last executing test programs: 2.265807605s ago: executing program 2 (id=1983): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000040)=0xb) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20091}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="557ee3cbeafe06", @ANYRES16=r1, @ANYBLOB="050027bd7000fedbf15cd420000008000300", @ANYRES32=r3, @ANYBLOB, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 2.026966664s ago: executing program 0 (id=1985): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000007c0)="7800000018002502b9409b02ffff48000203be04020406050a08040c5c000900580004000a0000000d0085a168d0bf46d32345653600648d270005000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a000f4a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x400, 0x4140}}}}}}]}, 0x48}}, 0x0) 1.963037593s ago: executing program 2 (id=1986): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x6, 0x0, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'virt_wifi0\x00', 0x8000}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e21, @empty}, 0x4, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x3, 0x3, 0xffffffff}}, 0x2e) sendmmsg(r5, &(0x7f000000b200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8044) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r6) r7 = socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x13e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x108, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1c, "9595f429ae08a565c9a41d413270a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c4819c33b59c1abe2a4b0aa661fcb54e0855d6bb5dd267878ff59bcfc6079e7a5"}]}}}}}}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r11, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) connect$pppl2tp(r7, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @broadcast}, 0x5, 0x2, 0x2, 0x804}}, 0x26) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000001ac1414bb0000000000000000000000000000ffff000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"/500], 0x23c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.859363896s ago: executing program 0 (id=1988): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r0, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) socket$can_raw(0x1d, 0x3, 0x1) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000040)=0x9, 0x65) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) (async) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x9, &(0x7f0000000000)=0x2, 0xfcc0) 1.726610549s ago: executing program 3 (id=1989): read(0xffffffffffffffff, &(0x7f0000000000)=""/98, 0x62) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0xffffffffffffffff, 0x37de) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000100)={0x2, 0x100000000}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) recvfrom$rxrpc(r2, &(0x7f0000000140)=""/171, 0xab, 0x10002, &(0x7f0000000200)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240), 0x10) setsockopt$packet_buf(r2, 0x107, 0x6, &(0x7f0000000280)="6518aa61b94984af0a076dcbaf2bda9480225e309eec83038406df9cdaf2b98012f4f33fd365535c36206830faee40badbaaee8c580a2a5113a306e639a7f1f1af167ddfeebeb8401d86372a09be56dc132b73dc3a708d0220b5dba3377e4a34b8ea6532103ddb6271da589c4ffacb121fedb15c562de94be08280c56851b691aecfcfb1acf7835e132ce4237c8b122aad0ac0b11a50d1a8cf5672bfc6e48037b6", 0xa1) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000340)) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000380)={0x0, 0x1, 0xf6, 0x0, 0x6}, 0xc) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f00000003c0)={'veth1\x00'}) r4 = accept4$x25(r1, &(0x7f0000000400), &(0x7f0000000440)=0x12, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000480)={0x2000}) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000540)) sendmsg$can_raw(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=@can={{0x1, 0x1, 0x1}, 0x3, 0x0, 0x0, 0x0, "94c389b09c0ed715"}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x22000040) ioctl$SIOCAX25NOUID(r3, 0x89e3, &(0x7f0000000640)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000780)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/97, 0x61, 0x1, &(0x7f0000000700)=""/127, 0x7f}, &(0x7f00000007c0)=0x40) r5 = getpid() r6 = getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, 0x0}, &(0x7f00000008c0)=0xc) r8 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000a00)=0xe8) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000a40)={0x0, r2}, 0x10) r11 = gettid() sendmsg$netlink(r3, &(0x7f0000000b00)={&(0x7f0000000800)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840), 0x0, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r4, r10]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xee01}}}], 0x78, 0x4000000}, 0x4040) 1.65441296s ago: executing program 0 (id=1991): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05fa651ba00000000000010000000900010073797a30000000002c000000030a03000000000000400000010000000900030073797a32000000000900010073797a300000000054000000060a01040000000000000000010000002c00048028000180080001006e6174001c00028008000540000000040800014000000001080002404d89000208000b40000000000900010073797a30"], 0xc8}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, 0x40) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0006"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.621264274s ago: executing program 2 (id=1992): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f8ffff"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x90) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8080}, 0x5) recvfrom(0xffffffffffffffff, &(0x7f00000002c0)=""/127, 0x7f, 0x40000002, &(0x7f0000000340)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x5, @empty, 0x40}}, 0x80) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0xfc) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000008001b9a0000000010001a800c000a800500080003000000"], 0x38}}, 0x0) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="010300000051fddbdf25060000002000018008000100fd3383635b9b31c1e79846a5764fe6191d9be66ba6aa83ef71d92fc502e2b8fa6ba0f953d33e00caefaea94cf249299665af46480c74b3b586b88aaf", @ANYRES32=r7, @ANYBLOB="1400020077673100"/20], 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x20040080) (async) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) (async) sendmmsg$inet(r8, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (async) r10 = socket$inet6(0xa, 0x80000, 0x9) getsockopt$inet6_int(r10, 0x29, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async, rerun: 64) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x3, &(0x7f00000000c0)=""/113, &(0x7f0000000080)=0x71) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b400faff00000000dd0a0000000000004001c862c21242881b8135464800000007b8559c3e2d920000f62983a783688aa058abea0419b9e395a5caed601718640e4cd940549b9c755375c40edb724e62124b94d644685b8444256052cc603e7c04d2ac8e08cb769d29f741fbd2bfd8e47945ac970f04906ab2fcfb8acc"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10000}, 0x10}, 0x94) (async, rerun: 32) r11 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) setsockopt$sock_attach_bpf(r12, 0x1, 0x4c, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async, rerun: 64) recvmsg$unix(r13, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (rerun: 64) 1.611399149s ago: executing program 1 (id=1993): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001a000100000000000000000081"], 0x1c}}, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000640)={&(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES32=r1], 0x80}, 0x24044004) setsockopt$sock_attach_bpf(r1, 0x29, 0x1a, 0x0, 0x0) 1.542494197s ago: executing program 3 (id=1994): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000840000000010800034000000010400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300004c000000140a010400000000000000000a0000000c00064000000000000000050c00064000000000000000040900010073797a3100000000080003"], 0x238}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000840000000010800034000000010400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300004c000000140a010400000000000000000a0000000c00064000000000000000050c00064000000000000000040900010073797a3100000000080003"], 0x238}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x12, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x50, 0x2, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x4000040) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f00000000c0)) (async) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f00000000c0)) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) (async) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x1c, 0x0}}], 0x1, 0x24000000) recvmmsg(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0xdb31}], 0x1, 0x40002042, 0x0) (async) recvmmsg(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0xdb31}], 0x1, 0x40002042, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) 1.533220401s ago: executing program 4 (id=1995): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r1, @ANYRES64=r2, @ANYBLOB="e0e3f7bd1ecddb10aaca203480ae19fad240a133e147e6ca918b00b208fee86d4f4098a8df8e306bc343ae00bad65f438a286b1fca641157973c6248203ca1e1a871a761c4b79e393713eb65105ddebdd35037863f05d74aa98ffdb74d6c5406dca48b748dbe7dbc3bfbe78d5a08c025db985d5477d3057b19f4ee2b722d0317a2524e41a32a0cdcf5c73e996c788ce40d1515bb80299386c81de211e8864d9671674e384cfc534867219d3c23637d442bd377bd59615e622006720b8153dcd55199e16fe03d5ebe972caec52001aeb53d4622bf0dbc14", @ANYRESDEC=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000001c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9, @default, @rose={'rose', 0x0}, 0x7, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000980)={0x1f, 0x0, @none}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0xf0}, 0xe) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011140100000000000000000008004a00000000f107004b"], 0x20}}, 0x0) 1.463365817s ago: executing program 1 (id=1996): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newlink={0x128, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xf8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xe8, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_INGRESS_QOS={0x0, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING]}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xfffffffffffffdb7}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x128}}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0xb8825000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r2, 0x29, 0x4e, 0x0, 0x0) 1.345855576s ago: executing program 3 (id=1997): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000006a40)={&(0x7f0000006940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x12}]}}, 0x0, 0x26}, 0x20) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xfffffffffffffe38, &(0x7f0000000140)={&(0x7f0000000200)={0x14, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x140000c4) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "a840"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "8d"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@dellinkprop={0x28, 0x6d, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1, 0x400}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x4) 1.341516686s ago: executing program 1 (id=1998): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x2}, 0xc) r1 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x8e, 0xfffffff8, 0x3, 0x7fff, 0x8}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x7, 0x2, 0x3a, 0xd38f, 0x9}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x1, 0x30}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x1d7}, &(0x7f0000000180)=0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x5, 0x5, 0x6, 0x6}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%pS \x00'}, 0x20) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000002c0)={0xc3da, 0x0, 0x8, 0x7, 0x8}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={&(0x7f0000000300)="1d4018a001f517397baf7057782c1b4662406b7a3a990fe75d821864bfa5d308accb34eca3528b5d20d4bdea891020b5544c018e0bd155d888823b0f409ba88d3b29b1abba6d70f5291a62a0b0ec2802c16a530d76eb1162e3b050dff91420", &(0x7f0000000380)=""/81, &(0x7f0000000400)="cfb665f723b78b6e71eaa0b77864c95cd764f893128b7b615284f4b2e11de902baaacfbf9d243a0c98c6b96195", &(0x7f0000000440)="81f345f86bfa7e819cf7342545ad94790fe8ccb8224e2c798fea4fce97e0fd05a71162a89b53101e9718cb57f08859c99dc689b6575b846bb5e7fc75bc954586bf38f6bb0c8951dbcac9aa43f7c6bcf4b74200febd65fa34a2a765f8de16ddf957f14b36ca75c646e5436233aa2d04d62d74fb28505cc56f43f6374d98c55592581b5f193ac50e5b32bcd5465d468c03d64e9cf08fe8dfa3516673551e42c000535ef4e2", 0xfd8, r4}, 0x38) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000540)={0x8}, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000580)={'ipvlan0\x00', {0x2, 0x4e22, @multicast1}}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f00000005c0)={0x7, 'bond_slave_1\x00', {0x8}, 0x2}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000600)={r2, 0x7a, "ba7945757e29271b81cbee7ad79ac959ab0fef438bcc3c471b6675a9cefd7576c0f5e13944e92b7bbee952b33b12f16b2920a6b1e940c2401c0287c039c8248137f47fdcb520fcebb4386826e48eb95d1539910a830ca297dda8e2cf654a836b09e1497bdfc62f6ff16b2db432e08b1bd037de90ae20b18fb5ce"}, &(0x7f00000006c0)=0x82) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000700)={0x1, [0x0]}, &(0x7f0000000740)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000780)={r5, @in={{0x2, 0x4e22, @loopback}}, 0xfff, 0x4}, 0x90) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000840)={'veth0_macvtap\x00', {0x2, 0x4e20, @private=0xa010101}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000880)={r3, @in6={{0xa, 0x4e21, 0x8, @mcast2, 0x7fff}}, [0x40, 0x100000001, 0x92e, 0x7, 0x3, 0x7f, 0xd65, 0x92, 0x5, 0x9037, 0xb1, 0x80000001, 0x3, 0x1, 0x7]}, &(0x7f0000000980)=0x100) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000009c0)={r7, 0x4, 0x6, 0x401, 0x8001, 0x2}, &(0x7f0000000a00)=0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFCONF(r8, 0x8912, &(0x7f0000000a80)=@req={0x28, &(0x7f0000000a40)={'ipvlan1\x00', @ifru_map={0x8, 0x767, 0x6, 0x6a, 0x2, 0x1}}}) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000c00)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@const={0xb, 0x0, 0x0, 0xa, 0x3}, @fwd={0x3}]}, {0x0, [0x17, 0x61]}}, &(0x7f0000000b00)=""/173, 0x34, 0xad, 0x1, 0x180000, 0x10000, @value=r9}, 0x28) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000c40)={0x8, 0x80000001, 0x7f, 0x7, 0x18}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r9, &(0x7f00000011c0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f0000000d40)={0x410, r10, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IE={0x179, 0x2a, [@random_vendor={0xdd, 0xe2, "7192d1f60d84889e319a1a61382103e448c1a6cf9e8faa5e7039204f8e6ac3cd11ae9aae3d3e0b4bf7720cbbb7ea839a5ce4bc739850e3d49a6f78b9b488b4564deebc34f2fea27b5cb02bb3400747687017a305f492728d0d5b646226be0af1603dcd5c9098662d97812569f41cf49c7b86dd814adabad03141d593517e4eb09b73b4590751762b649d413643bdd9cadd44051e9ca1c07351c0966c0d664ac08e3c15d800889ba091bb1756c448f87c0a8f9d982c0a3e92c44a26b5c620a4bb6e92617469ca7ad7073294362e84d1d2c8fb93982caed7f6218774438f5364180354"}, @perr={0x84, 0x8f, {0x8, 0x9, [{{}, @device_a, 0x3, @void, 0x1d}, {{0x0, 0x1}, @device_a, 0x49ad, @value, 0x42}, {{0x0, 0x1}, @device_b, 0x0, @value=@device_b, 0x3d}, {{}, @broadcast, 0xff, @void, 0x1c}, {{}, @broadcast, 0x7fff0, @void, 0x29}, {{}, @broadcast, 0x80}, {{0x0, 0x1}, @device_b, 0xc00d, @value, 0x20}, {{}, @device_b, 0x8, @void, 0x37}, {{0x0, 0x1}, @device_b, 0x87, @value=@device_b, 0x10}]}}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x25, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @chsw_timing={0x68, 0x4, {0x0, 0x33}}, @mesh_chsw={0x76, 0x6, {0x3, 0x1, 0x40, 0x1}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @cf={0x4, 0x6, {0x9, 0x0, 0x101, 0x1}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1a}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x30}, @NL80211_ATTR_IE={0x20, 0x2a, [@ssid={0x0, 0x12, @random="7bc7207633a2f90b51491c962f851756f0da"}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_IE={0x214, 0x2a, [@mic={0x8c, 0x18, {0xf96, "922250dce68a", @long="5e083829a4e5fa2f8685bc40c925d497"}}, @cf={0x4, 0x6, {0x7, 0x2, 0x5157, 0x2}}, @peer_mgmt={0x75, 0x16, {0x1, 0x0, @val, @void, @val="87cebea239b63c7cf60a5725008a0d45"}}, @fast_bss_trans={0x37, 0xe4, {0xc0, 0x6, "bba671db15f189e6c48822a5f6b71ac1", "1c819ae4bb33558c3120fdb9124b8ec30a3583f6b0b84a36ad28acb8ef8d6b1d", "c6491483839d3579a81c03df8c9b0128c3f25ae523b9d28c1fc680eb31b5f23e", [{0x2, 0xb, "ff82bea5242525d7a69efb"}, {0x1, 0x1b, "681d44caa867ba2d27ef2aa640bc318e401bee108c6cc5b2e71106"}, {0x4, 0x27, "0bb8c7ce1a32809d6bec5d6beeeea69576dd09eada005f7e16807282a28adf1b5f0eff20db8bb7"}, {0x1}, {0x4, 0x21, "5a054298ca95cdf2819ddc4580832e6509de9de6f4ac00f34568e13eb3d452f32b"}, {0x4, 0x18, "57224b5cb96f70278524c68732ec13ca64b2071bfc93ea61"}]}}, @tim={0x5, 0xc4, {0x7, 0x52, 0xf8, "1167690bbdd9bc6e30571fb75a18ef797486c1078ef631727535bf44b851a6dfe560b41f673bc99c3396fd2644a8e7d4f166ea1d71b98b936608561368e6688e68ca3d977c5b5bba646c0e1e05a2c2be84343bdce05ddf43874f701a047ed7351d60d53af0141701d5388acbf389103b15076da47a48449fed195361520b7bd3363051716bef03a938d037582fb84abdae6a4f7fe15b29a0984b62a4a83d5f2bafb8bd814ddbf30c09ef03461758c4c43abb2dd570417e7a741bf21567c76c0128"}}, @cf={0x4, 0x6, {0x1, 0x2, 0xf, 0x7ff}}, @ssid={0x0, 0x20, @random="8cbd841e422a474284674ac288358956b8d0ebb0f2f120533dabebdf8d421b6e"}]}]}, 0x410}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001200)=@assoc_value, &(0x7f0000001240)=0x8) 1.341226647s ago: executing program 4 (id=1999): socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x6, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8084}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4, 0x0, 0xa6b9}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x4}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x2}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) 1.304030805s ago: executing program 2 (id=2000): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x488, 0x30, 0xffff, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x2000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14880, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x20000000, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x5c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x3, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.243161022s ago: executing program 3 (id=2001): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x43, 0x0, &(0x7f0000000100)) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x2, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20008010) 1.105755746s ago: executing program 0 (id=2002): getpeername$llc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, 0x0, 0x810) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x804) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r6) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r7, 0x72b}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x200, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af3b5bc}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5e35}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044011}, 0x40000) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r11, 0x0, 0xcb, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x1, @vifc_lcl_addr=@multicast1, @multicast1}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x1, 0x9}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.105008378s ago: executing program 4 (id=2003): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x2) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x40000001) syz_emit_ethernet(0x305, &(0x7f0000000080)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "c3b8f4", 0x2cf, 0x1, 0x0, @private0, @private1, {[@hopopts={0x6, 0x26, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x43}}, @calipso={0x7, 