ T7991] netlink: 'syz.0.636': attribute type 2 has an invalid length. [ 133.714520][ T7991] netlink: 'syz.0.636': attribute type 1 has an invalid length. [ 134.055971][ T8001] syzkaller0: entered promiscuous mode [ 134.061931][ T8001] syzkaller0: entered allmulticast mode [ 134.212144][ T8007] macvlan6: entered promiscuous mode [ 134.217878][ T8007] macvlan6: entered allmulticast mode [ 134.223350][ T8007] gretap0: entered allmulticast mode [ 134.309581][ T8009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.642'. [ 134.319181][ T8009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.642'. [ 134.647921][ T8015] wlan1 speed is unknown, defaulting to 1000 [ 134.747511][ T8025] netlink: 16 bytes leftover after parsing attributes in process `syz.4.647'. [ 134.998040][ T8034] netlink: 'syz.2.651': attribute type 4 has an invalid length. [ 135.033640][ T8034] netlink: 32 bytes leftover after parsing attributes in process `syz.2.651'. [ 135.756316][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.784669][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.158854][ T8048] netlink: 16 bytes leftover after parsing attributes in process `syz.0.656'. [ 136.186608][ T8048] netlink: 16 bytes leftover after parsing attributes in process `syz.0.656'. [ 136.578122][ T8054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.659'. [ 136.660279][ T8054] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.449333][ T8072] gretap0: left allmulticast mode [ 137.459802][ T1163] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.477192][ T1163] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.496514][ T1163] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.522975][ T1163] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.558521][ T1163] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.584817][ T1163] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.605100][ T1163] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.647018][ T1163] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.963274][ T8093] wlan1 speed is unknown, defaulting to 1000 [ 138.883958][ T8098] wlan1 speed is unknown, defaulting to 1000 [ 139.986528][ T5948] wlan1 speed is unknown, defaulting to 1000 [ 139.993458][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.034942][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.085809][ T43] wlan1 speed is unknown, defaulting to 1000 [ 140.112565][ T43] syz2: Port: 1 Link ACTIVE [ 140.122440][ T5885] wlan1 speed is unknown, defaulting to 1000 [ 140.193675][ T8114] wlan1 speed is unknown, defaulting to 1000 [ 140.490156][ T8158] netlink: 200 bytes leftover after parsing attributes in process `syz.0.693'. [ 140.527682][ T8158] nbd: must specify at least one socket [ 140.554688][ T8120] wlan1 speed is unknown, defaulting to 1000 [ 141.035522][ T8151] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 141.081464][ T8163] wlan1 speed is unknown, defaulting to 1000 [ 141.626804][ T8173] netlink: 60 bytes leftover after parsing attributes in process `syz.3.696'. [ 141.636529][ T8173] netlink: 24 bytes leftover after parsing attributes in process `syz.3.696'. [ 141.710726][ T8173] ieee802154 phy0 wpan0: encryption failed: -90 [ 142.802433][ T8185] netlink: 'syz.3.701': attribute type 1 has an invalid length. [ 142.990741][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 143.291606][ T8191] wlan1 speed is unknown, defaulting to 1000 [ 144.684919][ T8252] tc_dump_action: action bad kind [ 145.216886][ T8274] netlink: 'syz.4.731': attribute type 1 has an invalid length. [ 145.283720][ T8274] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.328696][ T8282] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.340591][ T8282] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 145.371279][ T8282] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 145.443669][ T8274] veth3: entered promiscuous mode [ 145.455174][ T8274] bond2: (slave veth3): Enslaving as an active interface with a down link [ 145.508458][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.536363][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.563686][ T8331] wlan1 speed is unknown, defaulting to 1000 [ 147.386709][ T8362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.399310][ T8349] wlan1 speed is unknown, defaulting to 1000 [ 147.415230][ T8349] syz2: Port: 1 Link DOWN [ 147.472883][ T8349] wlan1 speed is unknown, defaulting to 1000 [ 147.506548][ T8354] wlan1 speed is unknown, defaulting to 1000 [ 147.983643][ T1737] IPVS: starting estimator thread 0... [ 148.025534][ T8390] syzkaller1: entered promiscuous mode [ 148.031135][ T8390] syzkaller1: entered allmulticast mode [ 148.091284][ T8389] IPVS: using max 29 ests per chain, 69600 per kthread [ 148.174252][ T8357] wlan1 speed is unknown, defaulting to 1000 [ 149.733112][ T8424] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 149.744738][ T8424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.759686][ T8424] netlink: 'syz.3.780': attribute type 29 has an invalid length. [ 150.043493][ T8437] pim6reg1: entered promiscuous mode [ 150.055008][ T8437] pim6reg1: entered allmulticast mode [ 150.109105][ T8443] netlink: 72 bytes leftover after parsing attributes in process `syz.2.785'. [ 150.109416][ T122] block nbd0: Possible stuck request ffff888024e0e000: control (read@0,1024B). Runtime 30 seconds [ 150.120737][ T8443] ieee802154 phy0 wpan0: encryption failed: -22 [ 150.134640][ T122] block nbd0: Possible stuck request ffff888024e0e1c0: control (read@1024,1024B). Runtime 30 seconds [ 150.146923][ T122] block nbd0: Possible stuck request ffff888024e0e380: control (read@2048,1024B). Runtime 30 seconds [ 150.158074][ T122] block nbd0: Possible stuck request ffff888024e0e540: control (read@3072,1024B). Runtime 30 seconds [ 150.839962][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 151.054238][ T8481] kthread_run failed with err -4 [ 151.072196][ T8481] netlink: 28 bytes leftover after parsing attributes in process `syz.4.796'. [ 151.494063][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.804'. [ 151.716106][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805a865000: rx timeout, send abort [ 151.809879][ T8524] netlink: 'syz.1.807': attribute type 13 has an invalid length. [ 151.818263][ T8524] netlink: 'syz.1.807': attribute type 17 has an invalid length. [ 151.979324][ T8531] netlink: 132 bytes leftover after parsing attributes in process `syz.0.810'. [ 152.021470][ T8524] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.028764][ T8524] bridge0: port 2(bridge_slave_1) entered listening state [ 152.036324][ T8524] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.043510][ T8524] bridge0: port 1(bridge_slave_0) entered listening state [ 152.119897][ T8538] netlink: 20 bytes leftover after parsing attributes in process `syz.4.811'. [ 152.133788][ T8540] netlink: 'syz.0.810': attribute type 1 has an invalid length. [ 152.143254][ T8524] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.216999][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805a865c00: rx timeout, send abort [ 152.226458][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805a865000: abort rx timeout. Force session deactivation [ 152.266566][ T8540] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.391007][ T8531] veth3: entered promiscuous mode [ 152.415271][ T8521] wlan1 speed is