last executing test programs: 20.966946003s ago: executing program 0 (id=2646): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3b, 0x0, &(0x7f00000000c0)=0xe00) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x20002, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f00000006c0)) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb08004500001c000000000001907800000000e0000001110090bda9ee6f28b41c20724e63258382a6eda8cb6363a542f9ef44b7d12e6320a50600ca1ad1d214b30a17677dd9c08a4d3f3c94533320f8fda99a18ddc64dad996931e55e3abd54145cf821761878"], 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000014000305000000000000000002180000", @ANYRES32=r5, @ANYBLOB="08000200ac1414aa661b5074e7c83b1ff4efaf75f949851fd3169a13cd8693d0518e212ce03ec3be46f1aa77568e8676642204578157de2ad4c0f9e0a50cb1ef117b6fc23e0e5bda6487b1935250367b140311ab843da2e06e11e290bfbb23065944b05a9330f950f9ae5c1f287c46021057a95661390816999773deaeae26993ea5d998"], 0x20}}, 0x0) (async, rerun: 64) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async, rerun: 32) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async, rerun: 32) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x8, 0x1}, 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r14, r11, 0x25, 0x2, @val=@tcx}, 0x1c) (async) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00090000000000000000fbdbdf30250a38100000", @ANYRES32=r9, @ANYBLOB="08000800000400001400020020010000000000000000000000000002"], 0x34}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x200}}, 0x1c}}, 0x0) (async, rerun: 32) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) r15 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r15, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) 20.646480524s ago: executing program 0 (id=2653): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = epoll_create(0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYBLOB="7989"], 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x24000000) epoll_pwait(r1, &(0x7f0000000740)=[{}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x88}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) 20.411392069s ago: executing program 0 (id=2658): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e62, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000380)={0xffffffffffffffff}) accept4$inet6(r0, 0x0, &(0x7f0000000080), 0x81000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x6c}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x81200080}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELTABLE={0xe8, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0x1d, 0x6, "08c6ad5ffdc6a2b44f622af495d674e197fbf5f8457ab9d0ca"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x7a, 0x6, "616ec1f2bdde94963d7b506a2a83cde117284e1b704f6bf2611533c8d4e58dff6e98b0824429398cdcdc0f8c53127a014fce9a8d0cc3cf366ab7233debb95551336ab6313f85bbd1dd9d488ffae6eef815521734c06ff0cdd0b348c4b4afc75af8f83e475afe06222424d7f6c783afc5fa43a6527574"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x224, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xdc, 0x6, "b85a6606b662fef289a76c95ca44a72d99ffa714e216eb20991b6f818cfcc84b14199b0b92d0e7c13c68689bbce6bd554fb22bcbe0ca5c13d184232bedf373af6405a4d049ff70aba630f7f01e548d9b8a9e74c354424bca326fa6e3b7978a91cdce1a60a54927d7dc21254b763424c643962a0868973791c38fc156b62b03c6963dcc52b526141678d512a9dc777f43255c7a0600b4d0d1e0cbf312973d8d04c96a2241d3b5b923c8797a803c132994ff6ba42ba3fbca699643f790a661726d397863b42d0d38a96046388cd9cc2ee32812ee78ef2c860e"}, @NFTA_TABLE_USERDATA={0xae, 0x6, "d2adf200fe9d34f058887649781f57a2fe3be8c26b6fa7baf31d9d4248d7c2e78f88ffa300c2e66302d58366a84edb809c7ecc23000d6f1484cd4e5e254d8c04c2a9d74dd49c5d8a5d92099d5eba97f622971909c2c6e25c9ab6f2ffc4fb55408a3a8a30422ccf7bee72c0744bc0c36e296632b19c9cde1334d4331867d09ed8f99769a63b70b33f126de7be080eac2c6105af6616569e8fa190acebcbdf848baf1fd7984793045699f8"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x64, 0x6, "8fbbdb8fb305e70f21feda3cdc2640f4a3231fd39f32b485e83ac7314ebb1afc7896b1efaf16b8e8397945592e206c0bca2bd5329082aec0c0a5075315d2f45f485647fcc0e40b52c696e1bbaab701b9fa3fc16620ce896a3e4ef9e6a6155cd7"}]}, @NFT_MSG_DELFLOWTABLE={0x60, 0x18, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x1e8, 0x0, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_USERDATA={0xd2, 0x6, "6f968fcdcbbaa61fc1d943ea132b13bda41e0b5bc006ed9235e0ec0b2894b6c6022ab40751c3d8cb2aa54b0743d313b703846479d6fea2f94bc3b48d7c5863d292d18b408d672f5ade45b47f460dfef14dd6be3d6c701e86772be3e7db09cff6bdd8c2d68410ea780abe6ac184b6752098fdf1cf68c8933bc3e3a10227f4dfbebc1dc800d314eea61c83538b6020c2a95567e7bceaf958d7461835ed5bd3a95f5a6edbbc6639170b663dc538eb21370bb4bbb0de8532784317d151c2b21e91644de34c969fa3709892f3a7cd45d8"}, @NFTA_TABLE_USERDATA={0x29, 0x6, "6fb03b7549461319e6ddb966e2ca3b22e2fbf98f5a846380db43d715bd09bd44fdf2271465"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x8c, 0x6, "dc14696c324e98e4460261c6235857af1680e7d64e87ea023e939a482aacb04109c604164d5784bfd1bc610022c96a707ef05a119e6a2905049d47387fad57c5df2da06dd82f5822ad2e77cb2fd88579b3528a89f7f9990898a79daaf769c3bb1cc46f9a7d1824fdaad351e20fdc3753ceb8b0eacdd6df95c9acba818dcd73813c1a4c6ca71898ec"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x280, 0x16, 0xa, 0x301, 0x0, 0x0, {0xf, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0xac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x1c0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'dvmrp1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'wlan1\x00'}]}]}]}, @NFT_MSG_DELRULE={0x664, 0x8, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x73}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0xeb, 0x7, 0x1, 0x0, "678ee6c83a738dc295c02118a3271df78bf0acc63ba395269906e84d950fd0120fd9fdc9bfddde53ef64abdd9aa7a391aa82005352aa4ddf08c1efae7001261e43160b143af4cd4e9d1f1a2c763bab6b0d3bbc25aac48f7bc375ff316beb3a5c33d5b2de295ae77c7ee45fde2030350ff0dbb23da0e88bc2eb4bde348221afa977890c66dc99f255488e9ce586e8e219bb67db64ea3f24dd78aa25a45e123cf7ee390a10691888ac95ec274e7e1f122bb3ee6ebe4b6eb120315c483967ca9f835e5e16639a4b40f1aa4bc7c1aaaafe95bd12c2e0605c57c1e35b4d2ec287780abb33805daab47d"}, @NFTA_RULE_USERDATA={0x73, 0x7, 0x1, 0x0, "8a5575729c751be8482dfcea474898fcaa26741d3920558b3a102d538f817e29c4f7ffe4d92a320c70ab4278634409a91b9a0e8a4568aabc08605f03cd62b689d0aea6663b94abbc8343eef9447f600cbb86118e9e0829c20e53c5d4e2a782bcac4ecbf34518643650a24e7db78c8e"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x4c0, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xdfc9}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x418, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x408, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPRESSIONS={0x3e0, 0xa, 0x0, 0x1, [{0x3dc, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x3c8, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_IMMEDIATE_DATA={0x1e0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x91, 0x1, "0898236f89ded27e1eb29653e121377c5d3db6a3ba233c2e69cefe882d3e98070e0cbf25b3065f944b31e84b9b795a482e4e7ad12701f7a0df80ee1cd5e871e070518c4c53993c4692604fab44470f0db409aac4cda84a658c548acb925719675fb57d4a63bbc4e413ddb1bc808cf1f9e6636f965ab4acb4730791226feb7ea735ea2dcd3dd0ef43744db355bc"}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}]}, @NFTA_IMMEDIATE_DATA={0x1dc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "da894700795eea1865ad7b8506c9bf18adc3a91006a0e3ddbad762ee3028eebf5f00f5093cb54943ed673ced62e6973aa14addfc16ec0195b7e7556dd2d5a53b9eba23b13be7fe4692d09ccd29fbb88d9c1d10ddc965dd1c84f090a71088afae3614a0d16f83f5940a2a2527e97ab0a08ed203c634ccf171d84848f9949f4e1ba82218a128f93a077c871553ccc1407390fbc1742c2b748fa873c34d3eb283e21fb3fbd4cc0aed511ed32c747d43859026d30ccbab3a39b989974bd2445e2600da5815724c176e7bfb99b0a7448e41445358dee6feaaed7ac0420a169af7bc3fd832bbe9b925a03554"}, @NFTA_DATA_VALUE={0xcf, 