0x50, {0x3, 0x12, 0x9, 0xa2c4, [0xc, 0x6, 0x5, 0x6, 0x1000, 0x4, 0x18, 0x2, 0x7b]}}, @jumbo={0xc2, 0x4, 0x1}, @ra={0x5, 0x2, 0x7}, @pad1, @generic={0xfb, 0xbd, "f4e94f37e7a622b32c3b9e7c1ec26d5816b7a24978206890c09de097e9105e8c2eaec3480ce0999120046e1c2bd7d55a25bdafd6a1f497f8f0623bd1debb38251159ce040aee545d95e75809139b6eb6ee8b19e9c9bac88c7d95f1c2fb0529f6a90453137f1aa55e614e4d85ba10fe7ff6db24581393ae94f7bcc0527ca7c6a041a2ddd442ceb482ee145aa446251072126b127170bbda69a89d45259343ee4f04128ce12b8f23a8c6329c727b8cf8e972f25027de6042d0ca40288c40"}]}, @fragment={0xc, 0x0, 0x48, 0x0, 0x0, 0x14, 0x67}, @routing={0x87, 0xc, 0x0, 0x67, 0x0, [@private1, @mcast1, @dev={0xfe, 0x80, '\x00', 0x29}, @private2, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @fragment={0x60, 0x0, 0x7, 0x0, 0x0, 0xa, 0x65}, @fragment={0xf71d69121b3a1296, 0x0, 0xd, 0x1, 0x0, 0x0, 0x64}, @routing={0x2f, 0x14, 0x1, 0x44, 0x0, [@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @remote, @empty, @local, @empty, @loopback, @mcast2]}], "8ab49339f71af53e4a1a3f5d32d1ad685d25e87154da67422ef62d7d83181f687a945a0c6ed0b9ff93d13232ed453bfca88a32a7fbe53d16cadc3e9f432569f4a818cf4309cefafc0715dbe6d794fad1c4fa6a063c9bdf4b68a08f3988838daf60dc4e3631b981f03b8bf9f6ff49f7"}}}}}, 0x0) 1.030875714s ago: executing program 2 (id=2004): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffc}) ioctl(r3, 0x8b22, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004b00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x90) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x200448c4) 991.204176ms ago: executing program 1 (id=2005): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6b3a6e7e216920a8}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/134, 0x86}, {&(0x7f00000001c0)=""/17, 0x31}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x2}], 0x24, 0x2000, &(0x7f0000000300)={0x77359400}) (async) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r8, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 889.864988ms ago: executing program 4 (id=2006): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1a, 0x0, &(0x7f0000001100)=0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x83, 0x80000001, @vifc_lcl_ifindex, @multicast2}, 0x10) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000004a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x40091}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000080)=@ipv4_newaddr={0x3c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x4, 0x2, @dev}, @IFA_BROADCAST={0x8, 0xb, @loopback}, @IFA_CACHEINFO={0x14}]}, 0x3c}}, 0x0) 873.686282ms ago: executing program 3 (id=2007): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000609983ff35cb3600b44212a165d8e63c5d690dce958c52afd5f66a989e04253ae70596455cb7ddd58accb789c4c738669e16ebc54d4f71a019b9841176a3f745f6ae25018f2f7200d9e99d892ac1914b00"/102, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468315f746f5f6272696467650008001c00", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB='7\x00'/12, @ANYRES32, @ANYBLOB="561aec4bb007594a6aa360c969c01791575a85858f798e6a7f", @ANYRES64=0x0], 0x20) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001000000000000"], 0xc4}}, 0x4c050) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0xfdef) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04000000", @ANYRES16=r7, @ANYBLOB="000326bd7000fcdbdf25590000000c009900ff07000005000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000090}, 0x4001) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYBLOB="7000000016394dcfa6755b58c5e18ee007d0d9b552bc8fe01865e5cc54a6f16a8fec6af677fa70a69122ef8d546e813b4af515dfcce23212f6a17d97c14ffab42d67e68a453bdcad44a85312367abe3e3f55f4abd8862603804678c9cc15476d808c6f999dcecef7e056fd0e1dd70cb6a1b45e4fad061a96cc70a8e888ae0e2e82978c3928ce99aff172ec306ec6945f71eb2d298be11b9526f0ddd617e907eeaa2ead8df0b4625a3a89efd5395fd9f0409a628b71286df91368d65e99db1523480b6b268e770bafaa878cc682e630f98206e772775a395e6a0267e5", @ANYRES16=r0, @ANYBLOB="08000000000000000000010000001400080076657468305f746f5f6261746164760008000900000000000500130004000000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffe00000020500220000000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x702, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000005c0)={'ip6tnl0\x00', @broadcast}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) unshare(0x28000400) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r10, 0x0, 0x0) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newqdisc={0x108, 0x24, 0x4, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xfffe}}}, @TCA_STAB={0xd0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x5531, 0x3, 0x0, 0x7, 0x4, 0x6}}, {0x10, 0x2, [0xca05, 0x4, 0x3, 0x0, 0x2, 0xfffd]}}, {{0x1c, 0x1, {0x7, 0x6, 0x8, 0x0, 0x2, 0xc, 0x401, 0x6}}, {0x10, 0x2, [0x6, 0x3, 0x6, 0x6, 0x1, 0x6]}}, {{0x1c, 0x1, {0x3, 0x0, 0x5, 0x9, 0x0, 0x1, 0x7, 0x1}}, {0x6, 0x2, [0x38a]}}, {{0x1c, 0x1, {0x5, 0x0, 0x8, 0xfffffffe, 0x1, 0x655, 0x10001, 0x3}}, {0xa, 0x2, [0x101, 0x6a, 0x9]}}, {{0x1c, 0x1, {0xba, 0x2, 0x0, 0x6, 0x2, 0x7, 0x1000004, 0x3}}, {0xa, 0x2, [0x9, 0x4, 0x3]}}]}]}, 0x108}}, 0x4000) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002980)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0xc, 0x2, 0x8000}, {0x9, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000014}, 0x200e40c0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@getchain={0x5c, 0x66, 0x2, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x2, 0x5}, {0x1, 0xa}, {0x3, 0x10}}, [{0x8, 0xb, 0xd}, {0x8, 0xb, 0xf}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xfffffffd}, {0x8, 0xb, 0xe8e}, {0x8, 0xb, 0xff}, {0x8, 0xb, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 241.345399ms ago: executing program 2 (id=2008): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c0007800800064000000002caaee00e74f6f300d62d83d3969ee27865a7c55059ea"], 0x58}}, 0x8000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x3}, 0x8) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 186.404756ms ago: executing program 1 (id=2009): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x1407, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x65a}, &(0x7f00000001c0)=0x8) (async) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000200)=0x1, 0x4) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x800}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4a040}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x1, 0xe, @udp='udp:syz2\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008015) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000480)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000004c0)=0x18) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r5, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000000}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x2466}]}, 0x58}, 0x1, 0x0, 0x0, 0x34fed19a447bc2ba}, 0x8800) (async) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r4) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x60, r6, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '!%[+*@\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, '%!+\\\'-\xf0\x00'}, @NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'memory.events\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x60}}, 0x4000004) (async) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000840), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, r7, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000494}, 0x20018090) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000980)=0x36) (async) r8 = openat$cgroup_ro(r1, &(0x7f00000009c0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r8, 0x4004f50d, &(0x7f0000000a00)=0x1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000f00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000a80)={0x41c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x56}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x290}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1e9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff7ae}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x41d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xdd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x78e776ce}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xccb2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}]}, @TIPC_NLA_NODE={0x22c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x8, 0x3, "320613de"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_NODE_ID={0x31, 0x3, "449fb686044d9323691f9da314cb1a4b4d19c8b3faaf1fb090039a0586f6d324edee14ed1d7c6d677735301391"}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "3226d42f7a98a6937646a1e12a962f9f8bf39ee0881941b87b2cb7b3c2a663283631"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x435a8cbe}, @TIPC_NLA_NODE_ID={0x86, 0x3, "a133cad4d94d82825122dad492f4515d8ce33a1d20446e65564e118e90bf284caa65795e89ff053a2f17399b406e498e4d6bc99fd1ad8dbbeb79253dbbee94b79c0ad850a770562977438c975e998073e904dab7fc57487530a04b591651cc63d0090b5ff863496ac9f927968cf0ef01d9765615fe088df7afbca25d1058e98808da"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x103, 0x3, "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"}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa86}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x41}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}]}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x729}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x41c}, 0x1, 0x0, 0x0, 0x40}, 0x48004) (async) sendmsg$nl_route(r8, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)=@ipv4_delrule={0x64, 0x21, 0x400, 0x70bd27, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x4, 0x1, 0x0, 0x0, 0x3, 0x8}, [@FRA_FLOW={0x8, 0xb, 0x4}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'pimreg1\x00'}, @FRA_SRC={0x8, 0x2, @broadcast}, @FRA_DST={0x8, 0x1, @private=0xa010102}, @FRA_DST={0x8, 0x1, @private=0xa010101}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7a3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0xc010) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000010c0), r4) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f00000011c0)={&(0x7f0000001080), 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x54, r9, 0x2, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r1) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x20, r10, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x804) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000001340), r4) (async) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x1c, r10, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8010) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000014c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x54, r10, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@crypto_settings=[@NL80211_ATTR_PMK={0x17, 0xfe, "eacf5f33d8274b80d4c236b8d4c64acf1e2dc0"}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac04, 0xfac00, 0xfac0d]}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x22eb}]]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 185.495765ms ago: executing program 0 (id=2010): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000620188000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x11, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80040000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @empty, @broadcast}, &(0x7f00000001c0)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @loopback, @multicast1}, &(0x7f0000000280)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'gretap0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x700, 0x10, 0x7, 0x7, {{0xf, 0x4, 0x1, 0x3a, 0x3c, 0x64, 0x0, 0x9, 0x2f, 0x0, @broadcast, @multicast1, {[@lsrr={0x83, 0x17, 0xe4, [@multicast2, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x3d}, @broadcast]}, @rr={0x7, 0xf, 0x7e, [@remote, @empty, @local]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x40, 0x700, 0xb0, 0x8, {{0x1b, 0x4, 0x0, 0x3a, 0x6c, 0x67, 0x0, 0x7, 0x2f, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x24, 0x4d, 0x1, 0x9, [{@loopback, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x8}, {@local}, {@local, 0x6}]}, @timestamp={0x44, 0x2c, 0x34, 0x0, 0xc, [0x3, 0xc, 0x7f, 0xffffffff, 0x7fff, 0xfffffffb, 0x56d, 0x4, 0x3, 0xfffffff3]}, @lsrr={0x83, 0x7, 0x75, [@remote]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x128, r0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 166.50483ms ago: executing program 4 (id=2011): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117500000006008510000002000000850000000500000095000000000000009500a504e6000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x6}, 0x94) 84.370489ms ago: executing program 1 (id=2012): r0 = socket(0x840000000002, 0x3, 0xff) shutdown(r0, 0x1) (async, rerun: 64) sendmmsg$inet(r0, &(0x7f0000001640)=[{{&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f00000000c0)="a9050000000074640006000000003552bde5c064", 0x14}], 0x1}}], 0x1, 0x0) (rerun: 64) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x999f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x801) (async, rerun: 64) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000ac0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x20, 0x0, 0x2c}, {@in6=@local, 0x0, 0x6c}, @in6=@remote, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x8000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff000000bfa30000000000000703000018feffff720aa9fff8ffffff71a4f0ff0000000072030200000000131d400500000000004704000001ed00006b030000000000001d440000000000007a0a00fe00ffffffc303000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7109000000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e50002a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de5c028d6112a0c2d21b2dc98814106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c53218294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb118888876b617398d00a7526103ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e08b7ab6cd9c65ba55f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddc42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293d364b9effa9a9406ac2683e231d4774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479517dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a79e59e1712c8c546768e5722da19fcdb4c2890cda1f96b952511e3a49d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767987d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c32040098e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1be62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070f66b2b388f0f744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028a3a981463f25c068d4410dad0c74e2a9478fa3be18a1a27bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab07001b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe293308b2a146f12a4c205235924cee765d94b1cc06641247c773ab8d1abbeb03ea68"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) 6.524641ms ago: executing program 4 (id=2013): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x81, 0x7, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x65, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101}}}}) r3 = socket$netlink(0x10, 0x3, 0x12) bind$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) listen(r0, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r3], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x800, 0x1, 0x0, 0xd, 0x80, 0x80}, 0x20) ppoll(&(0x7f0000000280)=[{r0, 0x601}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) r7 = socket$phonet(0x23, 0x2, 0x1) r8 = socket$netlink(0x10, 0x3, 0xc) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0}, &(0x7f0000002880)=0xc) sendmsg$netlink(r8, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000980)={0x10, 0x232, 0x4, 0x70bd25, 0x25dfdbfd}, 0x10}], 0x1, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0, r9}}}], 0x20, 0x50}, 0x40880) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r9}) 5.842792ms ago: executing program 3 (id=2014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x340, r3, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffff7, 0x63}}}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="676ec471b1ec256de089b95c661a3f0619221912a08bb0fa928c24f877da2c31"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xca}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "94d0d67981509ce2"}]}, @NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "27cdc466307b91d0"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9bc7f396dd34b7d7d80e85e4f8991581"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d32327cb9763ceac"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d76f7abc94891325"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="4bf5c6f4c4d276ae85c0a91d10b85dda5601733b6797cfff"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6c3580ba169dab8f9493002f7958b75c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3bff43829437a9ca6c7c3b0e62ab8514"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="032ea52ac8c285af3b799cea6404951e5b166d699002fe77"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="3725868cbaac31a2229df756ad26eb8a2686127169f369ff"}]}, @NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "38b31dcbd259216d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7cf4ec98b884093e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3803b8ddf5e1be924b9feb2bb1ade3ae82c02ba1b3ffa15debca4f2e2dfc4be5"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="18e7eba0ec1207a8e35deab1f33eaa23b821f86db7192b148296e6016da35971"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}]}, @NL80211_ATTR_REKEY_DATA={0x10c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="e34737d8da9c745bae42e5000562e2038db12519389467afa93378134e743880"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5233915dd5fa895a1da6375a162b7afecda041e932447930644041f718e62f0f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="bed9b3cd1968bb8bd42b8647dfe99f92"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9ea741a49bed8c8ffa2e6d56546415d461fb087fe5561f1f6ffbe7dec9cfbcab"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="db5440d2daa484266202d38d2de11105980dc39bdfcb97b6"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="98d62d70afdde40e5270466126dda0a9"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f616ab7b6890e3fe0476cc36fd65a9c61712efc3d0ac4ab9"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="840ecff16cf5e56c79125b394ced6b820bbb45c6782c9a91"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ce8804f281c92f7c738b350afb01680b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "269ae9899593f428"}]}, @NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="8200e14c4bace56b159bf6d550e49bfc2c8ddaffbf77bd51a18f1ecf31d87ba9"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7c2d82d33a3f94c96bc5f8501fd55b009f9646d83d2e6d71"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="40e1ffc78e3eb1018dfd2f82509c0a6a"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="942833bfd99ea0e96302ec25f5773ea4d670c3e03dcf6c63902c58b87b9d5f75"}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x800}, 0x40801) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x34, r7, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DREG={0x8}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 0s ago: executing program 0 (id=2015): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000040000000400000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r2, &(0x7f0000000a40)=[{&(0x7f00000007c0)='M', 0x1}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.60' (ED25519) to the list of known hosts. [ 84.523274][ T5819] cgroup: Unknown subsys name 'net' [ 84.692163][ T5819] cgroup: Unknown subsys name 'cpuset' [ 