unknown, defaulting to 1000 [ 152.725522][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805a865c00: abort rx timeout. Force session deactivation [ 152.751651][ T8568] delete_channel: no stack [ 153.046007][ T8584] netlink: 16 bytes leftover after parsing attributes in process `syz.3.826'. [ 153.064396][ T8584] netlink: 16 bytes leftover after parsing attributes in process `syz.3.826'. [ 153.326044][ T8597] netlink: 'syz.0.829': attribute type 11 has an invalid length. [ 153.333813][ T8597] netlink: 224 bytes leftover after parsing attributes in process `syz.0.829'. [ 153.348360][ T8593] wlan1 speed is unknown, defaulting to 1000 [ 153.722861][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.833'. [ 154.299227][ T8624] wlan1 speed is unknown, defaulting to 1000 [ 154.739210][ T8629] wlan1 speed is unknown, defaulting to 1000 [ 155.512559][ T8643] __nla_validate_parse: 4 callbacks suppressed [ 155.512575][ T8643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.842'. [ 155.534441][ T8650] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 155.593365][ T8649] tipc: Enabled bearer , priority 0 [ 155.706090][ T8645] tipc: Disabling bearer [ 155.724328][ T8656] netlink: 16 bytes leftover after parsing attributes in process `syz.3.848'. [ 155.744755][ T8656] netlink: 16 bytes leftover after parsing attributes in process `syz.3.848'. [ 156.047955][ T8669] netlink: 28 bytes leftover after parsing attributes in process `syz.4.851'. [ 156.162630][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.852'. [ 156.216635][ T8671] 8021q: adding VLAN 0 to HW filter on device bond3 [ 156.274629][ T8671] Unsupported ieee802154 address type: 0 [ 156.283613][ T8675] netlink: 'syz.4.853': attribute type 1 has an invalid length. [ 156.341395][ T8675] netlink: 224 bytes leftover after parsing attributes in process `syz.4.853'. [ 156.796410][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.858'. [ 156.902657][ T8691] ipvlan0: entered promiscuous mode [ 156.959142][ T8691] ipvlan0: left promiscuous mode [ 157.175241][ T8704] netlink: 16 bytes leftover after parsing attributes in process `syz.0.861'. [ 157.205259][ T8704] netlink: 16 bytes leftover after parsing attributes in process `syz.0.861'. [ 157.284504][ T8710] xt_hashlimit: max too large, truncated to 1048576 [ 157.446713][ T8719] trusted_key: syz.4.867 sent an empty control message without MSG_MORE. [ 157.610364][ T8723] : renamed from bond_slave_0 (while UP) [ 158.215723][ T8740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.875'. [ 158.611322][ T8753] wlan1 speed is unknown, defaulting to 1000 [ 159.099889][ T8768] wlan1 speed is unknown, defaulting to 1000 [ 160.124425][ T8788] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 160.148493][ T8788] bond4 (unregistering): Released all slaves [ 160.505450][ T8799] wlan1 speed is unknown, defaulting to 1000 [ 160.594716][ T8809] __nla_validate_parse: 4 callbacks suppressed [ 160.594732][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.894'. [ 161.236654][ T8819] netdevsim netdevsim2: Direct firmware load for þ failed with error -2 [ 161.245396][ T8819] netdevsim netdevsim2: Falling back to sysfs fallback for: þ [ 161.266933][ T8810] wlan1 speed is unknown, defaulting to 1000 [ 161.333984][ T8821] netlink: 16 bytes leftover after parsing attributes in process `syz.4.898'. [ 161.351275][ T8821] netlink: 16 bytes leftover after parsing attributes in process `syz.4.898'. [ 161.664684][ T8807] wlan1 speed is unknown, defaulting to 1000 [ 162.236284][ T8839] sctp: [Deprecated]: syz.2.906 (pid 8839) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.236284][ T8839] Use struct sctp_sack_info instead [ 162.269647][ T8840] sctp: [Deprecated]: syz.2.906 (pid 8840) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.269647][ T8840] Use struct sctp_sack_info instead [ 162.460738][ T8847] netlink: 16 bytes leftover after parsing attributes in process `syz.2.909'. [ 162.495299][ T8847] netlink: 16 bytes leftover after parsing attributes in process `syz.2.909'. [ 162.745123][ T8848] wlan1 speed is unknown, defaulting to 1000 [ 163.163841][ T8860] netlink: 76 bytes leftover after parsing attributes in process `syz.3.914'. [ 163.171306][ T8845] wlan1 speed is unknown, defaulting to 1000 [ 163.198587][ T8860] nbd: illegal input index 65508 [ 163.249937][ T8864] netlink: 76 bytes leftover after parsing attributes in process `syz.3.914'. [ 163.276984][ T8864] nbd: illegal input index 65508 [ 163.771308][ T8868] wlan1 speed is unknown, defaulting to 1000 [ 164.484912][ T8885] netlink: 'syz.0.920': attribute type 9 has an invalid length. [ 164.540250][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.920'. [ 164.614637][ T8887] netlink: 'syz.0.920': attribute type 1 has an invalid length. [ 164.853733][ T8869] wlan1 speed is unknown, defaulting to 1000 [ 165.251599][ T8893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.530021][ T8888] wlan1 speed is unknown, defaulting to 1000 [ 165.799291][ T8907] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 165.835253][ T8907] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 166.090041][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.930'. [ 166.969000][ T8924] netlink: 'syz.2.932': attribute type 5 has an invalid length. [ 167.093548][ T8924] ip6erspan0: entered promiscuous mode [ 167.375522][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 167.383572][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 167.478218][ T8928] netlink: 36 bytes leftover after parsing attributes in process `syz.3.934'. [ 167.517835][ T8928] netlink: 20 bytes leftover after parsing attributes in process `syz.3.934'. [ 167.558472][ T8928] netlink: 516 bytes leftover after parsing attributes in process `syz.3.934'. [ 168.411932][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.941'. [ 168.422026][ T8949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.940'. [ 168.450271][ T8954] dvmrp12: entered allmulticast mode [ 168.466690][ T8951] netlink: 20 bytes leftover after parsing attributes in process `syz.2.941'. [ 168.654004][ T8969] netlink: 'syz.3.946': attribute type 1 has an invalid length. [ 168.663071][ T8970] netlink: 'syz.3.946': attribute type 1 has an invalid length. [ 169.070743][ T8981] wlan1 speed is unknown, defaulting to 1000 [ 169.954463][ T9007] geneve2: entered promiscuous mode [ 170.313673][ T9033] netlink: 52 bytes leftover after parsing attributes in process `syz.2.964'. [ 170.412406][ T9033] netlink: 760 bytes leftover after parsing attributes in process `syz.2.964'. [ 170.559046][ T9039] netlink: 16 bytes leftover after parsing attributes in process `syz.3.966'. [ 170.733998][ T9049] wlan1 speed is unknown, defaulting to 1000 [ 170.741171][ T8954] dvmrp12: left allmulticast mode [ 170.766245][ T9050] FAULT_INJECTION: forcing a failure. [ 170.766245][ T9050] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 170.795888][ T9050] CPU: 1 UID: 0 PID: 9050 Comm: syz.3.971 Not tainted syzkaller #0 PREEMPT(full) [ 170.795913][ T9050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 170.795931][ T9050] Call Trace: [ 170.795938][ T9050] [ 170.795946][ T9050] dump_stack_lvl+0x189/0x250 [ 170.795975][ T9050] ? __pfx____ratelimit+0x10/0x10 [ 170.795996][ T9050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.796019][ T9050] ? __pfx__printk+0x10/0x10 [ 170.796039][ T9050] ? __might_fault+0xb0/0x130 [ 170.796074][ T9050] should_fail_ex+0x414/0x560 [ 170.796104][ T9050] _copy_from_user+0x2d/0xb0 [ 170.796127][ T9050] ___sys_sendmsg+0x158/0x2a0 [ 170.796149][ T9050] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.796205][ T9050] ? __fget_files+0x2a/0x420 [ 170.796221][ T9050] ? __fget_files+0x3a0/0x420 [ 170.796249][ T9050] __x64_sys_sendmsg+0x19b/0x260 [ 170.796270][ T9050] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 170.796299][ T9050] ? __pfx_ksys_write+0x10/0x10 [ 170.796326][ T9050] ? do_syscall_64+0xbe/0xfa0 [ 170.796351][ T9050] do_syscall_64+0xfa/0xfa0 [ 170.796371][ T9050] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.796401][ T9050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.796418][ T9050] ? clear_bhb_loop+0x60/0xb0 [ 170.796440][ T9050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.796458][ T9050] RIP: 0033:0x7fc27278efc9 [ 170.796474][ T9050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.796489][ T9050] RSP: 002b:00007fc273657038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.796509][ T9050] RAX: ffffffffffffffda RBX: 00007fc2729e6090 RCX: 00007fc27278efc9 [ 170.796523][ T9050] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 170.796534][ T9050] RBP: 00007fc273657090 R08: 0000000000000000 R09: 0000000000000000 [ 170.796546][ T9050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.796556][ T9050] R13: 00007fc2729e6128 R14: 00007fc2729e6090 R15: 00007fffc312b208 [ 170.796588][ T9050] [ 171.117457][ T9062] netlink: 'syz.1.974': attribute type 4 has an invalid length. [ 171.337606][ T9069] __nla_validate_parse: 1 callbacks suppressed [ 171.337622][ T9069] netlink: 28 bytes leftover after parsing attributes in process `syz.4.976'. [ 171.486163][ T9077] netlink: 44 bytes leftover after parsing attributes in process `syz.4.976'. [ 171.509957][ T9076] tipc: Started in network mode [ 171.534212][ T9077] netlink: 34 bytes leftover after parsing attributes in process `syz.4.976'. [ 171.545021][ T9076] tipc: Node identity 16e35a9fbea5, cluster identity 4711 [ 171.564987][ T9076] tipc: Enabled bearer , priority 0 [ 171.598172][ T9076] syzkaller0: entered promiscuous mode [ 171.620918][ T9076] syzkaller0: entered allmulticast mode [ 172.203396][ T9096] syz_tun: entered allmulticast mode [ 172.265201][ T9075] tipc: Resetting bearer [ 172.280726][ T9101] netlink: 'syz.2.981': attribute type 5 has an invalid length. [ 172.338213][ T9075] tipc: Disabling bearer [ 172.438071][ T9095] syz_tun: left allmulticast mode [ 172.546759][ T9108] netlink: 'syz.0.987': attribute type 21 has an invalid length. [ 172.554791][ T9108] netlink: 128 bytes leftover after parsing attributes in process `syz.0.987'. [ 172.583305][ T9108] netlink: 'syz.0.987': attribute type 4 has an invalid length. [ 172.597805][ T9108] netlink: 'syz.0.987': attribute type 5 has an invalid length. [ 172.615122][ T9108] netlink: 3 bytes leftover after parsing attributes in process `syz.0.987'. [ 173.084132][ T9120] wlan1 speed is unknown, defaulting to 1000 [ 173.114377][ T9121] FAULT_INJECTION: forcing a failure. [ 173.114377][ T9121] name failslab, interval 1, probability 0, space 0, times 1 [ 173.185244][ T9121] CPU: 1 UID: 0 PID: 9121 Comm: syz.3.990 Not tainted syzkaller #0 PREEMPT(full) [ 173.185268][ T9121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.185278][ T9121] Call Trace: [ 173.185286][ T9121] [ 173.185293][ T9121] dump_stack_lvl+0x189/0x250 [ 173.185321][ T9121] ? __pfx____ratelimit+0x10/0x10 [ 173.185341][ T9121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.185363][ T9121] ? __pfx__printk+0x10/0x10 [ 173.185387][ T9121] ? __pfx___might_resched+0x10/0x10 [ 173.185405][ T9121] ? fs_reclaim_acquire+0x7d/0x100 [ 173.185435][ T9121] should_fail_ex+0x414/0x560 [ 173.185465][ T9121] should_failslab+0xa8/0x100 [ 173.185485][ T9121] kmem_cache_alloc_node_noprof+0x77/0x710 [ 173.185508][ T9121] ? __alloc_skb+0x112/0x2d0 [ 173.185531][ T9121] ? netlink_autobind+0xdb/0x300 [ 173.185553][ T9121] __alloc_skb+0x112/0x2d0 [ 173.185580][ T9121] netlink_sendmsg+0x5c6/0xb30 [ 173.185607][ T9121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.185627][ T9121] ? aa_sock_msg_perm+0xf1/0x1d0 [ 173.185652][ T9121] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 173.185669][ T9121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.185687][ T9121] __sock_sendmsg+0x21c/0x270 [ 173.185715][ T9121] ____sys_sendmsg+0x505/0x830 [ 173.185739][ T9121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.185766][ T9121] ? import_iovec+0x74/0xa0 [ 173.185791][ T9121] ___sys_sendmsg+0x21f/0x2a0 [ 173.185811][ T9121] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.185866][ T9121] ? __fget_files+0x2a/0x420 [ 173.185882][ T9121] ? __fget_files+0x3a0/0x420 [ 173.185909][ T9121] __x64_sys_sendmsg+0x19b/0x260 [ 173.185930][ T9121] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 173.185958][ T9121] ? __pfx_ksys_write+0x10/0x10 [ 173.185985][ T9121] ? do_syscall_64+0xbe/0xfa0 [ 173.186010][ T9121] do_syscall_64+0xfa/0xfa0 [ 173.186028][ T9121] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.186048][ T9121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.186065][ T9121] ? clear_bhb_loop+0x60/0xb0 [ 173.186086][ T9121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.186103][ T9121] RIP: 0033:0x7fc27278efc9 [ 173.186118][ T9121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.186132][ T9121] RSP: 002b:00007fc273657038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.186151][ T9121] RAX: ffffffffffffffda RBX: 00007fc2729e6090 RCX: 00007fc27278efc9 [ 173.186163][ T9121] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 173.186181][ T9121] RBP: 00007fc273657090 R08: 0000000000000000 R09: 0000000000000000 [ 173.186192][ T9121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.186202][ T9121] R13: 00007fc2729e6128 R14: 00007fc2729e6090 R15: 00007fffc312b208 [ 173.186234][ T9121] [ 173.841506][ T9131] vlan0: entered promiscuous mode [ 173.855455][ T9131] netlink: 'syz.0.994': attribute type 1 has an invalid length. [ 174.053152][ T9146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.999'. [ 174.062728][ T9146] netlink: 'syz.2.999': attribute type 31 has an invalid length. [ 174.223783][ T9159] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.263435][ T9156] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1003'. [ 174.420575][ T9156] pim6reg: entered allmulticast mode [ 174.440156][ T9156] pim6reg: left allmulticast mode [ 174.453284][ T9165] netlink: 'syz.0.1006': attribute type 11 has an invalid length. [ 174.463402][ T9165] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1006'. [ 174.531780][ T9169] Bluetooth: MGMT ver 1.23 [ 174.579379][ T9169] syz_tun: entered promiscuous mode [ 174.585041][ T9169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1008'. [ 174.939276][ T9184] wlan1 speed is unknown, defaulting to 1000 [ 174.986319][ T9187] netlink: 'syz.3.1014': attribute type 1 has an invalid length. [ 175.332630][ T9185] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1013'. [ 175.478797][ T9190] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.486575][ T9190] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.997778][ T9190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.044015][ T9190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.327653][ T9190] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 176.362156][ T9190] ip6erspan0: left promiscuous mode [ 176.395172][ T9193] bond1: (slave geneve2): making interface the new active one [ 176.405998][ T9193] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 176.543044][ T9206] ip6erspan0: entered promiscuous mode [ 176.561153][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.591577][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.610696][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.620373][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.667853][ T13] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 176.685851][ T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 176.709366][ T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 176.730743][ T13] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 177.017873][ T9228] wlan1 speed is unknown, defaulting to 1000 [ 177.324808][ T9243] __nla_validate_parse: 1 callbacks suppressed [ 177.324825][ T9243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1028'. [ 177.381081][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1028'. [ 177.492301][ T9245] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1022'. [ 177.641034][ T9252] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1031'. [ 177.669154][ T9252] block nbd0: must specify backend [ 177.789270][ T9258] netlink: 'syz.3.1031': attribute type 4 has an invalid length. [ 177.850165][ T9248] wlan1 speed is unknown, defaulting to 1000 [ 178.111747][ T9262] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1034'. [ 178.214214][ T9270] ip6erspan0: entered promiscuous mode [ 178.754318][ T9292] af_packet: tpacket_rcv: packet too big, clamped from 977 to 4294967286. macoff=82 [ 178.927522][ T9302] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1047'. [ 178.976636][ T9309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1049'. [ 178.997464][ T9308] tipc: Started in network mode [ 179.006339][ T9308] tipc: Node identity a241e461259d, cluster identity 4711 [ 179.013799][ T9308] tipc: Enabled bearer , priority 0 [ 179.022119][ T9308] syzkaller0: entered promiscuous mode [ 179.044110][ T9309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1049'. [ 179.070535][ T9308] syzkaller0: entered allmulticast mode [ 179.152533][ T9317] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1048'. [ 179.191939][ T9308] tipc: Resetting bearer [ 179.258046][ T9308] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1048'. [ 179.278361][ T9304] tipc: Resetting bearer [ 179.340711][ T9304] tipc: Disabling bearer [ 179.351713][ T9320] netlink: 'syz.0.1051': attribute type 3 has an invalid length. [ 179.527861][ T9332] wlan1 speed is unknown, defaulting to 1000 [ 179.611008][ T9340] netlink: 'syz.1.1059': attribute type 1 has an invalid length. [ 179.878173][ T9352] netlink: 'syz.3.1063': attribute type 32 has an invalid length. [ 180.024217][ T9344] wlan1 speed is unknown, defaulting to 1000 [ 180.175334][ T122] block nbd0: Possible stuck request ffff888024e0e000: control (read@0,1024B). Runtime 60 seconds [ 180.186241][ T122] block nbd0: Possible stuck request ffff888024e0e1c0: control (read@1024,1024B). Runtime 60 seconds [ 180.199586][ T122] block nbd0: Possible stuck request ffff888024e0e380: control (read@2048,1024B). Runtime 60 seconds [ 180.210621][ T122] block nbd0: Possible stuck request ffff888024e0e540: control (read@3072,1024B). Runtime 60 seconds [ 180.381800][ T9359] wlan1 speed is unknown, defaulting to 1000 [ 180.779208][ T9358] wlan1 speed is unknown, defaulting to 1000 [ 181.270902][ T9384] wlan1 speed is unknown, defaulting to 1000 [ 181.893170][ T9393] wlan1 speed is unknown, defaulting to 1000 [ 182.211074][ T9395] wlan1 speed is unknown, defaulting to 1000 [ 182.645122][ T9397] wlan1 speed is unknown, defaulting to 1000 [ 182.735828][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.743098][ C0] bridge0: topology change detected, propagating [ 182.749959][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.757275][ C0] bridge0: topology change detected, propagating [ 182.960493][ T9410] wlan1 speed is unknown, defaulting to 1000 [ 183.056971][ T9428] __nla_validate_parse: 5 callbacks suppressed [ 183.056988][ T9428] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1085'. [ 183.910200][ T9446] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1092'. [ 183.919857][ T9446] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1092'. [ 183.929924][ T9442] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1090'. [ 184.046938][ T9448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1091'. [ 184.070905][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'. [ 184.340116][ T9465] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1100'. [ 184.371049][ T9465] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1100'. [ 184.381101][ T9465] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1100'. [ 184.390371][ T9465] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1100'. [ 184.401118][ T9469] netlink: 'syz.0.1099': attribute type 1 has an invalid length. [ 184.437844][ T9469] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.481772][ T9469] bond4: (slave geneve2): making interface the new active one [ 184.490859][ T9469] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 184.502147][ T1009] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.519388][ T1009] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.591611][ T9458] syzkaller0: entered promiscuous mode [ 184.597250][ T9458] syzkaller0: entered allmulticast mode [ 184.613587][ T1009] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.627955][ T1009] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.771138][ T9481] netlink: 'syz.0.1102': attribute type 1 has an invalid length. [ 186.311780][ T9481] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 186.401232][ T9479] wlan1 speed is unknown, defaulting to 1000 [ 187.185207][ T9541] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.192603][ T9534] wlan1 speed is unknown, defaulting to 1000 [ 187.257266][ T9541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.289047][ T9541] bond2: (slave bond0): Enslaving as an active interface with an up link [ 187.520469][ T9546] bond2 (unregistering): (slave bond0): Releasing backup interface [ 187.542489][ T9546] bond2 (unregistering): Released all slaves [ 187.583212][ T9539] wlan1 speed is unknown, defaulting to 1000 [ 187.940031][ T9554] TCP: TCP_TX_DELAY enabled [ 188.114398][ T9562] netlink: 'syz.3.1122': attribute type 10 has an invalid length. [ 188.126000][ T9562] __nla_validate_parse: 5 callbacks suppressed [ 188.126019][ T9562] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1122'. [ 188.192278][ T9566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1122'. [ 188.236367][ T9562] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 188.290512][ T9562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1122'. [ 188.871525][ T9575] macvtap1: entered allmulticast mode [ 188.877166][ T9575] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 188.888096][ T9575] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 189.019727][ T9573] wlan1 speed is unknown, defaulting to 1000 [ 189.263097][ T9611] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1137'. [ 189.456630][ T9615] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 