0x1, "eecc43525649d42bebb62feeb596a4afc7b11921e23e0c643093850b29bf0e33fe3985ce8e108612f4c32a7b24cf6b5614a27855002a6dff985b043b1db3143ccb711b8082fa359badb384c2f09916599eccc3b9c87bbd21ebc38425255c1549f2eef476fe5864546842b7caab063119dc2e8261a26de14bd2d7ef640b4604f56a8adb1a057764f3a54369cf24a73ec0c635a06954e48404310527eab92a1ab20b429088829b1e43ab3db43a9c69b9ca6b9c2b8b491f7ef262a6d7ae23591b58cc12177cac38cce3eab471"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}}}]}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x38, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x13}]}}}]}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0x60, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf28}, 0x1, 0x0, 0x0, 0x45}, 0xc800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r7 = socket$inet(0x2, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000a8bc002806fffe8000000000000000000000000000aafe8000000000000000000000000000aa000040", @ANYRES32=0x41424344, @ANYBLOB="a00200009078"], 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x4a, &(0x7f00000000c0)=0x1810, 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\a\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003900000008000300", @ANYRES8=r0, @ANYBLOB="1c005a80180001801400030024000700080001000800050002dd0f"], 0x38}}, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xdc, 0x453, 0x20, 0x70bd29, 0x25dfdbfe, "3d9a9d567f432629fad4f1c8f6eeafcaf1402948f826d337dfadd1771223bcb0f8533e264054e0f278c4eedd02de768b46011df3cae3e8c1f2d489d87490114c791c3a26a24b4d7e8d20d8bb6bd2ba59151ff1fd6fb19d09fafe860e7e6687c9da4ff33a422b515066587a896b11437372c05c053aa325b5cc4a1aa0a1453841b99f4575ce843448be63a2ee080a89b26b60e1cf4bbcdcd0aa038b213c44f06d823d9b7671f4b4ef33ca9157ebd2abee62eb166e0f2126e4495c4a81ce9cc6a04acc811aa0d08eb9b7e20bed", ["", "", "", ""]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000001}, 0x24) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) 20.399234827s ago: executing program 1 (id=2659): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090b000000000000000000000003000600000000000200000000000000000000000000000002000100000000000000fb0200000000030005000000000002000000ac1414aa0000000000000000010008000029"], 0x58}, 0x1, 0x7}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000004480), 0x10) connect$inet6(r1, &(0x7f0000004980)={0xa, 0x4e23, 0x6, @private0, 0x7fff}, 0x1c) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r5, &(0x7f0000000240)="1bd2b76b1c90f6db9b318f5ba150d28b04a2b121cfc2b9c99aeb4116ea5274cb075be342abcc551ae1c107dda8beda60ff5549e1675bbbfa40c75fc6f0c7b40ca882e8baab67cd0f6e93482d85607eee3abaf3ca5b43d04a631d4e2be220e3f6a608a9da6ed6686f2293870f0ca152eff087e65472a6a9f672c226780f9ca5ee2f1fca210c36757ae8acc2715d7486dc3d7a45fa3c4e832f60dfa79333af9ca1779df08a2b729ba35f4f10414511b78d65e813", &(0x7f00000004c0)=""/183}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1016, &(0x7f0000003080)=""/4118, 0x40f00}, 0x90) 20.277312117s ago: executing program 1 (id=2662): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @empty}}}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0xc01, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x0, 0x0, 0x148, 0x0, 0x148, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @rand_addr=0x64010102, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8001, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x278}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000", @ANYRES16=r8, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r12, @ANYBLOB], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x5c, r4, 0x500, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb0}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x2, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x44}}, 0x0) 20.157940664s ago: executing program 0 (id=2665): connect$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x1a, 0x3, &(0x7f0000000f80)=@framed, &(0x7f0000000fc0)='syzkaller\x00', 0x8}, 0x90) 20.063725816s ago: executing program 0 (id=2666): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'syzkaller1\x00', {0x10001}, 0x7}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000080)={0x2, 'syz1\x00'}) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f00000000c0)={0x2, 0x8000, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000100)="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", 0x1000}], 0x1, &(0x7f0000001140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @rand_addr=0x64010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @loopback}}}], 0x40}, 0x84014) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000011c0)={@dev={0xac, 0x14, 0x14, 0x10}, @local, 0x1, 0x2, [@remote, @local]}, 0x18) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001200), 0x8) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000001240), &(0x7f0000001280)=0x4) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000012c0)) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000001300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x18, 0x140b, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000d0) ioctl(r3, 0x4, &(0x7f0000001640)="6121c14544047b3afa716812399e6d58f82ad23e72c00b86a187828bbda3e71fd92e71fd42cbba73c55e8ac95d23c6f7325c75881694faee60b1a16b4a5646fcd976075985dc082fff10993750be747751b4b7dac0b38dbcdc073686f8f5a5b41591db44d513aabcca8ffc75e6e38dcee940595cf9aca603dc85a5980310cd9ad074617396567913a5f08320") syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x38, 0xe, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x800) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001a00)={r2, &(0x7f0000001840)="6c250ac0c619b2b70b1ceb4bd66138643d0864b1bc3aae87f9de8e3fa5d68af5500deae50a023d7f2e26af4793c206a5d708bbb0ea063e0353fdfae2b22fb65422e95d51c53d874aa6878b797e87317e38419b66d03db23aa47ad29d45990d3cf8368217e2bfcdc237be98fba67f399f2afc31351795c1cf33a950511b8b07883997dac2527978c4a9610ba47383718cfe59151a0d84883e573463d5217494dcd0e64119510b88b7f21f903902bf5cb302cc206713adacf0d6da0b1ff51d17cba7eae9775bfa66c40532616ce292eead", &(0x7f0000001940)=@buf="eeb6435dec2fa292c5a6ff885c97fbf97a4c2f145d6789f75fee3e56bbd3c1124315c16ec77427e085ea4147b9de5141fb9f74da93ce29ad7531980fb52a1019eb29ab408220d6ac0169468f3eabd8455947e65f368ab1b7e63ecd054989249b60279ec4f69400b627032e8a2dd2d27985baa98e86f06a8bf15a2d8172c9d926f9838d12cc13dfec499e69e4d7eb9b03c1b77d43afa5e164da32e0348934eb242543d01b55c04bf91d67c47da4a6372ba77fa8fa6da001487cedca7948451d", 0x1}, 0x20) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000001a40)={0x1fc000, 0x6, 0x2, 0xffffffff, 0x3, [0xa, 0x7f, 0xfff, 0xffffffff]}) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ac0), r2) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x44, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x84) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000002f80)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002f40)={&(0x7f0000001c40)={0x12f4, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0xf7, 0x45, "09fe6c0464b8f5f31f9c172bd2f36134ba712f40d3f5e0f4e3b76299b5ae91a634c1e8e9a843dfc14112b5397c18a6ff9d6de8db34316f59f7f940f65629c0c54f5bf96f4ad51dd613546cd729825da54e1f0066fbd3df761cece307d7d753b5650419c87464a0cc9cfa15afb70d800362e4d0e97ff6d0513bbeba4160eb7c4c110b73eeacb0fa9423cc934e634ee7aaa0c62de08872bdea15a3725b2bad3ac4e85bf4786ef4c082a93e4cc0bb88c6ae4d15baf5731b0a842994f1403dee23e87e28b8d083e0c4b79676c9eaedbdb90564611f94114151c681f69f24cf7502d2f5cbc5076b71bb660f7b1dc527b89342bb2ee2"}, @NL80211_ATTR_TESTDATA={0xdd, 0x45, "dddbda7509ed62f3740da5b4b3b73ccb916747e4ebc09ce0539dd5e83ba391f7e154956e8199429995a410745c2acb1908fa32b40b6edca05129ad674dea16ece8925e33eab8a7481a5ab3557d768dd640ce462cbeba40aa22407a23a28eeab08decbbbd8b9f893b81b5fd116d9fb419e8e05ad9e50f6f1f160d32aa04709cec14a8faac6659d2613690c8c2fe2b7718ba503aa0199664c30ec849b26da9427b72b7be78a4c8e43673e530d9be7558c294c3578e50d83d1f541c564d1b29a7e9ac048266b3cbb5611fc809dcdbdf6d450430d78a28944cc97d"}, @NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0xe6, 