84.702343][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.426497][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.857364][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.877982][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.885591][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.893644][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.901181][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.910111][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.919041][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.926586][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.934330][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.943327][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.951284][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.958449][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.965266][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.968928][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.979790][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.988082][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.990903][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.000746][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.012478][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.019259][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.027157][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.027971][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.042538][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.050098][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.056752][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.661470][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 89.757470][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 89.822984][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 90.045667][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 90.079544][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.086779][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.094433][ T5839] bridge_slave_0: entered allmulticast mode [ 90.101927][ T5839] bridge_slave_0: entered promiscuous mode [ 90.121484][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 90.144995][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.152519][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.159782][ T5839] bridge_slave_1: entered allmulticast mode [ 90.167044][ T5839] bridge_slave_1: entered promiscuous mode [ 90.200852][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.208062][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.215656][ T5831] bridge_slave_0: entered allmulticast mode [ 90.223061][ T5831] bridge_slave_0: entered promiscuous mode [ 90.275935][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.283345][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.291078][ T5831] bridge_slave_1: entered allmulticast mode [ 90.299463][ T5831] bridge_slave_1: entered promiscuous mode [ 90.335510][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.342745][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.350578][ T5830] bridge_slave_0: entered allmulticast mode [ 90.357919][ T5830] bridge_slave_0: entered promiscuous mode [ 90.398091][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.407551][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.415666][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.422953][ T5830] bridge_slave_1: entered allmulticast mode [ 90.430409][ T5830] bridge_slave_1: entered promiscuous mode [ 90.464034][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.475492][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.522475][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.589081][ T5839] team0: Port device team_slave_0 added [ 90.597556][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.646550][ T5839] team0: Port device team_slave_1 added [ 90.656575][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.666655][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.675014][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.682426][ T5834] bridge_slave_0: entered allmulticast mode [ 90.690682][ T5834] bridge_slave_0: entered promiscuous mode [ 90.713037][ T5831] team0: Port device team_slave_0 added [ 90.755797][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.763369][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.771034][ T5834] bridge_slave_1: entered allmulticast mode [ 90.778395][ T5834] bridge_slave_1: entered promiscuous mode [ 90.785416][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.792644][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.800285][ T5832] bridge_slave_0: entered allmulticast mode [ 90.807504][ T5832] bridge_slave_0: entered promiscuous mode [ 90.816890][ T5831] team0: Port device team_slave_1 added [ 90.838940][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.845902][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.872020][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.909087][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.916206][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.923697][ T5832] bridge_slave_1: entered allmulticast mode [ 90.930950][ T5832] bridge_slave_1: entered promiscuous mode [ 90.951004][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.957991][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.984361][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.997820][ T5830] team0: Port device team_slave_0 added [ 91.028145][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.035175][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.061181][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.082404][ T5830] team0: Port device team_slave_1 added [ 91.090763][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.113804][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.121155][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.147603][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.150751][ T52] Bluetooth: hci4: command tx timeout [ 91.159565][ T5152] Bluetooth: hci3: command tx timeout [ 91.165915][ T5846] Bluetooth: hci0: command tx timeout [ 91.169936][ T5837] Bluetooth: hci1: command tx timeout [ 91.180575][ T5850] Bluetooth: hci2: command tx timeout [ 91.199952][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.211587][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.229528][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.303903][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.311170][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.337669][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.377650][ T5832] team0: Port device team_slave_0 added [ 91.384207][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.392149][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.418926][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.443525][ T5834] team0: Port device team_slave_0 added [ 91.454105][ T5839] hsr_slave_0: entered promiscuous mode [ 91.461099][ T5839] hsr_slave_1: entered promiscuous mode [ 91.469891][ T5832] team0: Port device team_slave_1 added [ 91.496649][ T5834] team0: Port device team_slave_1 added [ 91.521740][ T5831] hsr_slave_0: entered promiscuous mode [ 91.528189][ T5831] hsr_slave_1: entered promiscuous mode [ 91.534835][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 91.541112][ T5831] Cannot create hsr debugfs directory [ 91.572926][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.580018][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.606750][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.664436][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.671796][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.698418][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.711296][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.718588][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.744924][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.794563][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.802005][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.828390][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.857599][ T5830] hsr_slave_0: entered promiscuous mode [ 91.864238][ T5830] hsr_slave_1: entered promiscuous mode [ 91.870713][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 91.876605][ T5830] Cannot create hsr debugfs directory [ 91.952019][ T9] cfg80211: failed to load regulatory.db [ 92.076275][ T5832] hsr_slave_0: entered promiscuous mode [ 92.082831][ T5832] hsr_slave_1: entered promiscuous mode [ 92.089798][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 92.095544][ T5832] Cannot create hsr debugfs directory [ 92.144510][ T5834] hsr_slave_0: entered promiscuous mode [ 92.151056][ T5834] hsr_slave_1: entered promiscuous mode [ 92.157209][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 92.163626][ T5834] Cannot create hsr debugfs directory [ 92.538088][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.567941][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.580483][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.600062][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.663527][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.680632][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.706206][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.719541][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.793024][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.810828][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.822529][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.837463][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.938834][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.950906][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.962770][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.996725][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.063440][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.115426][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.127762][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.140516][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.167777][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.201477][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.229322][ T5850] Bluetooth: hci1: command tx timeout [ 93.229382][ T5846] Bluetooth: hci2: command tx timeout [ 93.234968][ T5837] Bluetooth: hci4: command tx timeout [ 93.242110][ T52] Bluetooth: hci3: command tx timeout [ 93.246436][ T5152] Bluetooth: hci0: command tx timeout [ 93.271189][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.280955][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.288165][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.304155][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.311779][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.372712][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.424340][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.437669][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.445004][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.454757][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.461948][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.555038][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.600441][ T636] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.607713][ T636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.663999][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.692130][ T636] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.699353][ T636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.755732][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.813888][ T636] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.821115][ T636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.837514][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.871821][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.879039][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.906430][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.989315][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.033735][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.040957][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.091722][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.098952][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.126251][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.206015][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.412714][ T5839] veth0_vlan: entered promiscuous mode [ 94.481719][ T5839] veth1_vlan: entered promiscuous mode [ 94.520489][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.676409][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.712449][ T5839] veth0_macvtap: entered promiscuous mode [ 94.741955][ T5839] veth1_macvtap: entered promiscuous mode [ 94.789042][ T5830] veth0_vlan: entered promiscuous mode [ 94.803887][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.835526][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.845576][ T5830] veth1_vlan: entered promiscuous mode [ 94.880826][ T5831] veth0_vlan: entered promiscuous mode [ 94.890874][ T3545] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.900539][ T3545] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.921816][ T3545] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.930995][ T3545] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.952166][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.978151][ T5831] veth1_vlan: entered promiscuous mode [ 94.999694][ T5834] veth0_vlan: entered promiscuous mode [ 95.054080][ T5834] veth1_vlan: entered promiscuous mode [ 95.082460][ T5831] veth0_macvtap: entered promiscuous mode [ 95.107209][ T5830] veth0_macvtap: entered promiscuous mode [ 95.138179][ T5831] veth1_macvtap: entered promiscuous mode [ 95.152151][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.171355][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.172499][ T5830] veth1_macvtap: entered promiscuous mode [ 95.245318][ T5834] veth0_macvtap: entered promiscuous mode [ 95.262787][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.270844][ T3981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.279635][ T3981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.287939][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.309666][ T52] Bluetooth: hci3: command tx timeout [ 95.310242][ T5152] Bluetooth: hci4: command tx timeout [ 95.315582][ T5850] Bluetooth: hci1: command tx timeout [ 95.316598][ T5846] Bluetooth: hci0: command tx timeout [ 95.329441][ T5837] Bluetooth: hci2: command tx timeout [ 95.345391][ T5834] veth1_macvtap: entered promiscuous mode [ 95.364026][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.385487][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.395302][ T5832] veth0_vlan: entered promiscuous mode [ 95.417160][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.437068][ T3981] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.485659][ T3981] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.524087][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.533903][ T3981] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.554210][ T5832] veth1_vlan: entered promiscuous mode [ 95.567693][ T3981] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.605660][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.644649][ T3981] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.672369][ T3981] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.685303][ T3981] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.705897][ T3981] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.725312][ T5954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6'. [ 95.747568][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.815688][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.829333][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.862051][ T5832] veth0_macvtap: entered promiscuous mode [ 95.864424][ T5022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.876248][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.898514][ T5022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.964661][ T5832] veth1_macvtap: entered promiscuous mode [ 96.021053][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.025122][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.050838][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.060427][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.152998][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.193243][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.217057][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.278525][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.286403][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.330458][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.398603][ T5970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 96.432217][ T5022] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.469196][ T3981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.482591][ T5022] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.488371][ T3981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.508600][ T5022] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.517364][ T5022] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.657915][ T5973] sctp: [Deprecated]: syz.4.5 (pid 5973) Use of int in max_burst socket option. [ 96.657915][ T5973] Use struct sctp_assoc_value instead [ 96.717049][ T5973] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 96.967913][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.988107][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.026777][ T5987] netlink: 'syz.2.11': attribute type 10 has an invalid length. [ 97.080261][ T5993] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 97.110817][ T5993] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2'. [ 97.123756][ T5987] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.147723][ T5987] bond0: (slave team0): Enslaving as an active interface with an up link [ 97.201115][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.215674][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 97.242696][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.263957][ T5999] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12'. [ 97.389577][ T5837] Bluetooth: hci2: command tx timeout [ 97.395040][ T5837] Bluetooth: hci0: command tx timeout [ 97.396014][ T52] Bluetooth: hci1: command tx timeout [ 97.402272][ T5152] Bluetooth: hci4: command tx timeout [ 97.405914][ T5846] Bluetooth: hci3: command tx timeout [ 97.633017][ T6002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.663001][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 97.715634][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 97.727364][ T6005] syz.4.16 uses obsolete (PF_INET,SOCK_PACKET) [ 97.737585][ T6005] syzkaller1: entered promiscuous mode [ 97.743685][ T6007] netlink: 'syz.2.15': attribute type 1 has an invalid length. [ 97.765091][ T6005] syzkaller1: entered allmulticast mode [ 97.775663][ T6011] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.804634][ T6007] netlink: 224 bytes leftover after parsing attributes in process `syz.2.15'. [ 97.931356][ T6020] Zero length message leads to an empty skb [ 97.974544][ T6022] warning: `syz.1.