189.464094][ T9615] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 189.571584][ T9617] wlan1 speed is unknown, defaulting to 1000 [ 190.045031][ T9643] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 190.091778][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1146'. [ 190.101150][ T9640] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1146'. [ 190.126101][ T9640] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1146'. [ 190.145545][ T9640] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1146'. [ 190.228932][ T9647] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1147'. [ 190.356697][ T9656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1151'. [ 190.798050][ T9670] wlan1 speed is unknown, defaulting to 1000 [ 191.444291][ T9696] bond3: option broadcast_neighbor: invalid value (5) [ 191.727142][ T9696] bond3 (unregistering): Released all slaves [ 191.838786][ T9710] netlink: 'syz.4.1155': attribute type 4 has an invalid length. [ 192.553777][ T9745] bond2 (unregistering): Released all slaves [ 192.626226][ T9750] tipc: Enabling of bearer rejected, failed to enable media [ 192.634652][ T9752] netlink: 'syz.4.1174': attribute type 4 has an invalid length. [ 192.759720][ T9750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.773648][ T9750] bond_slave_0: left promiscuous mode [ 192.804419][ T9750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.817676][ T9750] bond_slave_1: left promiscuous mode [ 192.826925][ T9750] bond0 (unregistering): Released all slaves [ 192.874109][ T9748] wlan1 speed is unknown, defaulting to 1000 [ 192.882333][ T9758] syzkaller0: entered promiscuous mode [ 192.893424][ T9758] syzkaller0: entered allmulticast mode [ 193.223257][ T9767] wlan1 speed is unknown, defaulting to 1000 [ 193.401138][ T9784] __nla_validate_parse: 7 callbacks suppressed [ 193.401156][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1180'. [ 193.417177][ T9784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1180'. [ 193.454331][ T9786] Unsupported ieee802154 address type: 0 [ 193.509236][ T9788] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1182'. [ 194.004368][ T9813] tipc: Started in network mode [ 194.023275][ T9813] tipc: Node identity 080211, cluster identity 4711 [ 194.040330][ T9813] tipc: Enabled bearer , priority 0 [ 194.098140][ T9813] tipc: Resetting bearer [ 194.185977][ T9815] wlan1 speed is unknown, defaulting to 1000 [ 194.266575][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.276945][ T875] IPVS: starting estimator thread 0... [ 194.364793][ T9822] tipc: Enabled bearer , priority 0 [ 194.365005][ T9830] IPVS: using max 32 ests per chain, 76800 per kthread [ 194.477151][ T9831] netlink: 'syz.4.1194': attribute type 29 has an invalid length. [ 194.489065][ T9817] wlan1 speed is unknown, defaulting to 1000 [ 194.567892][ T9834] syzkaller0: entered promiscuous mode [ 194.574283][ T9834] syzkaller0: entered allmulticast mode [ 194.587267][ T9840] tipc: Resetting bearer [ 194.705862][ T9821] tipc: Resetting bearer [ 194.733453][ T9821] tipc: Disabling bearer [ 194.785390][ T9827] wlan1 speed is unknown, defaulting to 1000 [ 194.892986][ T9848] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1199'. [ 195.097250][ T1737] tipc: Node number set to 134353152 [ 196.167034][ T9885] netlink: 'syz.3.1212': attribute type 2 has an invalid length. [ 196.178650][ T9885] netlink: 'syz.3.1212': attribute type 9 has an invalid length. [ 196.187241][ T9885] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1212'. [ 196.336253][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 196.342423][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 196.342438][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 196.422259][ T9902] syz_tun: entered allmulticast mode [ 196.479092][ T9898] syz_tun: left allmulticast mode [ 197.129940][ T9952] netlink: 'syz.3.1231': attribute type 10 has an invalid length. [ 197.163827][ T9950] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1231'. [ 197.176127][ T9950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1231'. [ 197.450910][ T9962] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1234'. [ 197.481972][ T9978] wlan1 speed is unknown, defaulting to 1000 [ 197.605345][ T9963] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.618224][ T9963] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.633571][ T9963] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 197.765024][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1240'. [ 197.939709][ T9999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1242'. [ 198.092793][ T9963] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.105254][ T9963] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.116698][ T9963] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 198.168760][ T9988] batadv1: left allmulticast mode [ 198.174087][ T9988] batadv1: left promiscuous mode [ 198.191847][ T9988] bridge0: port 3(batadv1) entered disabled state [ 198.192862][T10009] xt_cluster: node mask cannot exceed total number of nodes [ 198.208615][ T9988] bridge_slave_1: left allmulticast mode [ 198.214567][ T9988] bridge_slave_1: left promiscuous mode [ 198.220631][ T9988] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.233561][ T9988] bridge_slave_0: left allmulticast mode [ 198.239980][ T9988] bridge_slave_0: left promiscuous mode [ 198.247202][ T9988] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.329711][T10013] nbd: socks must be embedded in a SOCK_ITEM attr [ 198.420656][ T9999] 8021q: VLANs not supported on vxcan1 [ 198.482923][ T9963] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.494222][ T9963] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.510627][ T9963] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 198.710296][ T9963] team0: Port device netdevsim0 removed [ 198.721196][ T9963] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.732026][ T9963] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.746408][ T9963] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 198.783835][T10026] netlink: 'syz.4.1252': attribute type 3 has an invalid length. [ 199.077999][ T36] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.088456][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 199.107347][ T36] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 199.125235][ T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.143631][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 199.162168][ T36] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 199.198614][ T36] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.208137][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 199.216611][ T36] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 199.408014][ T1163] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.416662][ T1163] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 199.427365][ T1163] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 199.443035][T10042] wg1: entered promiscuous mode [ 199.448844][T10042] wg1: entered allmulticast mode [ 199.551423][T10051] wlan1 speed is unknown, defaulting to 1000 [ 199.659800][T10058] __nla_validate_parse: 6 callbacks suppressed [ 199.659817][T10058] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1261'. [ 200.098946][T10064] wlan1 speed is unknown, defaulting to 1000 [ 