0x45, "d3b7e426d11e1b27925f869cdf2a862a4713968bab1d758c1ea7c23dc44e62ca344d7c0adae09ff15a95b9562b5417c34c48a0df47f5e9c55c7f0f420fdf3272a0d9f265f64de1a179fd729be5b3d4a6ec1ccb2934fdb1a5ebde367bea74a5a8b891fa72d14c377953c57f13c24d0f84fdb5ac54f0674887a4e3e2b5239f1dc346b8ebda343dbe954632abb40ff78aea1844e88436a25956808cd0ded4e131057b1d99b4ff658034ea641134105246c7677d8e5bd6670782d2c6c8616cd49e71e5397550dabe5f0019dd475f3c3740bb04aa65b7ecbba7c1d4dd38257fc165f7bcc3"}, @NL80211_ATTR_TESTDATA={0x18, 0x45, "7d10245daa9759895314b60cd234f73cdaba7f7f"}]}, 0x12f4}, 0x1, 0x0, 0x0, 0x20000084}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002fc0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000003080)={'ip6gre0\x00', &(0x7f0000003000)={'syztnl0\x00', r6, 0x2f, 0x7, 0xff, 0x5, 0x62735790a1d36773, @local, @private2, 0x8, 0x8000, 0x0, 0x4}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000030c0)=""/54, &(0x7f0000003100)=0x36) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004300)={r2, 0x0, 0x1000, 0xb, &(0x7f0000003140)="4fb23e20c5fb8e151a66d002d7ca2ae7e7c4391368b1874ae9fe70da98faf1b834900052119f236bbab078b26107050a586663138098e31688abaea2d90b2d83737fa093f361849a7d8b4655a23152adb9f1b44c4b3f76df41c1d3f6ed60d83687fd8927dcfec3248514548e1012878f23757604f3d4e0606736b6c682596688ab6b7a5973b85e696396bc364de8241d1908583c1b4bafa09ae565ed4a50953d075a91c9e472e499713a497fe75f64387f9d7a75e319383b2a7807e1a1a4a37a4b1b82be98aafd2efb752fb6753ce2111478890c4b28c857439a9562012d9546325453664cabe1345b1b6cccd8d70547d35180d37dcade40621ee9372410b4199ea1d0adc5c1e129e411737b94c8a57f34ac314d63d5dac188ba3fc367cd180c8960c2acaf4d645cf1d61a3c04cdf7a35e206e37cefc14c9137341722433543c83ac2ce22642e6f39b86605af7ca73750b186282481601a25ec344322fd76e1142002460005a3701c95a06bb7a2302318d07895906b0e0f52a0132ee42107707c30dda883903272728ceb3442259c16e0a7d3142bae08cfdda48cf328728a6841e33e6a09c5783f05b9e90caa5370b3cffdc37c9ee64344a912dfe6ae7c30b464dfcae9fd28db192c47d8cbded74d99ab625d5013e925bad50d48cb24e441e16e1ce230a2197adc913aafe373f39cd68276ad66b47ddcc7ebbe38e9434ef6ea1431e40cfad72d7036cdd74890824cb59815196bd847a0279a8f95755a60578460f4d45a48ebf36a19f06969a3b92d8db0069118e625e7e38b627234624d6142a7b706075c6ac93ff65cf8d77469ee09a78781bc2703862aa1e763be20a8d3ac3274a39287dd72c1b082fc61bfd5abf56d67b138c1187a521ff39359fb66bdc36c28e5a9af9291b9ba5a2b393f5471bd06e27205a211d1ab0d2d7718d5050dd34edab1024a43f7b0989219e7263dad56076d38031e01236c5b12e957d2a7e6d923a880413c8b288ba5ee6bb0e7d6e522ebcc301a173b3ee18c87a440e1754fc8405317e49b99dfbbe440d0ad99b7362381e3a0a3f56d03748af79984987d577d5c2b933bbde2c773db9056375f39827ee3ebd9324e8e5ad027b73be162dab9f167503102f6882a9fdeed8b0cd9288168dbe995991cd5616793b346997c7d1d90a3054cf5d394492d95323f3fb1d291de87cfc44dd3fa5edf51e4f06b188fab77f3c4925e084516246bb92f2cfaaaf0c6e6f59989cfd5898b4d647f22ee9156648b79827c3d976e497f81a75396cae0f3a5731c528970df32f0ee715d8c64a849f7c9a0a479d0710b63633316858c3c6e84c502e593aa5e1d9cdcd53cd4ad2eb17609a33808b1713ff20b8ea10a12caffb9ac3e10ac4a9a7b3bb90d4fe1ef576163c964c3aa59bdb17e67cbe6768d8c207013774392a459ad606143f920241f7806c04daa796d9c193e740433d80921276b1fa82221f1276096bb7704b38ffdf75ebec5c66b29977717f0831ab8a0745563b4b044ec1c330fad27b8bff11b09ff85be2a37a287b202a243a6ba9d19539007407bf173b06c24ebde1b727eb8cca6006bdcbf14f17a859d392d80ed6535439d0d206aa5b86cb0b4013e798d423f61cbbb4fe265c33f938bb6ce22dc0c1f066b2c8278a2157ae9abe1b609a1080d88aaab7a68cd42a0d58fe9b5f5b76a6e4fc17975d7a80ffb22f2c71153cf69286ed338578ab3067c1ea0894e950280928c29274264508313913395557a07c7d637289f45eda34e0444d556f24c9453ac5e43e5df16d57bf4badee58090eb7450db0b2125c1878a54f23f7a487a36dd7a16d53ec36bab9cc9f73c27cbe6ebbee254cfeb50e4bd4a7ccd5ef26c6edba8b2d9c39ec8ed01aa1b23fecc4174800878b4b87ba94bdecbc827407dd55267273e9be326521f94b60c3d0a3bc84f37e486afcb9a8c29e43b3437c542057abc0137a091e9ae1b4d6fc1924cc91a805b9756ac93ce1026f2d0584bae3f1e07a21ebb0b4b61545cb7d72ad356d2504aafe9acc20bb822560ceb43102bdb2177ec32e685586ef94e631c1202ba7054de7552e2521463d78e1cce2466dc11e40c0ec0200f547cb227504c81c9731fbc2d2658e52df5aba37ffbbecc8312dae8fc34e8bb7baa34e1cf5e8270f53356a48ea14cad9427f48a48e74687581e120c162d27d2d5a00e06b96be5a7f1df14a72d17558ee0108876cc2d2cdccbf2bac8c5f9b6be9c00fe0c0d3f47c5b8866c324e5e330a269328527336bf5b899bcab2c7f20c28e8d82fbf3be0386938888476f57676af455c30c0cb7d30cf4aa10e7fa048590be1cf73ccae1b0babcae34c56b8faaa08865f57a01934e4e6e992cfd3d330cffcba6144030c4335dff56356ff1f22bc0e40c9659906e469d9dd16fd9ced53f389a41277a9961679102efe375da020b8e8f6f1252e0e4fdda1bf3be8013233baa67f6f44ce8d46898ed8781a9b615e4e21fbcaa45f27ea9fd01d7031429839356f504a8814458576a87874d8e49a0442715627149daf120f5800dee94c6be91f9c7f0daddc3258e2797a2f2f75db7f5586b61e0798c9cfe7f4488b2da9b9bda9e1a81752ecc75f30ce00515824d08dcfede72b46ebbf4b338cab0f88a8c6a1fa815e0c624f37ef3b6a3a7f1c6b9e3c42e7340a0df146c6453aa8a2d10eadc2e09d84841f9c7c684727fb626ce56b6f2abdcbdd205879e897d8fabd5fab3251bd73cc152834a1c34008e5a5e44453dba984b5260a9fe1c80b5d106338b956466147e1672b753dccf096e418ef3cc4d1eaa3554e9e918dd14aa0e57103b209b168597ad0af406b6e117fee8846686cd98a573a4d7f6bc15d9ec52d1796223d7019497d5d2f0106ff157326efc07be281d6076b186cde2130c886d453a640d0ccead7d9c5206300bb3402128123c7c1bedb71a0d2d52bf8f08d59459c033b749baf64eb22d02ef90651a16768474ad002a2c7e753bad2e8861bc3e0db4a4459b9394b981c0d164a31cc38cff1b4075a135f8ea95296bb268e7683784c7b2288c61f28874210c75d2c6e4719bd5a0e15f351d0be0cfaebb9a935032ab63b22ef122db6bec9d93d87c1be406f66efadf9656bd416f4779b7b512ed994a058ac366004926ce4e546802a2133e5a4ea3e2fdce5a6941237f6f26e9c3b37f2889f851ddddc72c91b4cac997d059421d7ccaca3b9eeb8d270b8754054fb12be6c29a92cd644b88e507baef72d94388406a544e98e6a12d2f635e560d8f28a247cbddfd60b8a19e2b202f49a50f7851ba1567189b5d1c8fef32ea2de5ce34dfa8265fb8c655ae0e5a16272728f65d160277499b2cd9b2f8f81f81988e66f11a8aadf84156203126f7800585f3e9448b9cfd448ac3a9f72acb9ac384999cd17a94e1ff079afce8c572ed91418f7f0a2a7b24691de4cd5368edada873510a6d2376703bbbfd509e810e9b23aea67455472db0bb0af0004d205b58878cb5e594fe81fb64fe3e6c9e08933af8aa6bb6948b10bf6e8794738ac6ad62c0cd554c9e6c6a387f1006a7a3ab3aeb45f399697ada4e7f3feafdba9a9a3219535447277c2e3cd0a1e5a277603e117228bc5593aa0f6f2cff552b18b7ac32e3243ba544df7713d6ceba6316fd13e5823f2e607cd0b7961318fba8950d8a8844fd43f4b367888cdab07d9e330b2684f5e9cb45e4b7b9462ef4f85e3af98504172b00147bc7d678264f4b30c3af85e8088f73efc1d4ee2148d516a1cdd1b8f3da94120e602e7ef0a90a133740464931fba676c5bbc4e3b711fdecbfb40a1618317c991624d8cb5e336e2313337f806bdc3e0e8e6780f198247165e87cc6da2e3d24856ae48209ec734c4f9fa9810ef1bffca34f41e4b03ef69c9af72901c77445a2df13a33a5c3d384ccf7a1ce8abd2233486b1c7e8730c4c98b52d1187725af686d943cb14dd8c7c7061c668a7382d0a956e384e1dea281c66f8a3e3e6a7b7c8273aaaeeddb09a3392009e51e605009ae5c64fe39f2d1af6d39d15cc58209254a929f213fbf9408f65f6d86fc29e3e530e95144df5840456a5ec1c8ac032320b4aee1bf7109d7be0c1c15daac3de8dbf069dda58030841cd75e731d1f1dee9475f9d0318631bb9ff4636cf426bfcd92224392286b1e89458c1a57053cf357c1b298c45f99a6d0a17c9c4426dc2652d3f59a58f733adb42a8ce9afdc62b78a0ec75cc747f820b9f9065c7861aa2bd5a34c2176eae701e0630fd0ff996d34da9b543963f20bc79923dfe3697e0ee74b40587315f1dceb681a756309ccd85d5597b9786911fea5fe448089605cc93960e7ea42c4d9813418e4886606214880290b4974a53cc4c9ee68d1aa56441eb7ae1b07293f03f79ed7008bb277428189368c0683b13ed4f0a669a06da44b878930cd84743926ced49797f7962b07309f4b791a756bc907c3254a63c47647dc8d1a45bc89f81c5067fc97b35ecda1456f5c2b1faace1b9cf17de0f88d8fe2ee4d6612975bf19d4cffa2ed2faefccdcccf341d66618ec890f3dc344d660d87b7a532b65e76e70fcb2e19bfe0f28fe3cf3c77c58406d20574ab30192f3ff5eac4c13803060648d486ea35375a7069557d39698ee46d1789c2d60c8114434503fdf05484f2b08510404738a902abdeaa1f706a6319e9d5537e92ceaefcb6a641c4ef0b1988925ee1211828355aef112cba6c1d332040f11d0a2ffb5db972509e4227ac18d58e68b387d8b95822712cf66095fbf839085372b9bb726bcd835445cd3eab79d471a02fc615c56fe4f34eccc2bd38992b18a0fa74a7ac5e9e140cb58ab36ff4cffdfa5da7ba44ebb9edf2a4b24809acc95738e5f76a1b35c7bd43ec0195690a8784a8f81e7e90db2ad9ea5564f772a0a5267d314ce108994c8d35e8e7b0b46506b7b66e20e13946831f2ea98aead5f76540266809a2ec25dc06cd2c11b808683f51ac6245f8b81767925d04f8b355ae0cd637df16428a29aab76480154acb9bc2868582985c1b88ab6b58820755b2171db7101ec720e8a54546d2aad072446ffd62e118f122cd4b98ac8318f94efdd2664fea5701db013e81d340cb48901f5964a72be82eea930b2eb90bcdd31cb300423980748b110c993b8bef2bedabd6546b4efa305e21c5e7ded7503c9312d664e23d839ec5c45a45e9455017f623a512ebfff2322e9d9c34c494454545a3ceb969753acf27861316960032116c505300c6086b2074ce6aa6e83effc56548217f8e38c38de8b4d83148cf1571dea5c4f714ee5d4c15e479003f679476883329deea7280be21462b9d1af956fb26a53082815d5c86d0063a9f84a9a8128b6de32812fd7d4953b3e9b094e7754b525ec5ed0a0e7374cec93fa9d89785215f595831fd414f2676748068eea8f310274a0c108e04c6eb4ce0e0d9a7c52aa1d74837c866df7855c4314bec8b8e9757da2151f3e8bf24713147125baefb28bdf4a21f03b67c20fece2b7ba74e63bd09ce2791a5b0d759c0bbb3ba0f450a35fe9c581ef04e40a268d32cc0c2ae7519251bae3c5f07311eb4a6fdf9b5350a621a740366d553ed1cfc5219eb55b72532876cf1cc9437c238b297d0ee4597b30692a768589c09297b14dbe73a282a4c84bd0410b1f5e12e688993be14cd34979bd82f174ee00fc5d8c1e3c24307243c1d1f29f827f9ccd4c028787621e58b1d9e0943204209e9ba3343e0eb4c024cc885b9b7f4786abcbbe58bb7e49f048a8f3cea32c50f7b13774fc055d7627c371e807cd203ce6ef9a3bf6007afcb03781d428dfb0d4", &(0x7f0000004140)=""/11, 