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.097120][ T6024] nbd0: detected capacity change from 0 to 63 [ 98.129871][ T5846] block nbd0: Receive control failed (result -32) [ 98.172441][ T5849] block nbd0: Dead connection, failed to find a fallback [ 98.235244][ T6037] netlink: 'syz.4.20': attribute type 1 has an invalid length. [ 98.244942][ T6037] netlink: 'syz.4.20': attribute type 2 has an invalid length. [ 98.272882][ T6031] netlink: 'syz.4.20': attribute type 1 has an invalid length. [ 98.292077][ T6031] netlink: 'syz.4.20': attribute type 2 has an invalid length. [ 99.601217][ T6097] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.620558][ T6156] netlink: 'syz.4.51': attribute type 1 has an invalid length. [ 101.479252][ T6202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.567644][ T6202] bond0: (slave rose0): Enslaving as an active interface with an up link [ 101.652874][ T6212] __nla_validate_parse: 3 callbacks suppressed [ 101.652892][ T6212] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.59'. [ 101.816409][ T6231] 8021q: VLANs not supported on vxcan1 [ 102.209914][ T6245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.65'. [ 102.440065][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 102.451061][ T6258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.68'. [ 102.467410][ T6259] veth0_to_team: entered promiscuous mode [ 102.507499][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.68'. [ 102.828127][ T6254] delete_channel: no stack [ 102.849053][ T6270] tipc: Enabling of bearer rejected, failed to enable media [ 102.868700][ T6269] +: renamed from syzkaller0 [ 103.166553][ T6285] netlink: 'syz.0.74': attribute type 11 has an invalid length. [ 103.216569][ T6285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.74'. [ 103.278918][ T6285] syzkaller1: entered promiscuous mode [ 103.284447][ T6285] syzkaller1: entered allmulticast mode [ 103.408023][ T6302] netlink: 84 bytes leftover after parsing attributes in process `syz.4.78'. [ 103.442622][ T6300] macvtap1: entered promiscuous mode [ 103.459865][ T6300] macvtap1: entered allmulticast mode [ 103.469197][ T6300] veth1_vlan: entered allmulticast mode [ 103.523091][ T6303] macvtap2: entered promiscuous mode [ 103.556993][ T6303] macvtap2: entered allmulticast mode [ 103.777653][ T6307] tipc: Started in network mode [ 103.825512][ T6307] tipc: Node identity , cluster identity 4711 [ 103.834072][ T6320] netlink: 'syz.0.82': attribute type 21 has an invalid length. [ 103.842427][ T6320] netlink: 128 bytes leftover after parsing attributes in process `syz.0.82'. [ 103.848551][ T6307] tipc: Failed to obtain node identity [ 103.862435][ T6319] xt_hashlimit: size too large, truncated to 1048576 [ 103.893402][ T6307] tipc: Enabling of bearer rejected, failed to enable media [ 103.915003][ T6320] netlink: 3 bytes leftover after parsing attributes in process `syz.0.82'. [ 104.269083][ T6336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.85'. [ 104.677529][ T6351] bridge_slave_1: left allmulticast mode [ 104.712900][ T6351] bridge_slave_1: left promiscuous mode [ 104.736273][ T6351] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.811107][ T6351] bridge_slave_0: left allmulticast mode [ 104.818166][ T6351] bridge_slave_0: left promiscuous mode [ 104.831711][ T6351] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.524177][ T6373] team0 (unregistering): Port device team_slave_0 removed [ 105.537039][ T6373] team0 (unregistering): Port device team_slave_1 removed [ 105.593825][ T6376] syzkaller0: entered promiscuous mode [ 105.600985][ T6376] syzkaller0: entered allmulticast mode [ 105.875199][ T6404] netlink: 'syz.3.97': attribute type 3 has an invalid length. [ 106.805733][ T6416] geneve2: entered promiscuous mode [ 107.323802][ T6449] netlink: 'syz.4.108': attribute type 13 has an invalid length. [ 107.367355][ T6451] netlink: 'syz.0.109': attribute type 4 has an invalid length. [ 107.415501][ T6454] netlink: 'syz.0.109': attribute type 4 has an invalid length. [ 107.434617][ T6455] __nla_validate_parse: 3 callbacks suppressed [ 107.434638][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.110'. [ 107.637944][ T6457] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 107.657492][ T6457] syzkaller0: entered promiscuous mode [ 107.663638][ T6457] syzkaller0: entered allmulticast mode [ 107.745685][ T6449] tipc: Started in network mode [ 107.751213][ T6449] tipc: Node identity 9683959b0689, cluster identity 4711 [ 107.759705][ T6449] tipc: Enabled bearer , priority 0 [ 107.793610][ T6448] tipc: Resetting bearer [ 107.826659][ T6448] tipc: Disabling bearer [ 107.930288][ T6473] netlink: 32 bytes leftover after parsing attributes in process `syz.3.114'. [ 108.058868][ T6473] netlink: 32 bytes leftover after parsing attributes in process `syz.3.114'. [ 108.882322][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.127'. [ 108.891392][ T6520] netlink: 24 bytes leftover after parsing attributes in process `syz.4.127'. [ 108.905337][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.127'. [ 108.932128][ T6520] netlink: 24 bytes leftover after parsing attributes in process `syz.4.127'. [ 108.947951][ T6522] netlink: 20 bytes leftover after parsing attributes in process `syz.3.129'. [ 109.021027][ T6525] tipc: Started in network mode [ 109.026027][ T6525] tipc: Node identity 1e1e033b2114, cluster identity 4711 [ 109.034794][ T6525] tipc: Enabled bearer , priority 0 [ 109.045225][ T6525] syzkaller0: entered promiscuous mode [ 109.057207][ T6525] syzkaller0: entered allmulticast mode [ 109.136288][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.132'. [ 109.154363][ T6525] tipc: Resetting bearer [ 109.166851][ T6524] tipc: Resetting bearer [ 109.209184][ T6524] tipc: Disabling bearer [ 109.404506][ T6541] netlink: 36 bytes leftover after parsing attributes in process `syz.0.135'. [ 110.243601][ T6549] infiniband syz1: set down [ 110.248915][ T6549] infiniband syz1: added ipvlan0 [ 110.373969][ T6549] RDS/IB: syz1: added [ 110.394199][ T6549] smc: adding ib device syz1 with port count 1 [ 110.408865][ T6549] smc: ib device syz1 port 1 has no pnetid [ 110.707608][ T6597] IPv6: addrconf: prefix option has invalid lifetime [ 110.933300][ T6609] netlink: 'syz.2.156': attribute type 10 has an invalid length. [ 110.989224][ T6612] netlink: 'syz.0.157': attribute type 1 has an invalid length. [ 111.054196][ T6609] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 111.169656][ T6612] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.361205][ T6623] netlink: 'syz.3.160': attribute type 12 has an invalid length. [ 111.402461][ T6623] netlink: 'syz.3.160': attribute type 12 has an invalid length. [ 111.444204][ T6623] netlink: 'syz.3.160': attribute type 12 has an invalid length. [ 111.463911][ T6623] netlink: 'syz.3.160': attribute type 12 has an invalid length. [ 111.473577][ T6625] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 111.501493][ T6623] netlink: 'syz.3.160': attribute type 12 has an invalid length. [ 111.559206][ T6623] netlink: 'syz.3.160': attribute type 12 has an invalid length. [ 111.580199][ T6623] netlink: 'syz.3.160': attribute type 12 has an invalid length. [ 111.591209][ T6623] netlink: 'syz.3.160': attribute type 12 has an invalid length. [ 111.910707][ T6638] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 112.400529][ T3545] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.434533][ T3545] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.456989][ T3545] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.491278][ T6664] Bluetooth: MGMT ver 1.23 [ 112.496766][ T3545] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.774459][ T6679] openvswitch: netlink: IP tunnel dst address not specified [ 113.081558][ T6683] bond1: (slave ip6gretap1): making interface the new active one [ 113.110363][ T6683] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 113.495265][ T6707] __nla_validate_parse: 47 callbacks suppressed [ 113.495285][ T6707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.183'. [ 113.949110][ T37] wlan1: Trigger new scan to find an IBSS to join [ 114.464682][ T6754] veth0: entered promiscuous mode [ 114.527775][ T6753] veth0: left promiscuous mode [ 114.691125][ T6762] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.699607][ T6762] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.929784][ T6774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.200'. [ 115.267270][ T6792] netlink: 81 bytes leftover after parsing attributes in process `syz.2.203'. [ 115.328068][ T6794] netlink: 116 bytes leftover after parsing attributes in process `syz.0.205'. [ 115.677871][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.212'. [ 115.750168][ T6816] netlink: 44 bytes leftover after parsing attributes in process `syz.3.210'. [ 115.778842][ T6815] netlink: 44 bytes leftover after parsing attributes in process `syz.3.210'. [ 115.879280][ T6811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.902016][ T6811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.912727][ T6811] bond0 (unregistering): Released all slaves [ 115.935677][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 115.960391][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'. [ 115.980363][ T6823] delete_channel: no stack [ 116.073951][ T6827] validate_nla: 30 callbacks suppressed [ 116.073972][ T6827] netlink: 'syz.0.213': attribute type 6 has an invalid length. [ 116.123039][ T6827] netlink: 64 bytes leftover after parsing attributes in process `syz.0.213'. [ 116.259699][ T6829] team0: Caught tx_queue_len zero misconfig [ 116.266367][ T6839] Bluetooth: MGMT ver 1.23 [ 116.803522][ T6870] openvswitch: netlink: Flow actions attr not present in new flow. [ 116.862516][ T6874] netlink: 'syz.1.228': attribute type 2 has an invalid length. [ 116.902237][ T6874] : entered promiscuous mode [ 116.908591][ T37] wlan1: Trigger new scan to find an IBSS to join [ 117.099068][ T6878] block nbd1: server does not support multiple connections per device. [ 117.133442][ T6878] block nbd1: shutting down sockets [ 117.208547][ T6893] netlink: 'syz.1.234': attribute type 1 has an invalid length. [ 117.349301][ T6893] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.533719][ T6892] veth3: entered promiscuous mode [ 117.568866][ T6892] bond2: (slave veth3): Enslaving as an active interface with an up link [ 117.719852][ T6916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.022894][ T6904] veth3: entered allmulticast mode [ 119.239495][ T6936] __nla_validate_parse: 7 callbacks suppressed [ 119.239515][ T6936] netlink: 48 bytes leftover after parsing attributes in process `syz.1.246'. [ 119.564104][ T6965] SET target dimension over the limit! [ 119.666085][ T6969] vxcan1: tx address claim with different name [ 119.743720][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.257'. [ 119.765443][ T6974] tipc: Enabling not permitted [ 119.779913][ T6974] tipc: Enabling of bearer rejected, failed to enable media [ 119.813734][ T6980] netlink: 'syz.2.256': attribute type 1 has an invalid length. [ 119.937349][ T6980] bond2: entered promiscuous mode [ 119.944470][ T6980] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.966471][ T76] wlan1: Trigger new scan to find an IBSS to join [ 119.994228][ T6984] bond2: (slave bridge1): making interface the new active one [ 120.002081][ T6984] bridge1: entered promiscuous mode [ 120.008855][ T6984] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 120.237397][ T6996] netlink: 10 bytes leftover after parsing attributes in process `syz.0.262'. [ 120.325665][ T6999] netlink: 24 bytes leftover after parsing attributes in process `syz.4.264'. [ 120.549394][ T7011] netlink: 44 bytes leftover after parsing attributes in process `syz.3.268'. [ 120.609005][ T7011] netlink: 43 bytes leftover after parsing attributes in process `syz.3.268'. [ 120.665795][ T7011] netlink: 'syz.3.268': attribute type 6 has an invalid length. [ 120.691713][ T7019] netlink: 'syz.1.270': attribute type 9 has an invalid length. [ 120.725904][ T7011] netlink: 'syz.3.268': attribute type 5 has an invalid length. [ 120.757168][ T7023] netlink: 340 bytes leftover after parsing attributes in process `syz.0.271'. [ 120.787092][ T7025] netlink: 'syz.1.270': attribute type 9 has an invalid length. [ 120.798259][ T7011] netlink: 43 bytes leftover after parsing attributes in process `syz.3.268'. [ 120.947286][ T13] wlan1: Creating new IBSS network, BSSID 06:b7:ac:6b:5e:1b [ 121.455688][ T7056] netlink: 44 bytes leftover after parsing attributes in process `syz.0.277'. [ 121.499910][ T7062] xt_hashlimit: max too large, truncated to 1048576 [ 121.823428][ T7080] netlink: 'syz.0.281': attribute type 83 has an invalid length. [ 122.032236][ T7077] syzkaller0: entered promiscuous mode [ 122.059252][ T7077] syzkaller0: entered allmulticast mode [ 122.270513][ T7088] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.765360][ T7107] sctp: [Deprecated]: syz.1.289 (pid 7107) Use of int in maxseg socket option. [ 122.765360][ T7107] Use struct sctp_assoc_value instead [ 123.276251][ T7122] netlink: 'syz.1.292': attribute type 9 has an invalid length. [ 124.157990][ T7143] x_tables: unsorted entry at hook 3 [ 124.341225][ T7145] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 124.794817][ T7171] netlink: 'syz.4.303': attribute type 1 has an invalid length. [ 124.886808][ T7178] netlink: 28 bytes leftover after parsing attributes in process `syz.4.303'. [ 125.065424][ T7171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.087263][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 125.123217][ T7191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.307'. [ 125.260466][ T7171] netlink: 44 bytes leftover after parsing attributes in process `syz.4.303'. [ 125.352803][ T7195] GUP no longer grows the stack in syz.2.308 (7195): 200000003000-20000000a000 (200000001000) [ 125.404846][ T7195] CPU: 1 UID: 0 PID: 7195 Comm: syz.2.308 Not tainted syzkaller #0 PREEMPT(full) [ 125.404877][ T7195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.404916][ T7195] Call Trace: [ 125.404925][ T7195] [ 125.404936][ T7195] dump_stack_lvl+0x189/0x250 [ 125.404981][ T7195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.405021][ T7195] ? __pfx__printk+0x10/0x10 [ 125.405050][ T7195] ? find_vma+0xe7/0x160 [ 125.405099][ T7195] __get_user_pages+0x2465/0x29f0 [ 125.405126][ T7195] ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190 [ 125.405164][ T7195] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 125.405219][ T7195] ? rcu_is_watching+0x15/0xb0 [ 125.405253][ T7195] __gup_longterm_locked+0xde4/0x1660 [ 125.405288][ T7195] ? try_grab_folio_fast+0x1bf/0x6a0 [ 125.405336][ T7195] ? gup_fast_fallback+0x1b82/0x22d0 [ 125.405369][ T7195] gup_fast_fallback+0x1d6b/0x22d0 [ 125.405435][ T7195] ? __pfx_gup_fast_fallback+0x10/0x10 [ 125.405462][ T7195] ? __mutex_lock+0x335/0x1350 [ 125.405486][ T7195] ? __cgroup_account_cputime+0xe5/0x120 [ 125.405513][ T7195] ? is_valid_gup_args+0x11f/0x200 [ 125.405545][ T7195] ? get_user_pages_fast+0x4d/0xb0 [ 125.405577][ T7195] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 125.405610][ T7195] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 125.405639][ T7195] ? wait_for_space+0x248/0x2d0 [ 125.405669][ T7195] iov_iter_get_pages2+0x5e/0xa0 [ 125.405698][ T7195] __se_sys_vmsplice+0x548/0x10d0 [ 125.405749][ T7195] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 125.405781][ T7195] ? __pfx_futex_wake+0x10/0x10 [ 125.405809][ T7195] ? restore_signal_shadow_stack+0x3b7/0x480 [ 125.405841][ T7195] ? __ia32_sys_rt_sigreturn+0x743/0x860 [ 125.405934][ T7195] ? do_syscall_64+0xbe/0xf80 [ 125.405960][ T7195] do_syscall_64+0xfa/0xf80 [ 125.405983][ T7195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.406003][ T7195] ? clear_bhb_loop+0x60/0xb0 [ 125.406028][ T7195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.406048][ T7195] RIP: 0033:0x7fb2df38f749 [ 125.406072][ T7195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.406089][ T7195] RSP: 002b:00007fb2e01b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 125.406117][ T7195] RAX: ffffffffffffffda RBX: 00007fb2df5e5fa0 RCX: 00007fb2df38f749 [ 125.406133][ T7195] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 125.406145][ T7195] RBP: 00007fb2df413f91 R08: 0000000000000000 R09: 0000000000000000 [ 125.406158][ T7195] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 125.406170][ T7195] R13: 00007fb2df5e6038 R14: 00007fb2df5e5fa0 R15: 00007ffdda4afad8 [ 125.406207][ T7195] [ 125.954018][ T7218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.248115][ T7231] netlink: 'syz.1.318': attribute type 2 has an invalid length. [ 126.259663][ T7232] openvswitch: netlink: Missing valid actions attribute. [ 126.266805][ T7232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.293575][ T7231] 9: entered promiscuous mode [ 126.300594][ T7232] openvswitch: netlink: Missing valid actions attribute. [ 126.310434][ T7232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.313199][ T7236] netlink: 'syz.0.320': attribute type 11 has an invalid length. [ 126.331069][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'. [ 126.344535][ T7232] openvswitch: netlink: Missing valid actions attribute. [ 126.354370][ T7232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.382521][ T7232] openvswitch: netlink: Missing valid actions attribute. [ 126.388444][ T7236] netlink: 228 bytes leftover after parsing attributes in process `syz.0.320'. [ 126.408629][ T7232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.459084][ T7232] openvswitch: netlink: Missing valid actions attribute. [ 126.885234][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.328'. [ 127.005769][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.333'. [ 127.319746][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.336'. [ 127.452312][ T7303] netlink: 124 bytes leftover after parsing attributes in process `syz.1.340'. [ 127.597373][ T7304] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 127.991936][ T7332] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.028003][ T7332] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.036176][ T7332] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 128.048146][ T7332] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 129.146564][ T7392] netlink: 'syz.2.367': attribute type 11 has an invalid length. [ 129.500357][ T7408] tipc: Enabled bearer , priority 0 [ 129.534897][ T7408] syzkaller0: entered promiscuous mode [ 129.571879][ T7408] syzkaller0: entered allmulticast mode [ 129.600454][ T7408] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 129.649044][ T7408] tipc: Resetting bearer [ 129.693658][ T7407] tipc: Resetting bearer [ 129.785733][ T7407] tipc: Disabling bearer [ 130.014015][ T7439] __nla_validate_parse: 5 callbacks suppressed [ 130.014033][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 130.059645][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.383'. [ 130.120655][ T7439] vlan2: entered allmulticast mode [ 130.125933][ T7439] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 130.290478][ T7461] netlink: 32 bytes leftover after parsing attributes in process `syz.2.385'. [ 130.300801][ T7460] netlink: 288 bytes leftover after parsing attributes in process `syz.2.385'. [ 130.398773][ T7465] ieee802154 phy0 wpan0: encryption failed: -90 [ 130.693922][ T7478] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 130.736438][ T7478] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 130.790511][ T7489] netlink: 20 bytes leftover after parsing attributes in process `syz.3.394'. [ 130.839629][ T7490] netlink: 'syz.4.391': attribute type 1 has an invalid length. [ 130.863364][ T7490] netlink: 224 bytes leftover after parsing attributes in process `syz.4.391'. [ 130.890979][ T7495] netlink: 'syz.1.396': attribute type 1 has an invalid length. [ 131.102853][ T7495] bond4: (slave gretap1): making interface the new active one [ 131.112982][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 131.143288][ T7495] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 131.158292][ T7507] net_ratelimit: 121 callbacks suppressed [ 131.158310][ T7507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.261889][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.398'. [ 131.329955][ T7519] x_tables: duplicate underflow at hook 2 [ 131.387589][ T7523] netlink: 'syz.2.404': attribute type 1 has an invalid length. [ 131.473331][ T7522] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 