200.160496][T10085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1267'. [ 200.198520][T10086] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 4, id = 0 [ 200.750658][T10109] sctp: [Deprecated]: syz.4.1275 (pid 10109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.750658][T10109] Use struct sctp_sack_info instead [ 200.769356][T10109] sctp: [Deprecated]: syz.4.1275 (pid 10109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.769356][T10109] Use struct sctp_sack_info instead [ 200.786947][T10109] sctp: [Deprecated]: syz.4.1275 (pid 10109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.786947][T10109] Use struct sctp_sack_info instead [ 200.809260][T10109] sctp: [Deprecated]: syz.4.1275 (pid 10109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.809260][T10109] Use struct sctp_sack_info instead [ 200.834457][T10109] sctp: [Deprecated]: syz.4.1275 (pid 10109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.834457][T10109] Use struct sctp_sack_info instead [ 200.855124][T10109] sctp: [Deprecated]: syz.4.1275 (pid 10109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.855124][T10109] Use struct sctp_sack_info instead [ 200.887820][T10109] sctp: [Deprecated]: syz.4.1275 (pid 10109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.887820][T10109] Use struct sctp_sack_info instead [ 200.905269][T10109] sctp: [Deprecated]: syz.4.1275 (pid 10109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.905269][T10109] Use struct sctp_sack_info instead [ 200.930950][T10109] sctp: [Deprecated]: syz.4.1275 (pid 10109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.930950][T10109] Use struct sctp_sack_info instead [ 200.962406][T10109] sctp: [Deprecated]: syz.4.1275 (pid 10109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.962406][T10109] Use struct sctp_sack_info instead [ 200.997784][T10104] wlan1 speed is unknown, defaulting to 1000 [ 201.368505][T10126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1282'. [ 201.614794][T10137] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1285'. [ 201.653933][T10137] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1285'. [ 202.208237][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1291'. [ 202.354692][T10161] wlan1 speed is unknown, defaulting to 1000 [ 202.364089][T10163] netlink: 'syz.3.1293': attribute type 39 has an invalid length. [ 202.536286][T10169] netlink: 'syz.4.1296': attribute type 10 has an invalid length. [ 202.669048][T10177] netlink: 'syz.0.1298': attribute type 1 has an invalid length. [ 202.791486][T10177] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1298'. [ 202.818820][T10177] bond5: (slave geneve3): making interface the new active one [ 202.828073][T10177] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 202.858674][ T1009] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 202.867880][ T1009] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 202.937314][ T1009] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 202.957630][ T1009] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 203.172108][T10207] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1306'. [ 203.185425][T10204] xt_hashlimit: overflow, rate too high: 0 [ 203.320890][T10212] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1308'. [ 203.410172][T10214] wlan1 speed is unknown, defaulting to 1000 [ 203.442170][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1312'. [ 204.039305][T10245] bond1: option xmit_hash_policy: invalid value (6) [ 204.051526][T10245] bond1 (unregistering): Released all slaves [ 204.422016][T10263] wlan1 speed is unknown, defaulting to 1000 [ 210.255606][ T122] block nbd0: Possible stuck request ffff888024e0e000: control (read@0,1024B). Runtime 90 seconds [ 210.266288][ T122] block nbd0: Possible stuck request ffff888024e0e1c0: control (read@1024,1024B). Runtime 90 seconds [ 210.277902][ T122] block nbd0: Possible stuck request ffff888024e0e380: control (read@2048,1024B). Runtime 90 seconds [ 210.288899][ T122] block nbd0: Possible stuck request ffff888024e0e540: control (read@3072,1024B). Runtime 90 seconds [ 240.335801][ T122] block nbd0: Possible stuck request ffff888024e0e000: control (read@0,1024B). Runtime 120 seconds [ 240.346580][ T122] block nbd0: Possible stuck request ffff888024e0e1c0: control (read@1024,1024B). Runtime 120 seconds [ 240.357594][ T122] block nbd0: Possible stuck request ffff888024e0e380: control (read@2048,1024B). Runtime 120 seconds [ 240.368601][ T122] block nbd0: Possible stuck request ffff888024e0e540: control (read@3072,1024B). Runtime 120 seconds [ 255.698137][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 270.415194][ T31] INFO: task udevd:7116 blocked for more than 143 seconds. [ 270.422430][ T31] Not tainted syzkaller #0 [ 270.427505][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 270.427521][ T56] block nbd0: Possible stuck request ffff888024e0e000: control (read@0,1024B). Runtime 150 seconds [ 270.436455][ T31] task:udevd state:D stack:23272 pid:7116 tgid:7116 ppid:1 task_flags:0x400140 flags:0x00080001 [ 270.459093][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 270.459093][ T56] block nbd0: Possible stuck request ffff888024e0e1c0: control (read@1024,1024B). Runtime 150 seconds [ 270.462368][ T31] [ 270.462384][ T31] __schedule+0x1798/0x4cc0 [ 270.473407][ T56] block nbd0: Possible stuck request ffff888024e0e380: control (read@2048,1024B). Runtime 150 seconds [ 270.476290][ T31] ? blk_mq_flush_plug_list+0x41f/0x550 [ 270.476331][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 270.476361][ T31] ? __lock_acquire+0xab9/0xd20 [ 270.476385][ T31] ? __pfx___schedule+0x10/0x10 [ 270.476422][ T31] ? schedule+0x91/0x360 [ 270.476442][ T31] schedule+0x165/0x360 [ 270.476463][ T31] schedule_timeout+0x12b/0x270 [ 270.476480][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 270.476496][ T31] ? __pfx_process_timeout+0x10/0x10 [ 270.476519][ T31] ? prepare_to_wait_event+0x437/0x480 [ 270.476548][ T31] nbd_queue_rq+0x662/0xf10 [ 270.476579][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 270.476598][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 270.476636][ T31] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 270.476659][ T31] ? sbitmap_find_bit+0x47f/0x520 [ 270.476701][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 270.476727][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 270.476757][ T31] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 270.481267][ T56] block nbd0: Possible stuck request ffff888024e0e540: control (read@3072,1024B). Runtime 150 seconds [ 270.492234][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 270.492285][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 270.825256][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 270.831318][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 270.844998][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 270.850167][ T31] blk_mq_dispatch_list+0xd0c/0xe00 [ 270.864976][ T31] ? bdev_count_inflight+0x1cf/0x210 [ 270.870312][ T31] ? blk_mq_dispatch_list+0x1e0/0xe00 [ 270.895651][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 270.901439][ T31] ? rcu_is_watching+0x15/0xb0 [ 270.915211][ T31] blk_mq_flush_plug_list+0x469/0x550 [ 270.920845][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 270.934996][ T31] ? blk_mq_submit_bio+0x1a65/0x25b0 [ 