0xb, 0x0, 0x4e, 0xe0, &(0x7f0000004180)="14c69efa0772a0331be5e7c48b37ee893800b3fdf6eca108e4ab3bb60bd13037b4df8c03dd18a4c0ec94ad9b4170296e5c45f803eaf6cd0f620e1a468ff5627b50670d0b80c632f69939b9078597", &(0x7f0000004200)="2740980a29ee188208fb82c8b8875c5aaaa935ccb7c8fd53be6e5150a0ec2f305941ff21eddb836b3c3a47a29d176dee44e8dbcc3eaf369d946a1df08ff8a7927dfda85943374bd2e4dfdf40e0284af820bc43a2ae001f8075f7ff717ab697152c2e8a1816f0793e7be8b9cc7f5bd2efa699621181244eab8124b8224414c8dfb01d963f6938039de409025e7d3aff11b8007bc145960b355a4ced791e3cb8508a00bd2a8d17a61d0b6334cd5fcdf1869233b9fc2cebd3b3ce6c8b88b5698876cba4d17b364975c9572482cedaaf423f5eec12cd96d3d955d13e3654954a834d", 0x2, 0x0, 0x1000}, 0x50) r7 = socket$rds(0x15, 0x5, 0x0) listen(r7, 0x81) 20.022914794s ago: executing program 1 (id=2668): syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x34}}, 0x240008c0) sendmmsg$sock(r0, &(0x7f0000000000), 0x0, 0x6f27024a55b8d43d) 19.832201843s ago: executing program 1 (id=2671): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={'nr', 0x0}, 0x2, 'syz1\x00', @bcast, 0x3, 0x7, [@default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default]}) ioctl$sock_netrom_SIOCDELRT(r0, 0x8918, 0x0) 19.62689761s ago: executing program 1 (id=2674): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IMGETCOUNT(r0, 0x61d9, 0x0) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000001700)) 19.62563638s ago: executing program 0 (id=2675): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0xfd45}}, 0x0) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="60800290dd"], 0x5) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r9, @ANYBLOB="08000600", @ANYRES32=r7], 0x24}}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, r4, 0x20, 0x70bd2c, 0x25dfdc00, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x805}, 0x40805) 19.380663259s ago: executing program 1 (id=2678): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x1100, 0x0, 0x3, 0x1}, 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f00000004c0)={0x1f, 0x2, 0x4}, 0x6) unshare(0x20000400) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x13c, r6, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1e}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfff8}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9a}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1000}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0xf4, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xf0, 0x0, "1cb29b28a2e5081e41b1c870380024742079066cfe21dac1bc861faae05fb0762a9145ba572e2049c07bc038f6730373e79c8cfadb13d8024525e1a425157650c4677ab9df3db0a9823053acd4b3dfa5e7f620ea4686e2b86dee840068efc9574f98e0f7dca3930510662e678f3958c80e23c12f8ecc02cf920d62be0979dd98807f3cb0c6364d9669ef8ea3ea61888dd1cf9a09422a08c18a9ca83c3a99d10ab6a100f30cb15a3301fffc776cb2d645d5e4cf43cd5016b49a5e7b8880a3539b01ca5f335438bf1b79adf3faf59b033acebf13805604801687b5398d6d9ff4cae98bdc1813c07958368f59f6"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r7, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x8000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000140001800d00010075cba93a73"], 0x28}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @rand_addr=0x64010100, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'erspan0\x00', {0xe}, 0xc3c}) 18.646462908s ago: executing program 4 (id=2679): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0x0, 0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000780)='cgro\x12A\xbd\x9f\xae(Y\xe0\x1b]\xea=\xa6\x04nY\x9c\xd6\x12s\xdc?o\xc6\xb58l3\xec\a\xbf\xb2^\a\xbb\x8f^)BU\x8dGbGEO\bU\xf7\xa3l\xe3\xb8\x97\xab\xb2\x97\xf9\xb5CS==\x8dF8\xf8\xef\xe4<\xd2\xc4\r\x8f|KWg1U\x90j\n^Z\xd8\f\xe4\xd2\x10\xa0\xee|\xa4N\xfe\x13\x9c\xf65>K\x92\xf0mgv\x13\xc9Wm\xf4\x8c\x83\xd0\xb2}\xdd\bc\xf6\x13\x9f_<\x18\xd1'}, 0x30) r2 = openat$cgroup_ro(r1, &(0x7f0000000600)='pids.events\x00', 0x0, 0x0) write$tun(r2, &(0x7f0000000680)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x22041, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x7, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(r3, &(0x7f0000000080)='8', 0x1, 0x65055, &(0x7f0000000340)={0xa, 0x4e20, 0x5, @local, 0x7}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000340)=0x3, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x0, 0x240, 0xffffffff, 0x1a0, 0x0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000711066000000000095000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 18.643515242s ago: executing program 3 (id=2680): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x0, 0x1, 0xa, 0x0, 0x2}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_cmd={0x26, 0x80000001, 0x2, 0x4e, 0x3, 0x0, 0x9, 0x8, 0x6, 0x4, 0x9, 0x4000000, 0x5, 0xb, 0x6, 0x969b, [0xd3, 0x6]}}) (async) syz_emit_ethernet(0x9e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x68, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@srh={0x0, 0x4, 0x4, 0x2, 0x1, 0x0, 0x0, [@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x88, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}]}}}}}}}, 0x0) 18.569608894s ago: executing program 3 (id=2681): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x4e20, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10000, 0x5}, {}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1}}, 0xe8) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x158) recvmmsg(r6, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x0, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x40, r7, 0xcf04d8c4b35cd25, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8014}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r7, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000080) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="5300a06c", @ANYRES8=r2, @ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESOCT=r2], 0x38}}, 0x1) 18.555823627s ago: executing program 4 (id=2682): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x81, 0xd, 0x403}, {0x8, 0x0, 0x6, 0x1}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 18.426741352s ago: executing program 4 (id=2683): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) close(r7) (async) r9 = socket(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async) ioctl$SIOCGETMIFCNT_IN6(r9, 0x89e0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r10, 0x0, 0x22, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}}, 0x8004) 18.416124042s ago: executing program 3 (id=2684): r0 = socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @broadcast}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) accept$packet(r0, 0x0, &(0x7f0000000040)) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0xffffffffffffffd9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f91124fc60100c03", 0x17}], 0x1}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r3, 