131.589122][ T7533] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 131.647661][ T7533] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 132.235179][ T7552] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 132.274529][ T9] IPVS: starting estimator thread 0... [ 132.284708][ T7552] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 132.293255][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 132.304532][ T40] IPVS: starting estimator thread 0... [ 132.310486][ T7552] netlink: 'syz.1.413': attribute type 1 has an invalid length. [ 132.352164][ T7552] 8021q: adding VLAN 0 to HW filter on device bond5 [ 132.382889][ T7555] openvswitch: netlink: Multiple metadata blocks provided [ 132.399587][ T7557] IPVS: using max 37 ests per chain, 88800 per kthread [ 132.418604][ T7558] IPVS: using max 26 ests per chain, 62400 per kthread [ 132.443276][ T7552] bond5: (slave veth5): Enslaving as an active interface with a down link [ 132.542611][ T7561] bond5: (slave veth0_to_bond): making interface the new active one [ 132.556793][ T7561] veth0_to_bond: entered promiscuous mode [ 132.563692][ T7561] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 132.591482][ T7552] bond5: entered promiscuous mode [ 132.608567][ T7552] bond5: entered allmulticast mode [ 132.622901][ T7552] veth0_to_bond: entered allmulticast mode [ 132.794590][ T7575] C: renamed from lo (while UP) [ 132.814712][ T7575] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 132.898086][ T7581] lo: Caught tx_queue_len zero misconfig [ 133.101983][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 133.190239][ T7596] Bluetooth: MGMT ver 1.23 [ 133.213056][ T7596] trusted_key: syz.4.426 sent an empty control message without MSG_MORE. [ 133.259368][ T7600] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.429'. [ 133.279501][ T7605] netlink: 'syz.3.428': attribute type 3 has an invalid length. [ 133.304927][ T7605] netlink: 'syz.3.428': attribute type 2 has an invalid length. [ 133.600831][ T7630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.942215][ T7645] netlink: 'syz.4.440': attribute type 8 has an invalid length. [ 135.075084][ T7664] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 135.232634][ T7670] veth0: entered promiscuous mode [ 135.298917][ T7670] __nla_validate_parse: 6 callbacks suppressed [ 135.298935][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'. [ 135.480289][ T7689] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.446'. [ 135.509570][ T7692] netlink: 'syz.3.450': attribute type 1 has an invalid length. [ 135.526079][ T7693] x_tables: duplicate underflow at hook 1 [ 135.679717][ T7692] bond2: entered promiscuous mode [ 135.685219][ T7692] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.764409][ T7701] netlink: 'syz.0.452': attribute type 8 has an invalid length. [ 136.134648][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.461'. [ 136.145576][ T7722] sctp: [Deprecated]: syz.2.461 (pid 7722) Use of int in maxseg socket option. [ 136.145576][ T7722] Use struct sctp_assoc_value instead [ 136.158540][ T7719] syzkaller0: entered promiscuous mode [ 136.175712][ T7719] syzkaller0: entered allmulticast mode [ 136.245084][ T10] IPVS: starting estimator thread 0... [ 136.358417][ T7725] IPVS: using max 34 ests per chain, 81600 per kthread [ 136.541013][ T7737] netlink: 'syz.2.466': attribute type 5 has an invalid length. [ 136.729659][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 136.744309][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'. [ 136.862909][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'. [ 136.935555][ T7756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.947653][ T7754] IPVS: Error connecting to the multicast addr [ 136.978938][ T7753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.471'. [ 137.013078][ T7753] A link change request failed with some changes committed already. Interface ip6erspan0 may have been left with an inconsistent configuration, please check. [ 137.282307][ T7774] xt_hashlimit: size too large, truncated to 1048576 [ 137.376591][ T7779] netlink: 284 bytes leftover after parsing attributes in process `syz.0.477'. [ 137.430782][ T5846] block nbd1: Receive control failed (result -32) [ 137.688870][ T7805] netlink: 44 bytes leftover after parsing attributes in process `syz.1.484'. [ 138.039351][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.045797][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.095639][ T7824] netlink: 'syz.4.488': attribute type 83 has an invalid length. [ 138.218197][ T7830] syzkaller0: entered promiscuous mode [ 138.228685][ T7830] syzkaller0: entered allmulticast mode [ 138.820807][ T7855] netlink: 516 bytes leftover after parsing attributes in process `syz.3.496'. [ 138.843817][ T7855] netlink: 'syz.3.496': attribute type 22 has an invalid length. [ 140.163702][ T7876] netlink: 'syz.1.502': attribute type 83 has an invalid length. [ 140.228796][ T7883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.410326][ T7895] __nla_validate_parse: 3 callbacks suppressed [ 140.410343][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.509'. [ 140.435938][ T30] audit: type=1804 audit(1767156642.569:2): pid=7896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.509" name="/newroot/101/cgroup.controllers" dev="tmpfs" ino=529 res=1 errno=0 [ 140.464075][ T30] audit: type=1800 audit(1767156642.599:3): pid=7896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.509" name="cgroup.controllers" dev="tmpfs" ino=529 res=0 errno=0 [ 140.522205][ T7890] netlink: 16 bytes leftover after parsing attributes in process `syz.1.508'. [ 141.439333][ T7955] netlink: 48 bytes leftover after parsing attributes in process `syz.0.520'. [ 141.608639][ T7961] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 141.973378][ T7983] netlink: 196 bytes leftover after parsing attributes in process `syz.3.528'. [ 141.985692][ T7990] netlink: 'syz.2.530': attribute type 10 has an invalid length. [ 142.244920][ T7998] netlink: 'syz.3.533': attribute type 21 has an invalid length. [ 142.305233][ T7998] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 142.385065][ T7998] bond3 (unregistering): Released all slaves [ 142.577473][ T8022] netlink: 224 bytes leftover after parsing attributes in process `syz.0.538'. [ 142.593562][ T8022] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 142.866858][ T8035] netlink: 24 bytes leftover after parsing attributes in process `syz.2.543'. [ 142.958840][ T8039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.199375][ T8052] netlink: 'syz.2.550': attribute type 27 has an invalid length. [ 143.529946][ T8063] tipc: Enabled bearer , priority 0 [ 143.601349][ T8063] syzkaller0: entered promiscuous mode [ 143.623240][ T8063] syzkaller0: entered allmulticast mode [ 143.639261][ T8063] tipc: Resetting bearer [ 143.688127][ T8060] tipc: Resetting bearer [ 143.897039][ T8077] Driver unsupported XDP return value 0 on prog (id 100) dev N/A, expect packet loss! [ 144.147304][ T8086] netlink: 36 bytes leftover after parsing attributes in process `syz.3.558'. [ 144.840691][ T8060] tipc: Disabling bearer [ 144.864922][ T5920] tipc: Node number set to 1057620795 [ 145.188647][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 145.197494][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.560'. [ 145.258431][ T8108] netlink: 76 bytes leftover after parsing attributes in process `syz.0.566'. [ 145.349138][ T8111] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 145.828935][ T8142] __nla_validate_parse: 1 callbacks suppressed [ 145.828954][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.578'. [ 145.874825][ T8144] netlink: 60 bytes leftover after parsing attributes in process `syz.3.577'. [ 145.891045][ T8144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.577'. [ 145.904600][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.578'. [ 145.959794][ T8143] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 145.979436][ T8142] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:21 [ 146.089333][ T8143] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 146.104792][ T8143] gretap1: entered promiscuous mode [ 146.128261][ T8143] gretap1: entered allmulticast mode [ 146.441769][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'. [ 146.507565][ T8174] netlink: 92 bytes leftover after parsing attributes in process `syz.2.588'. [ 146.539124][ T8174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.588'. [ 146.574881][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'. [ 146.677598][ T6197] smc: removing ib device syz1 [ 146.795960][ T8186] netlink: 20 bytes leftover after parsing attributes in process `syz.2.591'. [ 146.806005][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.591'. [ 146.854325][ T8186] hsr_slave_0: left promiscuous mode [ 146.885310][ T8186] hsr_slave_1: left promiscuous mode [ 146.926484][ T8190] netlink: 'syz.3.592': attribute type 1 has an invalid length. [ 146.954878][ T8188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.975379][ T8192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.082468][ T8195] netlink: 'syz.3.594': attribute type 178 has an invalid length. [ 147.435132][ T8203] dvmrp0: entered allmulticast mode [ 147.568549][ T8217] netlink: 'syz.4.602': attribute type 1 has an invalid length. [ 148.114340][ T8240] netlink: 'syz.2.610': attribute type 10 has an invalid length. [ 148.254056][ T8240] team0: Port device geneve0 added [ 148.380457][ T8243] xt_ecn: cannot match TCP bits for non-tcp packets [ 148.681316][ T8266] SET target dimension over the limit! [ 149.722148][ T8303] x_tables: duplicate underflow at hook 1 [ 149.804920][ T8305] netlink: 'syz.2.629': attribute type 3 has an invalid length. [ 150.524321][ T8360] netlink: 'syz.0.643': attribute type 23 has an invalid length. [ 150.673944][ T8367] netlink: 'syz.3.645': attribute type 8 has an invalid length. [ 150.721064][ T8366] netlink: 'syz.3.645': attribute type 8 has an invalid length. [ 150.844173][ T8376] __nla_validate_parse: 77 callbacks suppressed [ 150.844192][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.649'. [ 150.924352][ T8380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'. [ 151.017631][ T37] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 151.056415][ T8388] netlink: 164 bytes leftover after parsing attributes in process `syz.2.651'. [ 151.152534][ T8383] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.191401][ T8398] netlink: 'syz.4.652': attribute type 1 has an invalid length. [ 151.199249][ T8396] raw_sendmsg: syz.4.652 forgot to set AF_INET. Fix it! [ 151.207046][ T8398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.363525][ T8383] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.379372][ T8407] netlink: 168 bytes leftover after parsing attributes in process `syz.0.657'. [ 151.646308][ T8383] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.744338][ T8383] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.827746][ T8420] Dead loop on virtual device ip6_vti0, fix it urgently! [ 151.907892][ T175] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.931569][ T175] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.967255][ T3727] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.008771][ T6197] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.196228][ T8426] netlink: 27 bytes leftover after parsing attributes in process `syz.1.664'. [ 152.390291][ T8431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.666'. [ 152.413224][ T8433] tipc: Started in network mode [ 152.419641][ T8433] tipc: Node identity c2161240258e, cluster identity 4711 [ 152.426989][ T8433] tipc: Enabled bearer , priority 11 [ 152.527829][ T8435] netlink: 40 bytes leftover after parsing attributes in process `syz.3.668'. [ 152.672399][ T8441] ipt_ECN: cannot use operation on non-tcp rule [ 152.784166][ T8446] dvmrp0: entered allmulticast mode [ 152.801117][ T8454] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 152.969500][ T8459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.676'. [ 152.993868][ T8459] IPVS: Unknown mcast interface: vcan0 [ 153.000852][ T8460] netlink: 'syz.0.676': attribute type 29 has an invalid length. [ 153.009828][ T8459] netlink: 'syz.0.676': attribute type 29 has an invalid length. [ 153.456085][ T8481] netlink: 'syz.0.683': attribute type 2 has an invalid length. [ 153.488434][ T5920] tipc: Node number set to 3885503040 [ 153.574899][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.685'. [ 153.610054][ T8497] bridge_slave_1: left allmulticast mode [ 153.636254][ T8497] bridge_slave_1: left promiscuous mode [ 153.656211][ T8497] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.731010][ T8497] bridge_slave_0: left allmulticast mode [ 153.740520][ T8497] bridge_slave_0: left promiscuous mode [ 153.754344][ T8497] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.765959][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.688'. [ 154.169372][ T8531] ipt_ECN: cannot use operation on non-tcp rule [ 155.837445][ T8578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.989740][ T8590] __nla_validate_parse: 4 callbacks suppressed [ 155.989760][ T8590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 155.998148][ T8587] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 156.025847][ T8587] tipc: Enabled bearer , priority 10 [ 156.034726][ T8587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.702'. [ 156.076324][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'. [ 156.179802][ T8587] 8021q: adding VLAN 0 to HW filter on device bond5 [ 156.276935][ T8610] netlink: 44 bytes leftover after parsing attributes in process `syz.3.707'. [ 156.377967][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.709'. [ 156.502213][ T8628] netlink: 'syz.2.710': attribute type 1 has an invalid length. [ 156.524697][ T8615] 8021q: adding VLAN 0 to HW filter on device bond6 [ 156.611468][ T8628] 8021q: adding VLAN 0 to HW filter on device bond6 [ 156.625616][ T40] IPVS: starting estimator thread 0... [ 156.640068][ T8627] netlink: 'syz.4.711': attribute type 4 has an invalid length. [ 156.715739][ T8620] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 156.730861][ T8620] bond7 (unregistering): Released all slaves [ 156.769467][ T8641] IPVS: using max 26 ests per chain, 62400 per kthread [ 157.009679][ T8653] --map-set only usable from mangle table [ 157.039555][ T8653] netlink: 256 bytes leftover after parsing attributes in process `syz.3.718'. [ 157.056447][ T8653] netlink: 'syz.3.718': attribute type 9 has an invalid length. [ 157.338063][ T8677] netlink: 212 bytes leftover after parsing attributes in process `syz.4.724'. [ 157.570962][ T8684] netlink: 40 bytes leftover after parsing attributes in process `syz.0.725'. [ 157.958817][ T8711] netlink: 16 bytes leftover after parsing attributes in process `syz.4.729'. [ 158.119769][ T8700] netlink: 20 bytes leftover after parsing attributes in process `syz.4.729'. [ 158.261353][ T8708] "syz.0.731" (8708) uses obsolete ecb(arc4) skcipher [ 158.407089][ T8724] netlink: 'syz.3.732': attribute type 1 has an invalid length. [ 159.050088][ T8767] netlink: 'syz.3.739': attribute type 1 has an invalid length. [ 159.177195][ T8767] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 159.179879][ T8776] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20002 [ 159.952769][ T8819] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 160.027935][ T8824] netlink: 'syz.2.753': attribute type 3 has an invalid length. [ 160.374762][ T8840] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 160.383781][ T8840] bond7: option packets_per_slave: allowed values 0 - 65535 [ 160.397755][ T8840] bond7 (unregistering): Released all slaves [ 161.014630][ T8871] syzkaller1: entered promiscuous mode [ 161.040393][ T8871] syzkaller1: entered allmulticast mode [ 161.387164][ T8904] __nla_validate_parse: 5 callbacks suppressed [ 161.387182][ T8904] netlink: 168 bytes leftover after parsing attributes in process `syz.4.769'. [ 161.647696][ T8918] netlink: 'syz.2.775': attribute type 1 has an invalid length. [ 161.689640][ T8918] netlink: 224 bytes leftover after parsing attributes in process `syz.2.775'. [ 161.768473][ T8918] netlink: 'syz.2.775': attribute type 12 has an invalid length. [ 162.226491][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 163.093998][ T8991] netlink: 20 bytes leftover after parsing attributes in process `syz.1.790'. [ 163.118010][ T8994] netlink: 'syz.4.789': attribute type 12 has an invalid length. [ 163.460032][ T9012] netlink: 'syz.3.792': attribute type 4 has an invalid length. [ 163.467855][ T9012] netlink: 152 bytes leftover after parsing attributes in process `syz.3.792'. [ 163.543158][ T9012] `: renamed from bond0 (while UP) [ 164.649523][ T9061] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 164.729908][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.805'. [ 164.756401][ T9070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.382446][ T9056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.478483][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 165.600030][ T9099] netlink: 24 bytes leftover after parsing attributes in process `syz.2.810'. [ 166.360822][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.817'. [ 166.506880][ T9108] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.514698][ T9108] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.893128][ T9108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.014407][ T9108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.551440][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.600670][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.642443][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.683594][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.844280][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 167.862315][ T9162] netlink: 44 bytes leftover after parsing attributes in process `syz.4.823'. [ 167.871855][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.822'. [ 168.166374][ T9173] netlink: 'syz.3.825': attribute type 1 has an invalid length. [ 168.186792][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.825'. [ 168.467749][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.829'. [ 168.777775][ T9201] netlink: 'syz.1.831': attribute type 1 has an invalid length. [ 168.922615][ T9214] tipc: Enabled bearer , priority 2 [ 168.982396][ T9224] netlink: 28 bytes leftover after parsing attributes in process `syz.3.839'. [ 169.326794][ T9243] netlink: 56 bytes leftover after parsing attributes in process `syz.1.844'. [ 169.363177][ T9235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.437881][ T9239] veth1: entered promiscuous mode [ 169.443289][ T9239] veth1: entered allmulticast mode [ 169.829764][ T9270] netlink: 'syz.0.852': attribute type 1 has an invalid length. [ 169.915018][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.855'. [ 169.934881][ T9278] bond2: (slave gretap1): making interface the new active one [ 169.948146][ T9278] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 170.032686][ T9270] macvlan2: entered promiscuous mode [ 170.059260][ T9270] macvlan2: entered allmulticast mode [ 170.071127][ T9270] bond2: entered promiscuous mode [ 170.098303][ T9270] gretap1: entered promiscuous mode [ 170.131710][ T9270] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 170.181882][ T9270] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 170.219173][ T9270] bond2: left promiscuous mode [ 170.227253][ T9270] gretap1: left promiscuous mode [ 170.232829][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.860'. [ 170.301217][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.860'. [ 170.319569][ T9144] tipc: Node number set to 2416612763 [ 170.632811][ T9307] dvmrp0: entered allmulticast mode [ 171.027192][ T9330] netlink: 