270.940380][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 270.954983][ T31] __blk_flush_plug+0x3d3/0x4b0 [ 270.959888][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 270.974973][ T31] __submit_bio+0x2d3/0x5a0 [ 270.979527][ T31] ? __pfx___submit_bio+0x10/0x10 [ 270.984555][ T31] ? blk_cgroup_bio_start+0x59d/0x640 [ 271.005086][ T31] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 271.010790][ T31] ? bio_associate_blkg+0x6d/0x230 [ 271.025262][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 271.031490][ T31] ? submit_bio_noacct+0xe0c/0x1b80 [ 271.064994][ T31] block_read_full_folio+0x599/0x830 [ 271.070350][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 271.084991][ T31] filemap_read_folio+0x117/0x380 [ 271.090060][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 271.101355][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 271.106971][ T31] ? filemap_add_folio+0x35f/0x540 [ 271.112090][ T31] do_read_cache_folio+0x350/0x590 [ 271.117222][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 271.122669][ T31] read_part_sector+0xb6/0x2b0 [ 271.127442][ T31] adfspart_check_ICS+0xa4/0xa50 [ 271.132368][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.137564][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 271.143130][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 271.148869][ T31] bdev_disk_changed+0x75f/0x14b0 [ 271.153923][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 271.159415][ T31] ? wait_on_inode+0xc0/0x230 [ 271.164090][ T31] blkdev_get_whole+0x380/0x510 [ 271.168982][ T31] bdev_open+0x31e/0xd30 [ 271.173227][ T31] blkdev_open+0x457/0x600 [ 271.177664][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 271.182594][ T31] do_dentry_open+0x953/0x13f0 [ 271.187385][ T31] vfs_open+0x3b/0x340 [ 271.191436][ T31] ? path_openat+0x2ecd/0x3830 [ 271.196212][ T31] path_openat+0x2ee5/0x3830 [ 271.200811][ T31] ? __pfx_path_openat+0x10/0x10 [ 271.205759][ T31] do_filp_open+0x1fa/0x410 [ 271.210251][ T31] ? __lock_acquire+0xab9/0xd20 [ 271.215115][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 271.220172][ T31] ? _raw_spin_unlock+0x28/0x50 [ 271.225080][ T31] ? alloc_fd+0x64c/0x6c0 [ 271.229402][ T31] do_sys_openat2+0x121/0x1c0 [ 271.234059][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 271.239258][ T31] ? __rseq_handle_notify_resume+0x384/0x1220 [ 271.245345][ T31] __x64_sys_openat+0x138/0x170 [ 271.250264][ T31] do_syscall_64+0xfa/0xfa0 [ 271.254745][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.260816][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 271.266990][ T31] ? clear_bhb_loop+0x60/0xb0 [ 271.271664][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.277582][ T31] RIP: 0033:0x7f0b1a2a7407 [ 271.282001][ T31] RSP: 002b:00007ffc27269ef0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 271.290559][ T31] RAX: ffffffffffffffda RBX: 00007f0b1aa0d880 RCX: 00007f0b1a2a7407 [ 271.298666][ T31] RDX: 00000000000a0800 RSI: 0000560b78801430 RDI: ffffffffffffff9c [ 271.306669][ T31] RBP: 0000560b78800910 R08: 0000000000000000 R09: 0000000000000000 [ 271.314646][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000560b78813e20 [ 271.322636][ T31] R13: 0000560b7880e190 R14: 0000000000000000 R15: 0000560b78813e20 [ 271.330653][ T31] [ 271.333704][ T31] [ 271.333704][ T31] Showing all locks held in the system: [ 271.365032][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 271.370355][ T31] #0: ffff8880b883a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 271.386878][ T31] 1 lock held by khungtaskd/31: [ 271.391757][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 271.402124][ T31] 3 locks held by kworker/1:2/1737: [ 271.407442][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 271.418560][ T31] #1: ffffc90005937ba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 271.429321][ T31] #2: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 271.440520][ T31] 2 locks held by getty/5592: [ 271.445352][ T31] #0: ffff88814de0d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 271.455472][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 271.465734][ T31] 5 locks held by syz-executor/5829: [ 271.471019][ T31] #0: ffff8880300a8dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 271.481147][ T31] #1: ffff8880300a80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 271.490962][ T31] #2: ffffffff8f4349a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 271.515008][ T31] #3: ffff8880212b2b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 271.524408][ T31] #4: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 271.555091][ T31] 3 locks held by syz-executor/5835: [ 271.560414][ T31] #0: ffff88807ab68dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 271.584887][ T31] #1: ffff88807ab680b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 271.594627][ T31] #2: ffffffff8f4349a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 271.624902][ T31] 3 locks held by syz-executor/5843: [ 271.630313][ T31] #0: ffff888031340dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 271.655196][ T31] #1: ffff8880313400b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 271.674923][ T31] #2: ffffffff8f4349a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 271.689107][ T31] 1 lock held by udevd/7115: [ 271.693725][ T31] #0: ffff888142f6a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 271.703919][ T31] 3 locks held by udevd/7116: [ 271.708661][ T31] #0: ffff888142f6c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 271.718088][ T31] #1: ffff888024c46b10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 271.727680][ T31] #2: ffff888024e30178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 271.736642][ T31] [ 271.739047][ T31] ============================================= [ 271.739047][ T31] [ 271.748806][ T31] NMI backtrace for cpu 0 [ 271.748830][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 271.748849][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 271.748859][ T31] Call Trace: [ 271.748866][ T31] [ 271.748874][ T31] dump_stack_lvl+0x189/0x250 [ 271.748904][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.748925][ T31] ? __pfx__printk+0x10/0x10 [ 271.748956][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 271.748984][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 271.749011][ T31] ? __pfx__printk+0x10/0x10 [ 271.749033][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 271.749066][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 271.749094][ T31] watchdog+0xf60/0xfa0 [ 271.749117][ T31] ? watchdog+0x1e2/0xfa0 [ 271.749140][ T31] kthread+0x711/0x8a0 [ 271.749164][ T31] ? __pfx_watchdog+0x10/0x10 [ 271.749180][ T31] ? __pfx_kthread+0x10/0x10 [ 271.749203][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 271.749222][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.749240][ T31] ? __pfx_kthread+0x10/0x10 [ 271.749262][ T31] ret_from_fork+0x4bc/0x870 [ 271.749282][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 271.749306][ T31] ? __switch_to_asm+0x39/0x70 [ 271.749320][ T31] ? __switch_to_asm+0x33/0x70 [ 271.749333][ T31] ? __pfx_kthread+0x10/0x10 [ 271.749356][ T31] ret_from_fork_asm+0x1a/0x30 [ 271.749387][ T31] [ 271.749393][ T31] Sending NMI from CPU 0 to CPUs 1: [ 271.899761][ C1] NMI backtrace for cpu 1 [ 271.899778][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 