0x8b32, &(0x7f0000000040)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x44}, 0x1, 0x0, 0x0, 0x4000854}, 0x20000040) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x0, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x5}, {0x8}, {0xb, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newtfilter={0x54, 0x2c, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r1, {0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x0, 0x0, 0x1}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 18.38355991s ago: executing program 4 (id=2685): r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f27, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200048c0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffe}]}}}]}, 0x3c}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(0x3) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x2d, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000300)={0x2d, 0xffffffffffffffff, 0x4001}, 0xc) connect$qrtr(r8, &(0x7f0000000300)={0x2d, 0xffffffff, 0x2}, 0xc) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=r7, @ANYBLOB="00000000f29f7b7e24001280110001006272690200655f736c617665000000000c000580080022007218a43698118cfe9fbf9057fb26eba705e68ce7225948fa9dd8774a5399", @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 18.078708455s ago: executing program 3 (id=2686): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000040)=""/161, 0xa1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000200)={'c', ' *:* ', 'rm\x00'}, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r4 = socket$inet6(0xa, 0x4, 0x3a) sendmmsg$inet6(r4, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1}}], 0x1, 0x40000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(r0) 18.049499612s ago: executing program 4 (id=2687): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x1, 0x2b1c}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1d00000007000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="7a604f9f67e57e6941cf199d38a20005000060"], 0x50) (async) r0 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r0, 0x0, 0x0) (async, rerun: 64) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000000c0)) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c) (async) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x9, 0x4) (async, rerun: 32) sendto$inet6(r1, &(0x7f0000000040)='H', 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) (rerun: 32) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000100100000c"], 0x28, 0xe000}, 0x5}], 0x1, 0x4000090) 17.755128559s ago: executing program 3 (id=2688): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, 0x0, 0x4044) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af2b498}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0xc080) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2e8, 0x128, 0x0, 0x148, 0x128, 0x148, 0x250, 0x240, 0x240, 0x250, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x0, 0x21, 0x45, 0x42}}, @common=@unspec=@connlabel={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0xea9a, 0x7, 'syz0\x00', 'syz0\x00', {0x80000001}}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'vcan0\x00', {0xff}}, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x6, 0x6, 0x1, 'pptp\x00', 'syz1\x00', {0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r5}, 0x57) sendto(r1, &(0x7f0000000380)="185e22a7ad383fc7cdaa442d5f0fe36c1d77cdc3e2699569b2320316a70c8854839f266f950b62d40fbd7e04da1fe0962bfba291e9e5e2a0fdbaedba7704b1e9772d14c05b9224b041b08f1220f8f27b75c4f8f44739794d7ef7f4aec44479e59ec8f91a8e89b574da029cf015678fd4c27e93a3e60efd307379f4d23d147c78999f8233f2b51ae13c845afa781e747270d46ac9", 0x94, 0x10, 0x0, 0x0) 17.550525306s ago: executing program 3 (id=2689): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000100)={r2, 0x3, 0x4, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x2c, r7, 0x5, 0x70bd28, 0x25dfdc00, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x2c}}, 0x4040) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r7, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x9, 0x10, 0x1, 0x9, {{0x8, 0x4, 0x0, 0x0, 0x20, 0x67, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xb}, {[@lsrr={0x83, 0x7, 0xd8, [@remote]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) socket(0x3, 0x80005, 0x1) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f00000002c0)={0x4, 0x1, 0x2, 0x3, 0xfd}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', r8, 0x7800, 0x40, 0xb, 0x0, {{0x33, 0x4, 0x2, 0x3, 0xcc, 0x65, 0x0, 0x48, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty, {[@rr={0x7, 0x1b, 0x6c, [@private=0xa010101, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x22}, @empty, @dev={0xac, 0x14, 0x14, 0x41}]}, @lsrr={0x83, 0x1b, 0x5f, [@multicast2, @private=0xa010101, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x1f}, @local]}, @lsrr={0x83, 0xf, 0xef, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x2c}]}, @rr={0x7, 0x13, 0x53, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x3e}, @loopback]}, @lsrr={0x83, 0x7, 0x8b, [@loopback]}, @end, @generic={0x89, 0x12, "b41a3101c65bb75e41590da47b12483d"}, @timestamp_prespec={0x44, 0x34, 0xd6, 0x3, 0x1, [{@private=0xa030102}, {@private=0xa010102, 0x80000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@rand_addr=0x64010100, 0x7}, {@empty, 0x50e5}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x2}]}, @lsrr={0x83, 0xf, 0x31, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @private=0xa010100]}]}}}}}) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @private=0xa010101}}, 0x0, 0x0, 0x26, 0x0, "d092a6b1adbf494b36e45a72d8156466a5efcf7cf21b327a57a2fb7c94e9c3351ea4edd4e65b4756cf630f89c1262b5231ca6d8143fc866f61a4ecf5733492e0f031023f41062a1ba12ca7d48a46d3ce"}, 0xd8) ppoll(&(0x7f0000000340)=[{r2, 0x10}], 0x1, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x3]}, 0x8) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={'ipvlan1\x00', {0x2, 0x4e23, @private=0xac141436}}) 17.141682503s ago: executing program 4 (id=2690): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) (async) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000011000500000000000300000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000014001a80100004800c00038008000100"], 0x34}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000011000500000000000300000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000014001a80100004800c00038008000100"], 0x34}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000004c0)={@val={0x70}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@lsrr={0x83, 0x3, 0xf2}]}}, {0x5e22, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x3, 0xffffdd86}}}}}}}, 0x42) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz0\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 15.662744285s ago: executing program 2 (id=2704): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=@gettaction={0x28, 0x30, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@fallback=r1, r1, 0x2f, 0x2024, 0x4}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x1bc}}, 0x8044) getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, 0x0, &(0x7f0000000140)) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="00000000000000000000850000008600000095000000002000003464200010000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) 15.561655542s ago: executing program 2 (id=2705): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xa9, &(0x7f0000000180)=""/169}, 0x94) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e1208000b0000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) (async) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xb0}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x46, 0x13, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, @empty, 0x8000, 0x10, 0xffff, 0x9}}) (async, rerun: 64) getpeername$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000700)=0x14) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={0x1, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r12 = socket(0x400000000010, 0x3, 0x0) (async) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r14, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000840)={'erspan0\x00', 0x0, 0x20, 0x40, 0x7edcc4ea, 0x8, {{0x1e, 0x4, 0x1, 0x20, 0x78, 0x67, 0x0, 0x7f, 0x29, 0x0, @local, @local, {[@end, @generic={0x86, 0x6, "6e6b1d76"}, @timestamp_prespec={0x44, 0x14, 0xe0, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000001}, {@multicast2, 0x80000000}]}, @noop, @timestamp={0x44, 0x2c, 0x9b, 0x0, 0x2, [0x8000, 0x7ff, 0x3, 0xffffffb2, 0x9, 0x3, 0x0, 0x6, 0x637, 0x1]}, @rr={0x7, 0x1b, 0xd9, [@private=0xa010102, @remote, @loopback, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x36}]}]}}}}}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000980)={'nr0\x00', 0x0}) (rerun: 64) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001000)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000001300)={0x5f4, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7a646e9e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xaf}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9f}}}]}}, {{0x8, 0x1, r15}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r16}}}]}}, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbea}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2ec}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x5f4}, 0x1, 0x0, 0x0, 0x4841}, 0x880) (async, rerun: 32) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES16=r1, @ANYBLOB="010000000000deff00001b20000008009a00992f53dba2ae39f5ac21e3927e76e729dd2652f39ee166dabbc38f22ccb7c92946753fe20c27e329c487dbc4da09646d60cb23395d674a4547632b87a7d0c188f90edae485c43908ee17b2117f88f2892a6d06ef012a0ed8e688dc306b986bd3fb5a0e24a51149a6e5daf12841613df7e1c3e1beb83132bc8ec8973cca67b489ac4483715e1d24137b"], 0x1c}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r18 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r18, 0x8933, &(0x7f0000000340)) 15.475540189s ago: executing program 2 (id=2706): r0 = socket$inet6(0xa, 0x2, 0x36) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000580)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xe}}], 0x18}}], 0x1, 0x40000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00'}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x2, 0x2, 0x2, 0x0, [@mcast2]}]}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500382c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b0002"], 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="41e66ecd82a8acb7269bcb7f8513f7c49c1fd8e98c13401183b9e1106b6e6757c44d1968de89344e8b8f066766250cfe8f8a49c95a87eea9805f981d6b6dc3f63ef864e8fba7e11b64c6ab8da62132258d96699cdc04ac7264fb71a5afd47c002b1710175d710a786854906e2b89749430803094919a5acfd110fb6e52d6bb", 0x7f}, {&(0x7f0000000080)="603e480ca526d9", 0x7}], 0x2) 15.282879473s ago: executing program 2 (id=2707): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33}, {0x0, [0x0]}}, 0x0, 0x1b}, 0x28) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000002"], 0xb8}}, 0x4040080) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000240)=@ethtool_perm_addr}) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0xa, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x11) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x18, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000210001fdffffffffffffff00ac1ee100000000002000000000000000403403f438bd9e28000000000000000000000000000000000a0000edffffff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011"], 0xec}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) 15.187829888s ago: executing program 2 (id=2708): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xc03, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x10) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xffffffff) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) sendmsg$netlink(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000ac0)={0x10, 0x2a, 0x800, 0x70bd27, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r5, &(0x7f0000000300)='\x00', 0x1, 0x48000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) close(r5) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@mcast1, 0x4, r1}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c000680080001"], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 15.123311443s ago: executing program 2 (id=2709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x23, 0x5, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) 4.096970785s ago: executing program 32 (id=2675): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0xfd45}}, 0x0) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="60800290dd"], 0x5) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r9, @ANYBLOB="08000600", @ANYRES32=r7], 0x24}}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, r4, 0x20, 0x70bd2c, 0x25dfdc00, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x805}, 0x40805) 4.054372804s ago: executing program 33 (id=2678): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x1100, 0x0, 0x3, 0x1}, 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f00000004c0)={0x1f, 0x2, 0x4}, 0x6) unshare(0x20000400) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x13c, r6, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1e}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfff8}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9a}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1000}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0xf4, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xf0, 0x0, "1cb29b28a2e5081e41b1c870380024742079066cfe21dac1bc861faae05fb0762a9145ba572e2049c07bc038f6730373e79c8cfadb13d8024525e1a425157650c4677ab9df3db0a9823053acd4b3dfa5e7f620ea4686e2b86dee840068efc9574f98e0f7dca3930510662e678f3958c80e23c12f8ecc02cf920d62be0979dd98807f3cb0c6364d9669ef8ea3ea61888dd1cf9a09422a08c18a9ca83c3a99d10ab6a100f30cb15a3301fffc776cb2d645d5e4cf43cd5016b49a5e7b8880a3539b01ca5f335438bf1b79adf3faf59b033acebf13805604801687b5398d6d9ff4cae98bdc1813c07958368f59f6"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r7, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x8000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000140001800d00010075cba93a73"], 0x28}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @rand_addr=0x64010100, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'erspan0\x00', {0xe}, 0xc3c}) 2.041572541s ago: executing program 34 (id=2689): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000100)={r2, 0x3, 0x4, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x2c, r7, 0x5, 0x70bd28, 0x25dfdc00, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x2c}}, 0x4040) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r7, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x9, 0x10, 0x1, 0x9, {{0x8, 0x4, 0x0, 0x0, 0x20, 0x67, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xb}, {[@lsrr={0x83, 0x7, 0xd8, [@remote]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) socket(0x3, 0x80005, 0x1) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f00000002c0)={0x4, 0x1, 0x2, 0x3, 0xfd}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', r8, 0x7800, 0x40, 0xb, 0x0, {{0x33, 0x4, 0x2, 0x3, 0xcc, 0x65, 0x0, 0x48, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty, {[@rr={0x7, 0x1b, 0x6c, [@private=0xa010101, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x22}, @empty, @dev={0xac, 0x14, 0x14, 0x41}]}, @lsrr={0x83, 0x1b, 0x5f, [@multicast2, @private=0xa010101, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x1f}, @local]}, @lsrr={0x83, 0xf, 0xef, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x2c}]}, @rr={0x7, 0x13, 0x53, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x3e}, @loopback]}, @lsrr={0x83, 0x7, 0x8b, [@loopback]}, @end, @generic={0x89, 0x12, "b41a3101c65bb75e41590da47b12483d"}, @timestamp_prespec={0x44, 0x34, 0xd6, 0x3, 0x1, [{@private=0xa030102}, {@private=0xa010102, 