'syz.0.868': attribute type 1 has an invalid length. [ 171.046909][ T9330] netlink: 'syz.0.868': attribute type 1 has an invalid length. [ 171.089362][ T9330] bond3: entered promiscuous mode [ 171.094851][ T9330] 8021q: adding VLAN 0 to HW filter on device bond3 [ 171.226254][ T9340] blkio.reset_stats is deprecated [ 171.250114][ T9332] bond3: (slave bridge3): making interface the new active one [ 171.257756][ T9332] bridge3: entered promiscuous mode [ 171.266922][ T9332] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 171.305012][ T9330] tipc: Started in network mode [ 171.323656][ T9330] tipc: Node identity d62a0c9cd268, cluster identity 4711 [ 171.353574][ T9330] tipc: Enabled bearer , priority 0 [ 171.374867][ T9332] syzkaller0: entered promiscuous mode [ 171.415411][ T9332] syzkaller0: entered allmulticast mode [ 171.470263][ T9329] tipc: Resetting bearer [ 171.550312][ T9329] tipc: Disabling bearer [ 171.816416][ T9369] veth0: entered promiscuous mode [ 171.853873][ T9369] veth0 (unregistering): left promiscuous mode [ 172.183380][ T9390] netlink: 'syz.2.885': attribute type 1 has an invalid length. [ 172.221627][ T9390] 8021q: adding VLAN 0 to HW filter on device bond8 [ 172.255079][ T9390] bond8: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 172.267715][ T9390] bond8: entered allmulticast mode [ 172.531685][ T9400] netlink: 'syz.4.888': attribute type 1 has an invalid length. [ 172.691460][ T9405] syzkaller0: entered promiscuous mode [ 172.696960][ T9405] syzkaller0: entered allmulticast mode [ 172.972407][ T9417] __nla_validate_parse: 76 callbacks suppressed [ 172.972426][ T9417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.894'. [ 173.061725][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.896'. [ 173.099491][ T9420] netlink: 44 bytes leftover after parsing attributes in process `syz.4.896'. [ 173.673714][ T9451] netlink: 'syz.2.904': attribute type 10 has an invalid length. [ 174.184811][ T9468] sctp: [Deprecated]: syz.4.909 (pid 9468) Use of int in maxseg socket option. [ 174.184811][ T9468] Use struct sctp_assoc_value instead [ 174.228817][ T9470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.910'. [ 174.273369][ T9464] bond7: option lp_interval: invalid value (0) [ 174.279823][ T9464] bond7: option lp_interval: allowed values 1 - 2147483647 [ 174.301896][ T9464] bond7 (unregistering): Released all slaves [ 174.306706][ T9471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.910'. [ 174.362091][ T9478] netlink: 'syz.4.913': attribute type 33 has an invalid length. [ 174.372428][ T9479] netlink: 28 bytes leftover after parsing attributes in process `syz.0.910'. [ 174.420043][ T9477] netlink: 'syz.3.911': attribute type 3 has an invalid length. [ 174.772533][ T9498] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.919'. [ 175.005672][ T9514] syzkaller1: entered promiscuous mode [ 175.014949][ T9514] syzkaller1: entered allmulticast mode [ 175.040773][ T9514] gretap1: entered promiscuous mode [ 175.074134][ T9515] gretap1: entered promiscuous mode [ 175.104852][ T9522] netlink: 32 bytes leftover after parsing attributes in process `syz.2.926'. [ 175.115797][ T9523] netlink: 32 bytes leftover after parsing attributes in process `syz.2.926'. [ 175.188354][ T9525] netlink: 144 bytes leftover after parsing attributes in process `syz.2.927'. [ 175.343218][ T9531] netlink: 'syz.2.927': attribute type 1 has an invalid length. [ 175.810293][ T9547] policy can only be matched on NF_INET_PRE_ROUTING [ 175.810324][ T9547] unable to load match [ 176.017935][ T9555] netlink: 'syz.1.933': attribute type 21 has an invalid length. [ 176.121841][ T9561] xt_hashlimit: size too large, truncated to 1048576 [ 176.375100][ T9572] netlink: 'syz.0.937': attribute type 1 has an invalid length. [ 176.398009][ T9569] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 176.413810][ T9569] bond7 (unregistering): Released all slaves [ 176.438155][ T9576] sctp: [Deprecated]: syz.4.938 (pid 9576) Use of int in max_burst socket option deprecated. [ 176.438155][ T9576] Use struct sctp_assoc_value instead [ 176.483211][ T9578] netlink: 'syz.3.939': attribute type 1 has an invalid length. [ 176.729813][ T9582] 8021q: adding VLAN 0 to HW filter on device bond6 [ 176.765057][ T9582] bond5: (slave bond6): making interface the new active one [ 176.782077][ T9582] bond5: (slave bond6): Enslaving as an active interface with an up link [ 176.827039][ T9600] openvswitch: netlink: Key type 31 is not supported [ 176.854431][ T9598] netlink: 'syz.4.946': attribute type 27 has an invalid length. [ 177.830109][ T9612] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 178.149789][ T9684] openvswitch: netlink: IP tunnel dst address not specified [ 178.259501][ T9688] __nla_validate_parse: 13 callbacks suppressed [ 178.259520][ T9688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.973'. [ 178.324112][ T9690] netlink: 228 bytes leftover after parsing attributes in process `syz.2.974'. [ 178.407196][ T9692] netlink: 'syz.4.975': attribute type 83 has an invalid length. [ 178.552920][ T9702] netlink: 16 bytes leftover after parsing attributes in process `syz.3.977'. [ 178.593417][ T9701] tipc: Enabling of bearer rejected, media not registered [ 178.613961][ T9701] x_tables: ip_tables: udp match: only valid for protocol 17 [ 178.663103][ T9702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.068829][ T5837] Bluetooth: hci0: command 0x0401 tx timeout [ 179.411076][ T9739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.483103][ T9739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.718291][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 179.934262][ T9768] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 180.339693][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.998'. [ 180.361868][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.998'. [ 180.411748][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.997'. [ 180.457299][ T9790] netlink: 24 bytes leftover after parsing attributes in process `syz.3.997'. [ 180.787616][ T9804] pim6reg1: entered promiscuous mode [ 180.809022][ T9804] pim6reg1: entered allmulticast mode [ 180.914754][ T9816] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1005'. [ 181.098481][ T9825] netlink: 'syz.1.1007': attribute type 63 has an invalid length. [ 181.125432][ T9824] netlink: 'syz.1.1007': attribute type 63 has an invalid length. [ 181.324005][ T9827] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1008'. [ 181.354385][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1008'. [ 181.379879][ T9841] netlink: 'syz.0.1012': attribute type 1 has an invalid length. [ 181.563912][ T9853] netlink: 'syz.1.1010': attribute type 5 has an invalid length. [ 182.361308][ T9835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.379599][ T9835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.748277][ T9835] veth3: left promiscuous mode [ 182.770242][ T9835] bond5: left promiscuous mode [ 182.775219][ T9835] bond5: left allmulticast mode [ 182.787120][ T9835] veth0_to_bond: left allmulticast mode [ 182.834011][ T9853] geneve2: entered promiscuous mode [ 182.839475][ T9853] geneve2: entered allmulticast mode [ 182.856812][ T9875] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 182.995607][ T37] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.020733][ T37] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 183.039491][ T9875] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 183.064113][ T37] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.078329][ T37] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 183.227220][ T37] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.253962][ T37] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 183.263377][ T37] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.272735][ T37] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 183.295271][ T9908] __nla_validate_parse: 4 callbacks suppressed [ 183.295287][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1027'. [ 183.379215][ T9916] macvtap0: Device is already in use. [ 183.386081][ T9917] macvtap0: Device is already in use. [ 183.415263][ T9914] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1029'. [ 183.725188][ T9921] netlink: 'syz.3.1030': attribute type 24 has an invalid length. [ 184.220911][ T9962] syzkaller0: entered allmulticast mode [ 184.264306][ T9970] wg1 speed is unknown, defaulting to 1000 [ 184.287942][ T9970] wg1 speed is unknown, defaulting to 1000 [ 184.311284][ T9970] wg1 speed is unknown, defaulting to 1000 [ 184.348146][ T9976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1041'. [ 184.388025][ T9970] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 184.477504][ T9970] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 184.488042][ T9960] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1041'. [ 184.544337][ T9970] wg1 speed is unknown, defaulting to 1000 [ 184.563431][ T9970] wg1 speed is unknown, defaulting to 1000 [ 184.597822][ T9970] wg1 speed is unknown, defaulting to 1000 [ 184.640973][ T9970] wg1 speed is unknown, defaulting to 1000 [ 184.673191][ T9970] wg1 speed is unknown, defaulting to 1000 [ 184.722152][ T9989] block nbd2: Unsupported socket: should be TCP or UNIX. [ 184.788696][ T9989] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.940661][ T9997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.969227][ T9999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.999692][T10002] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1049'. [ 185.017472][T10002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.088761][T10001] delete_channel: no stack [ 185.235208][T10014] netlink: 'syz.1.1056': attribute type 21 has an invalid length. [ 185.244502][T10014] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1056'. [ 185.255969][T10014] netlink: 'syz.1.1056': attribute type 5 has an invalid length. [ 185.265215][T10014] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1056'. [ 185.325077][T10018] netlink: 'syz.1.1056': attribute type 21 has an invalid length. [ 185.379721][T10018] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1056'. [ 185.400929][T10018] netlink: 'syz.1.1056': attribute type 5 has an invalid length. [ 185.417553][T10018] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1056'. [ 185.456203][T10028] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1057'. [ 185.566911][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.598139][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.622000][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.642999][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.998106][T10054] xt_socket: unknown flags 0xe4 [ 187.102379][T10062] macvtap1: entered promiscuous mode [ 187.108020][T10062] macvtap1: entered allmulticast mode [ 187.137146][T10062] veth1_vlan: entered allmulticast mode [ 187.173608][T10073] macvtap2: entered promiscuous mode [ 187.206445][T10073] macvtap2: entered allmulticast mode [ 187.242668][T10076] openvswitch: netlink: IP tunnel dst address not specified [ 188.104255][T10125] netlink: 'syz.1.1086': attribute type 2 has an invalid length. [ 188.330794][T10145] netlink: 'syz.3.1093': attribute type 29 has an invalid length. [ 188.606131][T10172] netlink: 'syz.3.1100': attribute type 18 has an invalid length. [ 188.614214][T10172] __nla_validate_parse: 8 callbacks suppressed [ 188.614230][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1100'. [ 188.630879][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1099'. [ 188.642778][T10172] netlink: 'syz.3.1100': attribute type 18 has an invalid length. [ 188.680157][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1100'. [ 188.722101][T10177] xt_hashlimit: overflow, try lower: 3/0 [ 189.034209][T10195] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1104'. [ 189.267299][T10203] netlink: 'syz.2.1107': attribute type 12 has an invalid length. [ 189.419300][T10207] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1109'. [ 189.474930][T10207] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 189.494464][T10211] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1111'. [ 189.521616][T10207] gretap1: entered promiscuous mode [ 189.538297][T10207] gretap1: entered allmulticast mode [ 189.609940][T10221] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1114'. [ 189.656864][T10224] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1115'. [ 189.682911][T10228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1112'. [ 189.698898][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1115'. [ 189.886113][T10234] tipc: New replicast peer: 255.255.255.255 [ 189.912036][T10234] tipc: Enabled bearer , priority 10 [ 190.321419][T10264] SET target dimension over the limit! [ 190.342956][T10267] netlink: 'syz.3.1126': attribute type 5 has an invalid length. [ 190.352161][T10265] netlink: 'syz.4.1128': attribute type 1 has an invalid length. [ 190.389578][T10265] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 190.589765][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 191.800677][T10333] tipc: Can't bind to reserved service type 2 [ 192.194338][T10350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.881582][T10377] netlink: 'syz.4.1159': attribute type 2 has an invalid length. [ 192.946476][T10391] netlink: 'syz.3.1164': attribute type 7 has an invalid length. [ 192.959359][T10392] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 192.970021][T10391] netlink: 'syz.3.1164': attribute type 8 has an invalid length. [ 193.632008][T10434] netem: unknown loss type 0 [ 193.654707][T10434] netem: change failed [ 193.672948][T10438] __nla_validate_parse: 21 callbacks suppressed [ 193.672964][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1173'. [ 193.736881][T10435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1175'. [ 194.009989][T10455] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1177'. [ 194.080934][T10455] netlink: 'syz.4.1177': attribute type 4 has an invalid length. [ 194.118526][T10455] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1177'. [ 194.345251][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1180'. [ 194.424576][T10429] sctp: [Deprecated]: syz.0.1174 (pid 10429) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.424576][T10429] Use struct sctp_sack_info instead [ 194.455207][T10429] sctp: [Deprecated]: syz.0.1174 (pid 10429) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.455207][T10429] Use struct sctp_sack_info instead [ 194.520015][T10429] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1174'. [ 194.624731][T10480] openvswitch: netlink: Key type 105 is out of range max 32 [ 194.758949][T10485] sctp: [Deprecated]: syz.1.1187 (pid 10485) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.758949][T10485] Use struct sctp_sack_info instead [ 195.198657][T10512] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1195'. [ 195.229699][T10512] openvswitch: netlink: Flow key attr not present in new flow. [ 195.354687][T10521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1198'. [ 195.407474][T10522] tipc: Enabled bearer , priority 0 [ 195.434988][T10522] syzkaller0: entered promiscuous mode [ 195.467600][T10522] syzkaller0: entered allmulticast mode [ 195.505902][T10522] tipc: Resetting bearer [ 195.560188][T10519] tipc: Resetting bearer [ 195.593426][T10519] tipc: Disabling bearer [ 195.640315][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1203'. [ 195.651020][T10533] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1203'. [ 196.253731][T10570] tipc: Enabled bearer , priority 0 [ 196.307649][T10570] syzkaller0: entered promiscuous mode [ 196.324751][T10570] syzkaller0: entered allmulticast mode [ 196.336320][T10572] netlink: Unknown conntrack attr (type=2304, max=9) [ 196.416598][T10576] tipc: Resetting bearer [ 196.510311][T10576] tipc: Disabling bearer [ 196.630574][T10588] IPv6: sit1: Disabled Multicast RS [ 196.764425][T10594] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 196.851475][T10605] tipc: Enabled bearer , priority 0 [ 196.861975][T10605] syzkaller0: entered promiscuous mode [ 196.867499][T10605] syzkaller0: entered allmulticast mode [ 196.906975][T10605] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 196.957008][T10605] tipc: Resetting bearer [ 196.980819][T10602] tipc: Resetting bearer [ 197.030386][T10602] tipc: Disabling bearer [ 197.086086][T10623] geneve2: entered promiscuous mode [ 197.226430][T10632] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 197.394626][T10636] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 197.406256][T10636] syzkaller1: linktype set to 823 [ 197.731235][T10656] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 197.811115][T10656] team1: entered promiscuous mode [ 197.834981][T10656] team1: entered allmulticast mode [ 197.996709][T10658] netlink: 'syz.3.1243': attribute type 4 has an invalid length. [ 198.611640][T10706] netlink: ct family unspecified [ 198.677418][T10708] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 198.722583][T10711] sctp: [Deprecated]: syz.0.1261 (pid 10711) Use of int in max_burst socket option. [ 198.722583][T10711] Use struct sctp_assoc_value instead [ 198.737318][T10714] __nla_validate_parse: 18 callbacks suppressed [ 198.737335][T10714] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1262'. [ 198.759206][T10715] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1263'. [ 199.085936][T10736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1269'. [ 199.200031][T10740] mac80211_hwsim hwsim11 : renamed from wlan1 [ 199.435477][T10754] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1275'. [ 199.472939][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.479404][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.491674][T10756] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.526489][T10756] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1276'. [ 199.780205][T10763] delete_channel: no stack [ 200.055930][T10777] netlink: 'syz.1.1284': attribute type 1 has an invalid length. [ 200.066563][T10785] bridge0: port 3(veth0_to_bridge) entered blocking state [ 200.074633][T10785] bridge0: port 3(veth0_to_bridge) entered disabled state [ 200.096726][T10785] veth0_to_bridge: entered allmulticast mode [ 200.110868][T10785] veth0_to_bridge: entered promiscuous mode [ 200.119619][T10792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1287'. [ 200.119642][T10777] netlink: 'syz.1.1284': attribute type 1 has an invalid length. [ 200.138756][T10789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1287'. [ 200.148561][T10792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1287'. [ 200.188594][T10789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1287'. [ 200.262393][T10796] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1288'. [ 200.741476][T10824] geneve4: entered promiscuous mode [ 200.800377][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 200.821640][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 200.860927][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 200.931527][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 201.261587][T10855] netlink: 'syz.2.1307': attribute type 2 has an invalid length. [ 201.469567][T10865] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.580182][T10874] netlink: 'syz.2.1314': attribute type 1 has an invalid length. [ 201.627160][T10882] netlink: 'syz.3.1316': attribute type 9 has an invalid length. [ 201.637482][T10878] netlink: 'syz.1.1315': attribute type 1 has an invalid length. [ 201.670245][T10878] netlink: 'syz.1.1315': attribute type 3 has an invalid length. [ 201.708275][T10878] NCSI netlink: No device for ifindex 813332851 [ 201.791792][T10893] netlink: 'syz.1.1319': attribute type 11 has an invalid length. [ 202.035916][T10912] sctp: [Deprecated]: syz.1.1321 (pid 10912) Use of int in max_burst socket option deprecated. [ 