271.899795][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 271.899803][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 271.899826][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 51 22 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 271.899839][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 271.899854][ C1] RAX: f4ff42325385d600 RBX: ffffffff81967b87 RCX: f4ff42325385d600 [ 271.899866][ C1] RDX: 0000000000000001 RSI: ffffffff8d70b745 RDI: ffffffff8bbf0460 [ 271.899877][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 271.899889][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7ccb70 [ 271.899900][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003957b58 [ 271.899911][ C1] FS: 0000000000000000(0000) GS:ffff888126241000(0000) knlGS:0000000000000000 [ 271.899923][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.899934][ C1] CR2: 000055aa4f4a5000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 271.899948][ C1] Call Trace: [ 271.899955][ C1] [ 271.899961][ C1] default_idle+0x13/0x20 [ 271.899981][ C1] default_idle_call+0x73/0xb0 [ 271.900002][ C1] do_idle+0x1e7/0x510 [ 271.900023][ C1] ? __pfx_do_idle+0x10/0x10 [ 271.900047][ C1] cpu_startup_entry+0x44/0x60 [ 271.900063][ C1] start_secondary+0x101/0x110 [ 271.900084][ C1] common_startup_64+0x13e/0x147 [ 271.900113][ C1] [ 272.857282][ T1009] bond0 (unregistering): Released all slaves [ 272.937572][ T1009] bond1 (unregistering): Released all slaves [ 273.014010][ T1009] bond2 (unregistering): (slave veth3): Releasing active interface [ 273.023622][ T1009] bond2 (unregistering): Released all slaves [ 273.084077][ T1009] : left promiscuous mode [ 273.134505][ T1009] tipc: Left network mode [ 273.349364][ T1009] hsr_slave_0: left promiscuous mode [ 273.356208][ T1009] hsr_slave_1: left promiscuous mode [ 273.451050][ T1009] pim6reg (unregistering): left allmulticast mode [ 274.307399][ T1009] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.317392][ T1009] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 274.327233][ T1009] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 274.380938][ T1009] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.390752][ T1009] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 274.400704][ T1009] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 274.449563][ T1009] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.459421][ T1009] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 274.469329][ T1009] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 274.530584][ T1009] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.540390][ T1009] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 274.550266][ T1009] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 274.885847][ T1009] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.897104][ T1009] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 274.950284][ T1009] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.960255][ T1009] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 275.009135][ T1009] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.018910][ T1009] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 275.079243][ T1009] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.089159][ T1009] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 275.161813][ T1009] bridge_slave_1: left allmulticast mode [ 275.168824][ T1009] bridge_slave_1: left promiscuous mode [ 275.175497][ T1009] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.186016][ T1009] bridge_slave_0: left allmulticast mode [ 275.191644][ T1009] bridge_slave_0: left promiscuous mode [ 275.197640][ T1009] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.210150][ T1009] bridge_slave_1: left allmulticast mode [ 275.216225][ T1009] bridge_slave_1: left promiscuous mode [ 275.221961][ T1009] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.230720][ T1009] bridge_slave_0: left allmulticast mode [ 275.236438][ T1009] bridge_slave_0: left promiscuous mode [ 275.242164][ T1009] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.254142][ T1009] bridge_slave_1: left allmulticast mode [ 275.259978][ T1009] bridge_slave_1: left promiscuous mode [ 275.266033][ T1009] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.274695][ T1009] bridge_slave_0: left allmulticast mode [ 275.280419][ T1009] bridge_slave_0: left promiscuous mode [ 275.286181][ T1009] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.473000][ T1009] bond1 (unregistering): (slave geneve2): Releasing active interface [ 275.617775][ T1009] bond1 (unregistering): Released all slaves [ 275.887716][ T1009] bond0 (unregistering): (slave 30): Releasing backup interface [ 275.898881][ T1009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.909069][ T1009] bond0 (unregistering): Released all slaves [ 275.989379][ T1009] bond1 (unregistering): Released all slaves [ 276.001379][ T1009] bond2 (unregistering): Released all slaves [ 276.134787][ T1009] bond5 (unregistering): (slave geneve3): Releasing active interface [ 276.154820][ T1009] bond4 (unregistering): (slave geneve2): Releasing active interface [ 276.351102][ T1009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.360956][ T1009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.370326][ T1009] bond0 (unregistering): Released all slaves [ 276.449006][ T1009] bond1 (unregistering): Released all slaves [ 276.524118][ T1009] bond2 (unregistering): Released all slaves [ 276.601563][ T1009] bond3 (unregistering): Released all slaves [ 276.677947][ T1009] bond4 (unregistering): Released all slaves [ 276.689835][ T1009] bond5 (unregistering): Released all slaves [ 276.809305][ T1009] tipc: Left network mode [ 276.826961][ T1009] tipc: Disabling bearer [ 276.841359][ T1009] tipc: Left network mode [ 276.853387][ T1009] IPVS: stopping backup sync thread 9643 ... [ 276.861272][ T1009] IPVS: stopping backup sync thread 10086 ... [ 277.116247][ T1095] smc: removing ib device syz2 [ 277.123018][ T5899] wlan1 speed is unknown, defaulting to 1000 [ 277.684481][ T1009] hsr_slave_0: left promiscuous mode [ 277.690440][ T1009] hsr_slave_1: left promiscuous mode [ 277.698572][ T1009] hsr_slave_0: left promiscuous mode [ 277.704339][ T1009] hsr_slave_1: left promiscuous mode [ 277.710552][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.718759][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.730044][ T1009] hsr_slave_0: left promiscuous mode [ 277.736063][ T1009] hsr_slave_1: left promiscuous mode [ 277.742321][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.749944][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.767874][ T1009] veth1_macvtap: left promiscuous mode [ 277.774455][ T1009] veth0_macvtap: left promiscuous mode [ 277.780286][ T1009] veth1_vlan: left promiscuous mode [ 277.786182][ T1009] veth0_vlan: left promiscuous mode [ 278.107583][ T1009] team0 (unregistering): Port device team_slave_1 removed [ 278.139324][ T1009] team0 (unregistering): Port device team_slave_0 removed [ 278.582146][ T1009] team0 (unregistering): Port device team_slave_1 removed [ 278.616473][ T1009] team0 (unregistering): Port device team_slave_0 removed [ 279.154432][ T1009] team0 (unregistering): Port device team_slave_1 removed [ 279.187463][ T1009] team0 (unregistering): Port device team_slave_0 removed [ 280.077989][ T1009] IPVS: stop unused estimator thread 0...