0x80000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@rand_addr=0x64010100, 0x7}, {@empty, 0x50e5}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x2}]}, @lsrr={0x83, 0xf, 0x31, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @private=0xa010100]}]}}}}}) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @private=0xa010101}}, 0x0, 0x0, 0x26, 0x0, "d092a6b1adbf494b36e45a72d8156466a5efcf7cf21b327a57a2fb7c94e9c3351ea4edd4e65b4756cf630f89c1262b5231ca6d8143fc866f61a4ecf5733492e0f031023f41062a1ba12ca7d48a46d3ce"}, 0xd8) ppoll(&(0x7f0000000340)=[{r2, 0x10}], 0x1, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x3]}, 0x8) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={'ipvlan1\x00', {0x2, 0x4e23, @private=0xac141436}}) 2.01630633s ago: executing program 35 (id=2690): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) (async) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000011000500000000000300000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000014001a80100004800c00038008000100"], 0x34}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000011000500000000000300000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000014001a80100004800c00038008000100"], 0x34}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000004c0)={@val={0x70}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@lsrr={0x83, 0x3, 0xf2}]}}, {0x5e22, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x3, 0xffffdd86}}}}}}}, 0x42) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz0\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 0s ago: executing program 36 (id=2709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x23, 0x5, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) kernel console output (not intermixed with test programs): d length. [ 114.406968][ T7298] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 114.445053][ T7298] netlink: zone id is out of range [ 114.450268][ T7298] netlink: zone id is out of range [ 114.455970][ T7298] netlink: zone id is out of range [ 114.461588][ T7298] netlink: zone id is out of range [ 114.469056][ T7298] netlink: zone id is out of range [ 114.480565][ T7298] netlink: zone id is out of range [ 114.488316][ T7298] netlink: zone id is out of range [ 114.495448][ T7298] netlink: zone id is out of range [ 114.501462][ T7301] delete_channel: no stack [ 114.503524][ T7298] netlink: zone id is out of range [ 114.511230][ T7298] netlink: zone id is out of range [ 115.013638][ T30] audit: type=1804 audit(1760228888.118:5): pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.391" name="/newroot/74/cgroup.controllers" dev="tmpfs" ino=393 res=1 errno=0 [ 115.102280][ T30] audit: type=1800 audit(1760228888.138:6): pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.391" name="cgroup.controllers" dev="tmpfs" ino=393 res=0 errno=0 [ 115.224239][ T7344] netlink: 'syz.2.394': attribute type 10 has an invalid length. [ 115.287587][ T7344] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 115.320628][ T7344] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 115.348723][ T7353] netlink: 'syz.1.398': attribute type 10 has an invalid length. [ 115.411284][ T7356] __nla_validate_parse: 70 callbacks suppressed [ 115.411303][ T7356] netlink: 192 bytes leftover after parsing attributes in process `syz.1.398'. [ 115.424041][ T7355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.399'. [ 115.456933][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.398'. [ 115.485502][ T7355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.399'. [ 115.495560][ T7353] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.536124][ T7353] bridge_slave_1: left allmulticast mode [ 115.542554][ T7353] bridge_slave_1: left promiscuous mode [ 115.548605][ T7353] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.599575][ T7353] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 115.629841][ T7355] bridge0: port 1(vlan2) entered blocking state [ 115.674832][ T7355] bridge0: port 1(vlan2) entered disabled state [ 115.681919][ T7355] vlan2: entered allmulticast mode [ 115.687254][ T7355] bridge0: entered allmulticast mode [ 115.707924][ T7355] vlan2: left allmulticast mode [ 115.714989][ T7355] bridge0: left allmulticast mode [ 115.746875][ T7370] netlink: 24 bytes leftover after parsing attributes in process `syz.3.404'. [ 115.917144][ T7379] netlink: 20 bytes leftover after parsing attributes in process `syz.0.407'. [ 116.078244][ T7383] syzkaller0: entered promiscuous mode [ 116.102274][ T7383] syzkaller0: entered allmulticast mode [ 116.625174][ T7424] netlink: 'syz.2.418': attribute type 1 has an invalid length. [ 116.773227][ T7433] netlink: 'syz.3.422': attribute type 1 has an invalid length. [ 116.884571][ T7439] netlink: 'syz.1.425': attribute type 1 has an invalid length. [ 116.895865][ T7439] netlink: 228 bytes leftover after parsing attributes in process `syz.1.425'. [ 116.905302][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 116.925170][ T12] wlan1: Trigger new scan to find an IBSS to join [ 116.938781][ T7445] netlink: 'syz.0.423': attribute type 4 has an invalid length. [ 116.977596][ T7447] tipc: Enabling of bearer rejected, already enabled [ 117.013608][ T7447] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 117.032984][ T7451] netlink: 20 bytes leftover after parsing attributes in process `syz.1.427'. [ 117.038564][ T7447] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 117.059323][ T7447] tipc: Resetting bearer [ 117.157483][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'. [ 117.259435][ T7464] 8021q: VLANs not supported on gre0 [ 117.364257][ T7469] netlink: 'syz.1.434': attribute type 23 has an invalid length. [ 117.840135][ T3509] wlan1: Creating new IBSS network, BSSID 2a:94:75:6a:b1:c9 [ 117.880150][ T7509] netlink: 'syz.1.446': attribute type 33 has an invalid length. [ 118.160562][ T7529] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 119.149095][ T7560] tipc: Started in network mode [ 119.157162][ T7560] tipc: Node identity eaa0440ac326, cluster identity 4711 [ 119.165920][ T7560] tipc: Enabled bearer , priority 0 [ 119.288815][ T7560] tipc: Resetting bearer [ 119.430451][ T7586] netlink: 'syz.4.471': attribute type 1 has an invalid length. [ 120.274573][ T9] tipc: Node number set to 696665098 [ 120.304511][ T7560] tipc: Disabling bearer [ 120.315108][ T7590] C: renamed from lo [ 120.658978][ T7605] __nla_validate_parse: 71 callbacks suppressed [ 120.658996][ T7605] netlink: 7 bytes leftover after parsing attributes in process `syz.3.478'. [ 120.684247][ T7605] bridge0: entered promiscuous mode [ 120.705013][ T7604] netlink: 44 bytes leftover after parsing attributes in process `syz.4.480'. [ 120.720413][ T7607] Illegal XDP return value 1412832477 on prog (id 80) dev N/A, expect packet loss! [ 120.773751][ T7613] nft_compat: unsupported protocol 0 [ 121.848306][ T7640] netlink: 'syz.4.489': attribute type 39 has an invalid length. [ 121.975263][ T5885] block nbd0: NBD_DISCONNECT [ 122.226301][ T7655] hsr0 speed is unknown, defaulting to 1000 [ 122.240230][ T7654] netlink: 312 bytes leftover after parsing attributes in process `syz.1.493'. [ 122.254641][ T7655] hsr0 speed is unknown, defaulting to 1000 [ 122.264724][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'. [ 122.284061][ T7655] hsr0 speed is unknown, defaulting to 1000 [ 122.389491][ T7655] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 122.482991][ T7655] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 122.630594][ T7655] hsr0 speed is unknown, defaulting to 1000 [ 122.639905][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.500'. [ 122.675339][ T7655] hsr0 speed is unknown, defaulting to 1000 [ 122.695839][ T7655] hsr0 speed is unknown, defaulting to 1000 [ 122.732529][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.501'. [ 122.746948][ T7678] vlan2: entered allmulticast mode [ 122.765197][ T7678] bond0: entered allmulticast mode [ 122.800499][ T7655] hsr0 speed is unknown, defaulting