202.035916][T10912] Use struct sctp_assoc_value instead [ 202.425214][T10928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.874196][T10942] tipc: Enabling of bearer rejected, already enabled [ 203.105666][T10957] netlink: 'syz.4.1334': attribute type 10 has an invalid length. [ 203.361941][T10980] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 203.576552][T10999] netlink: 'syz.2.1344': attribute type 7 has an invalid length. [ 203.610711][T11005] bridge0: entered allmulticast mode [ 203.900266][T11017] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.054473][T11020] __nla_validate_parse: 17 callbacks suppressed [ 204.054493][T11020] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1348'. [ 204.306884][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1352'. [ 204.309657][T11033] xt_TCPMSS: Only works on TCP SYN packets [ 204.315974][T11029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1352'. [ 204.338900][T11032] xt_TCPMSS: Only works on TCP SYN packets [ 204.452576][T11033] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1353'. [ 205.573315][T11085] validate_nla: 3 callbacks suppressed [ 205.573334][T11085] netlink: 'syz.4.1367': attribute type 1 has an invalid length. [ 205.933847][T11104] netlink: 'syz.3.1372': attribute type 10 has an invalid length. [ 205.948796][T11106] netlink: 'syz.3.1372': attribute type 10 has an invalid length. [ 206.287194][T11118] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1376'. [ 206.310191][T11122] openvswitch: netlink: Message has 195 unknown bytes. [ 206.319706][T11124] IPVS: length: 223 != 8 [ 206.375377][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1380'. [ 206.400983][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1380'. [ 206.703217][T11150] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.1382'. [ 206.731284][T11150] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 206.806567][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1385'. [ 207.013402][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1386'. [ 207.078615][T11167] netlink: 'syz.4.1386': attribute type 1 has an invalid length. [ 207.140325][T11167] netlink: 'syz.4.1386': attribute type 2 has an invalid length. [ 207.200442][T11160] wg1 speed is unknown, defaulting to 1000 [ 207.379294][T11178] netlink: 'syz.1.1389': attribute type 11 has an invalid length. [ 207.429623][ T36] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.438916][T11178] netlink: 'syz.1.1389': attribute type 11 has an invalid length. [ 207.553667][ T36] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.579782][T11188] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 207.594824][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.613415][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.737950][T11193] tipc: Started in network mode [ 207.757023][T11193] tipc: Node identity 06e40733a3f6, cluster identity 4711 [ 207.764828][T11193] tipc: Enabled bearer , priority 0 [ 207.783546][T11193] syzkaller0: entered promiscuous mode [ 207.791948][T11193] syzkaller0: entered allmulticast mode [ 207.810912][T11193] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 207.864537][T11193] tipc: Resetting bearer [ 207.874614][T11191] tipc: Resetting bearer [ 207.926225][T11191] tipc: Disabling bearer [ 208.285853][T11221] batadv1: entered allmulticast mode [ 208.323952][T11219] netem: incorrect ge model size [ 208.329399][T11219] netem: change failed [ 208.617189][ T30] audit: type=1800 audit(1767156710.749:4): pid=11218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1399" name="memory.events" dev="tmpfs" ino=1459 res=0 errno=0 [ 208.870990][T11252] dvmrp6: entered allmulticast mode [ 209.324790][T11279] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 209.334486][T11280] netlink: 'syz.3.1420': attribute type 2 has an invalid length. [ 209.588147][T11300] netlink: 'syz.2.1423': attribute type 1 has an invalid length. [ 209.591415][T11291] bond10: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 209.649108][T11291] bond10 (unregistering): Released all slaves [ 209.657788][T11306] netlink: 'syz.1.1427': attribute type 1 has an invalid length. [ 209.984376][T11300] 8021q: adding VLAN 0 to HW filter on device bond10 [ 210.009213][T11307] bond10: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 210.060045][T11307] bond10: entered allmulticast mode [ 210.302724][T11331] __nla_validate_parse: 8 callbacks suppressed [ 210.302743][T11331] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1432'. [ 210.486008][T11339] ip6gre2: entered promiscuous mode [ 210.685340][T11350] ipt_REJECT: TCP_RESET invalid for non-tcp [ 210.901850][T11361] netlink: 'syz.2.1442': attribute type 1 has an invalid length. [ 210.915775][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1442'. [ 211.066775][T11372] netlink: 'syz.2.1445': attribute type 1 has an invalid length. [ 211.109279][T11372] 8021q: adding VLAN 0 to HW filter on device bond11 [ 211.118498][T11372] netlink: 'syz.2.1445': attribute type 1 has an invalid length. [ 211.126772][T11372] netlink: 'syz.2.1445': attribute type 4 has an invalid length. [ 211.134887][T11372] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.1445'. [ 211.146984][T11377] netlink: 'syz.2.1445': attribute type 1 has an invalid length. [ 211.156740][T11372] netlink: 'syz.2.1445': attribute type 1 has an invalid length. [ 211.165095][T11372] netlink: 'syz.2.1445': attribute type 4 has an invalid length. [ 211.173358][T11372] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.1445'. [ 211.270810][T11380] vlan0: entered allmulticast mode [ 211.294153][T11385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1448'. [ 211.323862][T11385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1448'. [ 211.454726][T11395] ip6gre2: entered promiscuous mode [ 211.461737][T11395] ip6gre2: entered allmulticast mode [ 211.476825][T11395] gre0: entered promiscuous mode [ 211.486571][T11395] gre0: entered allmulticast mode [ 211.503267][T11397] tipc: Enabling of bearer rejected, failed to enable media [ 211.586191][T11400] netlink: 'syz.3.1453': attribute type 8 has an invalid length. [ 211.803601][ T5851] Bluetooth: hci0: command 0x0401 tx timeout [ 211.803628][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 211.815855][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 211.819591][ T5152] Bluetooth: hci1: command 0x0406 tx timeout [ 212.012546][T11423] netlink: 'syz.3.1460': attribute type 26 has an invalid length. [ 212.028487][T11423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1460'. [ 212.038759][T11423] netlink: 'syz.3.1460': attribute type 26 has an invalid length. [ 212.046611][T11423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1460'. [ 212.078962][T11426] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1461'. [ 212.083521][T11423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1460'. [ 212.311158][T11430] syzkaller0: entered promiscuous mode [ 212.345796][T11430] syzkaller0: entered allmulticast mode [ 212.386511][T11430] tipc: Enabled bearer , priority 0 [ 212.489303][T11429] tipc: Resetting bearer [ 212.591050][T11429] tipc: Disabling bearer [ 212.675692][T11452] tipc: Enabled bearer , priority 0 [ 212.691137][T11452] syzkaller0: entered promiscuous mode [ 212.696846][T11452] syzkaller0: entered allmulticast mode [ 212.786291][T11453] tipc: Resetting bearer [ 212.806536][T11452] tipc: Resetting bearer [ 212.873967][T11452] tipc: Disabling bearer [ 212.963070][T11453] gretap0: entered promiscuous mode [ 212.982673][T11453] batadv_slave_1: entered promiscuous mode [ 213.000282][T11453] batadv_slave_1: left promiscuous mode [ 213.020823][T11453] gretap0: left promiscuous mode [ 213.339758][T11480] IPVS: set_ctl: invalid protocol: 110 10.1.1.0:20002 [ 213.676779][ T7947] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 213.690592][ T7947] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 213.707444][ T7947] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 213.727000][ T7947] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 214.145530][T11520] wg1 speed is unknown, defaulting to 1000 [ 214.386069][T11542] ip6t_REJECT: ECHOREPLY is not supported [ 214.567822][T11545] tipc: Enabled bearer , priority 0 [ 214.601309][T11545] syzkaller0: entered promiscuous mode [ 214.627156][T11545] syzkaller0: entered allmulticast mode [ 214.673351][T11557] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 214.687651][T11544] tipc: Resetting bearer [ 214.734098][T11544] tipc: Disabling bearer [ 215.162530][T11581] bond2: entered promiscuous mode [ 215.168427][T11581] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.191329][T11581] bond2: entered allmulticast mode [ 215.263815][T11581] bond2: (slave bridge5): making interface the new active one [ 215.285885][T11581] bridge5: entered promiscuous mode [ 215.304206][T11581] bridge5: entered allmulticast mode [ 215.322214][T11581] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 215.511484][T11607] syzkaller0: entered promiscuous mode [ 215.525727][T11607] syzkaller0: entered allmulticast mode [ 215.667454][T11620] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 215.686119][T11620] __nla_validate_parse: 10 callbacks suppressed [ 215.686139][T11620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1519'. [ 216.292117][T11649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.372961][T11654] validate_nla: 6 callbacks suppressed [ 216.372980][T11654] netlink: 'syz.4.1529': attribute type 10 has an invalid length. [ 216.404674][T11654] bridge_slave_1: left allmulticast mode [ 216.418972][T11654] bridge_slave_1: left promiscuous mode [ 216.427696][T11654] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.020546][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.223143][T11673] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1534'. [ 217.235205][ T9884] IPVS: starting estimator thread 0... [ 217.241496][T11695] x_tables: duplicate underflow at hook 1 [ 217.342803][T11696] IPVS: using max 31 ests per chain, 74400 per kthread [ 217.355918][T11706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1542'. [ 217.475685][T11711] netlink: 'syz.3.1544': attribute type 8 has an invalid length. [ 217.541000][T11708] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1542'. [ 217.742529][ T5843] udevd[5843]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 217.870762][T11735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1550'. [ 218.082186][T11748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1553'. [ 218.093765][T11748] ip6t_srh: unknown srh match flags 5F28 [ 218.173311][T11743] can: request_module (can-proto-0) failed. [ 218.550107][T11778] xt_CT: You must specify a L4 protocol and not use inversions on it [ 218.696856][T11789] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 218.753619][T11787] netlink: 'syz.0.1563': attribute type 13 has an invalid length. [ 218.801142][T11789] bond7: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 218.829319][T11789] bond7 (unregistering): Released all slaves [ 218.859989][T11800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1565'. [ 219.062619][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1562'. [ 219.083585][T11800] vxcan2: entered allmulticast mode [ 219.088412][T11799] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1562'. [ 219.259185][T11814] wireguard0: entered promiscuous mode [ 219.264831][T11814] wireguard0: entered allmulticast mode [ 219.293814][T11814] team0: Device wireguard0 is of different type [ 219.319063][T11820] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1572'. [ 219.387679][T11820] bridge4: entered promiscuous mode [ 219.406529][T11820] bridge4: entered allmulticast mode [ 219.518887][T11831] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 219.544750][T11831] mac80211_hwsim hwsim9 : renamed from wlan1 [ 220.206114][T11862] syzkaller0: entered promiscuous mode [ 220.233944][T11862] syzkaller0: entered allmulticast mode [ 220.321735][T11882] tipc: Enabled bearer , priority 31 [ 220.520090][T11884] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 220.571178][T11900] netlink: 'syz.2.1593': attribute type 7 has an invalid length. [ 221.709075][T11913] syzkaller0: entered promiscuous mode [ 221.718317][T11913] syzkaller0: entered allmulticast mode [ 221.740825][T11922] tipc: Enabled bearer , priority 0 [ 221.771547][T11909] tipc: Resetting bearer [ 221.839930][T11909] tipc: Disabling bearer [ 221.955763][T11931] __nla_validate_parse: 12 callbacks suppressed [ 221.955784][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1600'. [ 222.325807][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1607'. [ 222.337104][T11958] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1607'. [ 222.552481][T11964] 8021q: adding VLAN 0 to HW filter on device bond3 [ 223.076111][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1620'. [ 223.134099][T12002] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1622'. [ 223.275715][T12007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 223.287770][T12007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1624'. [ 223.531151][T12022] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1629'. [ 223.591207][T12024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1630'. [ 223.633203][T12026] team0: Device gtp1 is up. Set it down before adding it as a team port [ 223.733791][T12024] veth1_vlan (unregistering): left allmulticast mode [ 223.876832][T12043] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1636'. [ 223.985163][T12024] tipc: Disabling bearer [ 224.472075][T12070] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.476242][T12081] netlink: 'syz.4.1646': attribute type 1 has an invalid length. [ 224.479853][T12070] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.580962][T12070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.596897][T12070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.609717][T12070] tipc: Resetting bearer [ 224.651074][T12070] tipc: Resetting bearer [ 224.716739][T12070] bond2: left promiscuous mode [ 224.722339][T12070] bridge1: left promiscuous mode [ 224.733306][T12070] gretap1: left promiscuous mode [ 224.738683][T12070] gretap1: left allmulticast mode [ 224.755253][T12070] veth1: left promiscuous mode [ 224.760937][T12070] veth1: left allmulticast mode [ 224.767904][T12070] bond8: left allmulticast mode [ 224.783478][T12070] team1: left promiscuous mode [ 224.788849][T12070] team1: left allmulticast mode [ 224.794337][T12070] bond10: left allmulticast mode [ 224.906231][T12102] netlink: 'syz.1.1651': attribute type 1 has an invalid length. [ 224.935771][T12087] bond4: (slave gretap2): making interface the new active one [ 224.979477][T12087] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 225.036830][ T61] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.067212][ T61] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.079677][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.088670][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.117938][ T61] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.150907][ T61] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.189423][T12088] macvlan0: entered promiscuous mode [ 225.194776][T12088] macvlan0: entered allmulticast mode [ 225.244369][ T61] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.280831][ T61] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.316584][T12103] syzkaller0: entered promiscuous mode [ 225.333991][T12103] syzkaller0: entered allmulticast mode [ 225.364719][ T61] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.397788][ T61] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.412139][T12120] netlink: 'syz.2.1655': attribute type 1 has an invalid length. [ 225.425322][T12120] sctp: [Deprecated]: syz.2.1655 (pid 12120) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.425322][T12120] Use struct sctp_sack_info instead [ 225.518796][T12120] netlink: 'syz.2.1655': attribute type 12 has an invalid length. [ 227.056217][T12212] __nla_validate_parse: 8 callbacks suppressed [ 227.056237][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1681'. [ 227.077110][T12212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1681'. [ 227.166183][T12205] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 227.194115][T12205] bond5 (unregistering): Released all slaves [ 227.331128][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1685'. [ 227.377176][T12229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1685'. [ 227.688137][T12250] netlink: 'syz.1.1695': attribute type 32 has an invalid length. [ 227.709178][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1695'. [ 227.761553][T12250] bond8: option coupled_control: invalid value (52) [ 227.776569][T12250] bond8 (unregistering): Released all slaves [ 227.808997][T12256] netlink: 'syz.4.1696': attribute type 1 has an invalid length. [ 227.831259][T12257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1694'. [ 227.939457][T12259] syzkaller0: entered promiscuous mode [ 227.965330][T12259] syzkaller0: entered allmulticast mode [ 227.997231][T12262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1698'. [ 228.019642][T12268] netlink: 183100 bytes leftover after parsing attributes in process `syz.4.1699'. [ 228.464225][T12295] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1701'. [ 228.617758][T12308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1709'. [ 228.677898][T12308] vxcan2: entered allmulticast mode [ 229.402917][T12353] netlink: 'syz.4.1722': attribute type 5 has an invalid length. [ 229.447330][T12353] geneve3: entered promiscuous mode [ 229.463032][T12353] geneve3: entered allmulticast mode [ 229.470494][ T2135] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 229.482878][ T2135] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 229.555968][ T2135] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 229.728876][T12370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.736813][T12368] syzkaller0: entered promiscuous mode [ 229.744722][T12368] syzkaller0: entered allmulticast mode [ 229.900804][T12379] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 230.246415][T12407] netlink: 'syz.2.1743': attribute type 12 has an invalid length. [ 230.333101][T12407] bond12: option primary_reselect: invalid value (255) [ 230.367241][T12407] bond12 (unregistering): Released all slaves [ 230.614422][T12427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.787394][T12442] C: renamed from team_slave_0 [ 230.799929][T12442] netlink: 'syz.2.1758': attribute type 1 has an invalid length. [ 230.812342][T12442] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 230.827901][T12446] veth0: entered promiscuous mode [ 231.343252][T12478] xt_SECMARK: invalid mode: 9 [ 231.570571][T12439] veth0: left promiscuous mode [ 231.733420][T12499] lo: Caught tx_queue_len zero misconfig [ 231.746880][T12501] openvswitch: netlink: IP tunnel dst address not specified [ 232.340878][T12545] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 232.366627][T12542] tipc: Enabling of bearer rejected, already enabled [ 232.475762][T12552] syzkaller0: entered promiscuous mode [ 232.481480][T12552] syzkaller0: entered allmulticast mode [ 232.738519][T12569] C: renamed from team_slave_0 (while UP) [ 232.761737][T12569] netlink: 'syz.0.1794': attribute type 1 has an invalid length. [ 232.784256][T12569] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 232.870477][T12569] __nla_validate_parse: 22 callbacks suppressed [ 232.870496][T12569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1794'. [ 232.954559][T12575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.997104][T12577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1799'. [ 233.006993][T12575] veth0_to_bridge: left allmulticast mode [ 233.013267][T12575] veth0_to_bridge: left promiscuous mode [ 233.021877][T12577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1799'. [ 233.034459][T12575] bridge0: port 3(veth0_to_bridge) entered disabled state [ 233.078694][T12575] bridge_slave_0: left allmulticast mode [ 233.085065][T12584] ip6t_REJECT: ECHOREPLY is not supported [ 233.093383][T12575] bridge_slave_0: left promiscuous mode [ 233.109123][T12575] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.128067][T12575] team0: Port device team_slave_0 removed [ 233.143982][T12575] team0: Port device team_slave_1 removed [ 233.151163][T12575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.162599][T12575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.176074][T12575] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 233.308145][T12599] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1805'. [ 233.322545][T12591] bond8: (slave C): Device is not bonding slave [ 233.329380][T12591] bond8: option active_slave: invalid value (C) [ 233.339721][T12591] bond8 (unregistering): Released all slaves [ 233.429454][T12608] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1804'. [ 233.445299][T12597] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 233.456623][T12597] bond7 (unregistering): Released all slaves [ 233.480534][T12611] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 233.493435][T12611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.598473][T12623] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1804'. [ 233.638000][T12623] 8021q: VLANs not supported on sit0 [ 233.722130][T12626] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 233.943635][T12639] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1811'. [ 234.090467][T12651] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 234.333381][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1821'. [ 234.488947][T12668] xt_CT: No such helper "pptp" [ 234.542624][T12676] netlink: 'syz.4.1823': attribute type 1 has an invalid length. [ 235.200918][T12714] netlink: 'syz.1.1840': attribute type 15 has an invalid length. [ 235.576577][T12740] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1849'. [ 235.590315][T12740] netlink: 'syz.0.1849': attribute type 1 has an invalid length. [ 235.598792][T12740] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1849'. [ 235.674654][T12742] vcan2: entered promiscuous mode [ 235.695515][T12742] vcan2: entered allmulticast mode [ 235.782150][T12748] netlink: 'syz.0.1851': attribute type 1 has an invalid length. [ 235.829863][T12748] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 236.575048][T12788] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 236.762561][T12797] bond12: (slave lo): Device is not bonding slave [ 236.769617][T12797] bond12: option active_slave: invalid value (lo) [ 236.779952][T12797] bond12 (unregistering): Released all slaves [ 236.808053][T12804] C: renamed from lo (while UP) [ 236.815750][T12804] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 236.957649][T12810] ip6gre3: entered allmulticast mode [ 236.975140][T12810] bond0: Caught tx_queue_len zero misconfig [ 237.489090][T12852] netlink: 'syz.1.1882': attribute type 83 has an invalid length. [ 237.516461][T12852] netlink: 'syz.1.1882': attribute type 27 has an invalid length. [ 237.882376][T12868] __nla_validate_parse: 6 callbacks suppressed [ 237.882394][T12868] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1888'. [ 237.942645][T12868] syzkaller0: entered promiscuous mode [ 237.948637][T12868] syzkaller0: entered allmulticast mode [ 238.013928][T12872] syzkaller0: entered promiscuous mode [ 238.019740][T12872] syzkaller0: entered allmulticast mode [ 238.399467][T12892] netlink: 'syz.2.1893': attribute type 1 has an invalid length. [ 238.415386][T12892] netlink: 9188 bytes leftover after parsing attributes in process `syz.2.1893'. [ 240.751114][T12919] xt_CONNSECMARK: invalid mode: 0 [ 240.896698][T12935] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 242.505768][T13030] netlink: 'syz.0.1928': attribute type 3 has an invalid length. [ 242.507718][T13025] netlink: 'syz.0.1928': attribute type 3 has an invalid length. [ 242.524606][T13030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1928'. [ 242.561659][T13025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1928'. [ 243.275322][T13058] netlink: 'syz.0.1936': attribute type 1 has an invalid length. [ 243.414637][T13063] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 243.428869][T13063] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 243.530095][T13058] macvlan2: entered promiscuous mode [ 243.535514][T13058] macvlan2: entered allmulticast mode [ 243.541846][T13058] bond7: entered promiscuous mode [ 243.549303][T13058] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 243.587201][T13058] bond7: left promiscuous mode [ 243.652463][T13072] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 243.834306][T13086] sctp: [Deprecated]: syz.0.1945 (pid 13086) Use of int in maxseg socket option. [ 243.834306][T13086] Use struct sctp_assoc_value instead [ 244.184966][T13106] xt_ecn: cannot match TCP bits for non-tcp packets [ 244.219773][T13106] xt_ecn: cannot match TCP bits for non-tcp packets [ 244.227918][T13106] xt_ecn: cannot match TCP bits for non-tcp packets [ 244.237686][T13106] xt_ecn: cannot match TCP bits for non-tcp packets [ 244.238110][T13108] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.1949'. [ 244.245110][T13106] xt_ecn: cannot match TCP bits for non-tcp packets [ 244.260722][T13106] xt_ecn: cannot match TCP bits for non-tcp packets [ 244.267704][T13106] xt_ecn: cannot match TCP bits for non-tcp packets [ 244.275725][T13108] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 244.284178][T13106] xt_ecn: cannot match TCP bits for non-tcp packets [ 244.328298][T13106] xt_ecn: cannot match TCP bits for non-tcp packets [ 244.415509][T13122] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1952'. [ 244.517220][T13131] netlink: 'syz.4.1957': attribute type 1 has an invalid length. [ 244.572826][T13131] 8021q: adding VLAN 0 to HW filter on device bond5 [ 244.610215][T13131] veth1: entered promiscuous mode [ 244.630720][T13131] bond5: (slave veth1): Enslaving as an active interface with an up link [ 244.789993][T13148] netlink: 'syz.4.1960': attribute type 1 has an invalid length. [ 244.823325][T13151] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1961'. [ 244.833050][T13151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1961'. [ 244.927897][T13154] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 244.941449][T13154] !: renamed from bond_slave_0 [ 245.170178][T13170] openvswitch: netlink: Tunnel attr 44 out of range max 16 [ 245.299586][T13165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'. [ 245.313456][T13165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1967'. [ 245.326727][T13165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'. [ 245.348913][T13165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1967'. [ 245.358811][T13174] netlink: 'syz.0.1971': attribute type 21 has an invalid length. [ 245.366689][T13174] IPv6: NLM_F_CREATE should be specified when creating new route [ 245.471659][T13187] team0: Caught tx_queue_len zero misconfig [ 245.509503][T13174] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1971'. [ 245.907378][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1980'. [ 246.003252][T13213] IPVS: Scheduler module ip_vs_sip not found [ 246.009594][T13221] netlink: 'syz.4.1980': attribute type 33 has an invalid length. [ 246.537662][T13258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.577865][T13263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.590598][T13263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.659110][T13270] netlink: 'syz.4.1995': attribute type 75 has an invalid length. [ 246.907676][T13287] netlink: 'syz.2.2000': attribute type 22 has an invalid length. [ 246.954167][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.973785][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.010908][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.037206][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.125855][T13297] dvmrp0: left allmulticast mode [ 248.109042][ T31] INFO: task udevd:5849 blocked for more than 143 seconds. [ 248.121743][ T31] Not tainted syzkaller #0 [ 248.144721][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 248.179446][ T31] task:udevd state:D stack:23272 pid:5849 tgid:5849 ppid:1 task_flags:0x400140 flags:0x00080000 [ 248.221808][ T31] Call Trace: [ 248.228468][ T31] [ 248.235202][ T31] __schedule+0x14bc/0x5000 [ 248.245908][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 248.256930][ T31] ? __pfx___schedule+0x10/0x10 [ 248.271022][ T31] ? __blk_flush_plug+0x3fc/0x4b0 [ 248.279766][ T31] ? schedule+0x91/0x360 [ 248.284697][ T31] schedule+0x165/0x360 [ 248.289413][ T31] schedule_timeout+0x12b/0x270 [ 248.294485][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 248.300231][ T31] ? __pfx_process_timeout+0x10/0x10 [ 248.305904][ T31] ? prepare_to_wait_event+0x437/0x480 [ 248.311824][ T31] nbd_queue_rq+0x662/0xf10 [ 248.316956][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 248.322319][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 248.327672][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 248.334001][ T31] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 248.339810][ T31] ? sbitmap_find_bit+0x47f/0x520 [ 248.345093][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 248.351375][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 248.357413][ T31] __blk_mq_sched_dispatch_requests+0xdac/0x1570 [ 248.364035][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 248.379368][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 248.384890][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 248.391605][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 248.397305][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 248.402823][ T31] blk_mq_dispatch_list+0xd0b/0xe00 [ 248.408290][ T31] ? bdev_count_inflight+0x1cf/0x210 [ 248.413843][ T31] ? blk_mq_dispatch_list+0x200/0xe00 [ 248.419482][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 248.425496][ T31] ? rcu_is_watching+0x15/0xb0 [ 248.430563][ T31] blk_mq_flush_plug_list+0x469/0x550 [ 248.436347][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 248.441891][ T31] ? blk_mq_submit_bio+0xd5b/0x26b0 [ 248.447352][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 248.453574][ T31] ? blk_mq_submit_bio+0x46a/0x26b0 [ 248.475835][ T31] __blk_flush_plug+0x3d3/0x4b0 [ 248.481806][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 248.487367][ T31] __submit_bio+0x2d0/0x5a0 [ 248.492256][ T31] ? __pfx___submit_bio+0x10/0x10 [ 248.497599][ T31] ? blk_cgroup_bio_start+0x59d/0x640 [ 248.504585][ T31] submit_bio_noacct_nocheck+0x2eb/0xa30 [ 248.511385][ T31] ? bio_associate_blkg+0x6d/0x230 [ 248.516858][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 248.523306][ T31] ? submit_bio_noacct+0xdfc/0x1b60 [ 248.528983][ T31] block_read_full_folio+0x599/0x830 [ 248.534496][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 248.540267][ T31] filemap_read_folio+0x117/0x380 [ 248.545496][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 248.551692][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 248.557463][ T31] ? filemap_add_folio+0x35f/0x540 [ 248.562957][ T31] do_read_cache_folio+0x358/0x590 [ 248.568541][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 248.574296][ T31] read_part_sector+0xb6/0x2b0 [ 248.579831][ T31] adfspart_check_ICS+0xa4/0xa50 [ 248.585052][ T31] ? snprintf+0xda/0x120 [ 248.590626][ T31] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 248.597243][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 248.603948][ T31] bdev_disk_changed+0x75f/0x14b0 [ 248.610680][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 248.616376][ T31] blkdev_get_whole+0x380/0x510 [ 248.621859][ T31] bdev_open+0x31e/0xd30 [ 248.626315][ T31] blkdev_open+0x457/0x600 [ 248.631160][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 248.636384][ T31] do_dentry_open+0x7ce/0x1420 [ 248.641521][ T31] vfs_open+0x3b/0x340 [ 248.645793][ T31] ? path_openat+0x33f3/0x3dd0 [ 248.651575][ T31] path_openat+0x340e/0x3dd0 [ 248.656396][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 248.662179][ T31] ? stack_depot_save_flags+0x40/0x850 [ 248.667917][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 248.674065][ T31] ? getname_flags+0xb8/0x540 [ 248.679098][ T31] ? __pfx_path_openat+0x10/0x10 [ 248.684502][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 248.689952][ T31] do_filp_open+0x1fa/0x410 [ 248.694782][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 248.700529][ T31] ? _raw_spin_unlock+0x28/0x50 [ 248.705698][ T31] ? alloc_fd+0x64c/0x6c0 [ 248.711589][ T31] do_sys_openat2+0x121/0x200 [ 248.716780][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 248.723540][ T31] __x64_sys_openat+0x138/0x170 [ 248.729190][ T31] do_syscall_64+0xfa/0xf80 [ 248.733939][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.740376][ T31] ? clear_bhb_loop+0x60/0xb0 [ 248.745298][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.751697][ T31] RIP: 0033:0x7f464eea7407 [ 248.756317][ T31] RSP: 002b:00007fff62984b90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 248.765908][ T31] RAX: ffffffffffffffda RBX: 00007f464f586880 RCX: 00007f464eea7407 [ 248.774276][ T31] RDX: 00000000000a0800 RSI: 000055ace0e943f0 RDI: ffffffffffffff9c [ 248.783480][ T31] RBP: 000055ace0e8a910 R08: 0000000000000000 R09: 0000000000000000 [ 248.791855][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ace0e9de20 [ 248.806714][ T31] R13: 000055ace0e98190 R14: 0000000000000000 R15: 000055ace0e9de20 [ 248.822387][ T31] [ 248.826206][ T31] [ 248.826206][ T31] Showing all locks held in the system: [ 248.845737][ T31] 1 lock held by khungtaskd/31: [ 248.851002][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 248.861558][ T31] 3 locks held by kworker/u8:2/36: [ 248.866881][ T31] 3 locks held by kworker/u8:9/2135: [ 248.886436][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 248.896814][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 248.906087][ T31] #2: ffff8880b8634408 (krc.lock){..-.}-{2:2}, at: kvfree_rcu_bulk+0x103/0x1f0 [ 248.915774][ T31] 2 locks held by getty/5592: [ 248.921047][ T31] #0: ffff88814d9620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 248.941436][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 248.951972][ T31] 3 locks held by udevd/5849: [ 248.956809][ T31] #0: ffff888024a44358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 248.966570][ T31] #1: ffff888141fcf698 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 248.976950][ T31] #2: ffff888024b48180 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 248.986225][ T31] 3 locks held by syz.2.2008/13332: [ 248.992607][ T31] 2 locks held by syz.4.2013/13349: [ 248.998416][ T31] #0: ffff8880292ba8d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 249.009476][ T31] #1: ffffffff8df47578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 249.020893][ T31] 1 lock held by syz.3.2014/13348: [ 249.026110][ T31] #0: ffff8880320cacd8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 249.037656][ T31] [ 249.040308][ T31] ============================================= [ 249.040308][ T31] [ 249.049426][ T31] NMI backtrace for cpu 0 [ 249.049453][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 249.049476][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.049489][ T31] Call Trace: [ 249.049497][ T31] [ 249.049505][ T31] dump_stack_lvl+0x189/0x250 [ 249.049538][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.049564][ T31] ? __pfx__printk+0x10/0x10 [ 249.049608][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 249.049642][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 249.049674][ T31] ? __pfx__printk+0x10/0x10 [ 249.049708][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 249.049745][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 249.049777][ T31] sys_info+0x135/0x170 [ 249.049800][ T31] watchdog+0xf95/0xfe0 [ 249.049835][ T31] ? watchdog+0x20a/0xfe0 [ 249.049872][ T31] kthread+0x711/0x8a0 [ 249.049903][ T31] ? __pfx_watchdog+0x10/0x10 [ 249.049931][ T31] ? __pfx_kthread+0x10/0x10 [ 249.049960][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.049992][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 249.050012][ T31] ? __pfx_kthread+0x10/0x10 [ 249.050040][ T31] ret_from_fork+0x599/0xb30 [ 249.050064][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 249.050095][ T31] ? __switch_to_asm+0x39/0x70 [ 249.050121][ T31] ? __switch_to_asm+0x33/0x70 [ 249.050146][ T31] ? __pfx_kthread+0x10/0x10 [ 249.050175][ T31] ret_from_fork_asm+0x1a/0x30 [ 249.050220][ T31] [ 249.050233][ T31] Sending NMI from CPU 0 to CPUs 1: [ 249.201333][ C1] NMI backtrace for cpu 1 [ 249.201351][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 249.201370][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.201380][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 249.201402][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 90 0c 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 249.201423][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 249.201439][ C1] RAX: 6532d9c5e7166f00 RBX: ffffffff81978fda RCX: 6532d9c5e7166f00 [ 249.201452][ C1] RDX: 0000000000000001 RSI: ffffffff8d7926cf RDI: ffffffff8bc08360 [ 249.201464][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 249.201476][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f822170 [ 249.201489][ C1] R13: 1ffff110038d4b70 R14: 0000000000000001 R15: 0000000000000001 [ 249.201500][ C1] FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 249.201514][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.201525][ C1] CR2: 00007fb2df5b7198 CR3: 0000000075822000 CR4: 00000000003526f0 [ 249.201540][ C1] Call Trace: [ 249.201547][ C1] [ 249.201554][ C1] default_idle+0x13/0x20 [ 249.201573][ C1] default_idle_call+0x73/0xb0 [ 249.201595][ C1] do_idle+0x1ea/0x520 [ 249.201613][ C1] ? irqentry_exit+0x5ba/0x660 [ 249.201633][ C1] ? __pfx_do_idle+0x10/0x10 [ 249.201660][ C1] cpu_startup_entry+0x44/0x60 [ 249.201679][ C1] start_secondary+0x101/0x110 [ 249.201704][ C1] common_startup_64+0x13e/0x147 [ 249.201735][ C1] [ 249.377747][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 249.384646][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 249.393781][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.403860][ T31] Call Trace: [ 249.407172][ T31] [ 249.410131][ T31] dump_stack_lvl+0x99/0x250 [ 249.414858][ T31] ? __asan_memcpy+0x40/0x70 [ 249.419488][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.424726][ T31] ? __pfx__printk+0x10/0x10 [ 249.429380][ T31] vpanic+0x237/0x6d0 [ 249.433405][ T31] ? __pfx_vpanic+0x10/0x10 [ 249.437937][ T31] ? irqentry_exit+0x5dd/0x660 [ 249.442720][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 249.447944][ T31] panic+0xb9/0xc0 [ 249.451689][ T31] ? __pfx_panic+0x10/0x10 [ 249.456134][ T31] ? __pfx_panic+0x10/0x10 [ 249.460574][ T31] watchdog+0xfdf/0xfe0 [ 249.464757][ T31] ? watchdog+0x20a/0xfe0 [ 249.469110][ T31] kthread+0x711/0x8a0 [ 249.473235][ T31] ? __pfx_watchdog+0x10/0x10 [ 249.477956][ T31] ? __pfx_kthread+0x10/0x10 [ 249.482575][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.487801][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 249.493016][ T31] ? __pfx_kthread+0x10/0x10 [ 249.497622][ T31] ret_from_fork+0x599/0xb30 [ 249.502229][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 249.507368][ T31] ? __switch_to_asm+0x39/0x70 [ 249.512156][ T31] ? __switch_to_asm+0x33/0x70 [ 249.516944][ T31] ? __pfx_kthread+0x10/0x10 [ 249.521569][ T31] ret_from_fork_asm+0x1a/0x30 [ 249.526371][ T31] [ 249.529998][ T31] Kernel Offset: disabled [ 249.534326][ T31] Rebooting in 86400 seconds..