to 1000 [ 122.965836][ T7655] hsr0 speed is unknown, defaulting to 1000 [ 123.249836][ T7718] hsr0 speed is unknown, defaulting to 1000 [ 123.272018][ T7721] netlink: 9896 bytes leftover after parsing attributes in process `syz.4.506'. [ 123.321026][ T7710] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 123.908121][ T7735] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 123.957652][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.510'. [ 124.227048][ T7751] net_ratelimit: 355 callbacks suppressed [ 124.227066][ T7751] syz_tun: mtu less than device minimum [ 124.344490][ T5837] hid-generic 0005:046D:5505.0001: unknown main item tag 0x0 [ 124.412872][ T5837] hid-generic 0005:046D:5505.0001: unknown main item tag 0x0 [ 124.487802][ T5837] hid-generic 0005:046D:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 124.790275][ T7788] bridge: RTM_NEWNEIGH with invalid ether address [ 125.045963][ T7808] netlink: 64 bytes leftover after parsing attributes in process `syz.0.528'. [ 125.151284][ T7813] netlink: 'syz.4.530': attribute type 1 has an invalid length. [ 125.491441][ T7829] netlink: 'syz.1.537': attribute type 3 has an invalid length. [ 125.601157][ T7838] netlink: 'syz.3.540': attribute type 1 has an invalid length. [ 125.667520][ T7838] netlink: 15 bytes leftover after parsing attributes in process `syz.3.540'. [ 125.708351][ T7847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.543'. [ 125.766673][ T7847] netlink: 'syz.0.543': attribute type 4 has an invalid length. [ 125.780638][ T7847] netlink: 152 bytes leftover after parsing attributes in process `syz.0.543'. [ 125.822798][ T7847] wlan1: mtu less than device minimum [ 126.026143][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.548'. [ 126.036245][ T7860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.548'. [ 126.061635][ T51] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.092555][ T974] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.104938][ T974] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.118398][ T974] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.914532][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.920854][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.154317][ T51] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 147.926776][ T1143] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 151.629301][ T7889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.551'. [ 151.653483][ T7889] netlink: 'syz.2.551': attribute type 11 has an invalid length. [ 151.680456][ T7889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.551'. [ 151.682231][ T1143] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.721324][ T7895] netlink: 52 bytes leftover after parsing attributes in process `syz.2.551'. [ 151.747027][ T1143] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.782096][ T1143] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.787280][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.556'. [ 151.790843][ T1143] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.812528][ T7889] netlink: 'syz.2.551': attribute type 11 has an invalid length. [ 151.913881][ T7901] Cannot find del_set index 4 as target [ 152.627016][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.568'. [ 152.653738][ T7949] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 152.683520][ T7950] sch_fq: defrate 0 ignored. [ 152.696758][ T7951] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 152.740263][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.570'. [ 152.841942][ T7960] netlink: 48 bytes leftover after parsing attributes in process `syz.3.573'. [ 152.896219][ T7962] openvswitch: netlink: Flow key attr not present in new flow. [ 152.935347][ T7962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.574'. [ 153.003473][ T7967] netlink: 36 bytes leftover after parsing attributes in process `syz.1.576'. [ 153.129324][ T7978] netlink: 40 bytes leftover after parsing attributes in process `syz.2.578'. [ 153.376920][ T7992] netlink: 'syz.1.582': attribute type 4 has an invalid length. [ 153.580206][ T8003] syz.3.587 uses old SIOCAX25GETINFO [ 153.867472][ T8017] syzkaller0: entered promiscuous mode [ 153.912339][ T8017] syzkaller0: entered allmulticast mode [ 153.915515][ T8021] netlink: 'syz.0.595': attribute type 1 has an invalid length. [ 154.009043][ T8021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.045011][ T8030] bond2: (slave geneve2): making interface the new active one [ 154.084076][ T8030] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 154.489616][ T8054] team0: Device gtp0 is of different type [ 154.588978][ T8061] netlink: 'syz.3.607': attribute type 1 has an invalid length. [ 154.609909][ T8061] netlink: 'syz.3.607': attribute type 10 has an invalid length. [ 154.794496][ T8075] netlink: 'syz.3.612': attribute type 1 has an invalid length. [ 154.855959][ T8075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.922044][ T8080] netlink: 'syz.4.613': attribute type 5 has an invalid length. [ 154.945246][ T8078] bond1: Unable to set down delay as MII monitoring is disabled [ 154.956955][ T8078] bond1 (unregistering): Released all slaves [ 154.995650][ T8075] bond0: entered allmulticast mode [ 155.023619][ T8090] tipc: MTU too low for tipc bearer [ 155.816773][ T8139] tipc: Enabling of bearer rejected, failed to enable media [ 155.968024][ T8147] bridge2: entered promiscuous mode [ 156.104252][ T8145] nbd1: detected capacity change from 0 to 63 [ 156.110452][ T8154] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 156.138649][ T5844] block nbd1: Receive control failed (result -32) [ 156.148740][ T7903] block nbd1: Dead connection, failed to find a fallback [ 156.156712][ T7903] block nbd1: shutting down sockets [ 156.162356][ T7903] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.172649][ T7903] Buffer I/O error on dev nbd1, logical block 0, async page read [ 156.180747][ T7903] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.190534][ T7903] Buffer I/O error on dev nbd1, logical block 1, async page read [ 156.198772][ T7903] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.208385][ T7903] Buffer I/O error on dev nbd1, logical block 2, async page read [ 156.216503][ T7903] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.226276][ T7903] Buffer I/O error on dev nbd1, logical block 3, async page read [ 156.234720][ T7903] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.244276][ T7903] Buffer I/O error on dev nbd1, logical block 0, async page read [ 156.262344][ T7903] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.271450][ T7903] Buffer I/O error on dev nbd1, logical block 1, async page read [ 156.332658][ T7903] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.358717][ T8162] ieee802154 phy0 wpan0: encryption failed: -22 [ 156.366883][ T7903] Buffer I/O error on dev nbd1, logical block 2, async page read [ 156.381428][ T8162] x_tables: duplicate underflow at hook 1 [ 156.388077][ T7903] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.402716][ T7903] Buffer I/O error on dev nbd1, logical block 3, async page read [ 156.410817][ T7903] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.420203][ T7903] Buffer I/O error on dev nbd1, logical block 0, async page read [ 156.449604][ T7903] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.459594][ T7903] Buffer I/O error on dev nbd1, logical block 1, async page read [ 156.474046][ T7903] ldm_validate_partition_table(): Disk read failed. [ 156.484125][ T7903] Dev nbd1: unable to read RDB block 0 [ 156.492025][ T7903] nbd1: unable to read partition table [ 156.517614][ T7903] ldm_validate_partition_table(): Disk read failed. [ 156.528125][ T7903] Dev nbd1: unable to read RDB block 0 [ 156.549944][ T7903] nbd1: unable to read partition table [ 157.380720][ T8200] __nla_validate_parse: 22 callbacks suppressed [ 157.380739][ T8200] netlink: 4496 bytes leftover after parsing attributes in process `syz.2.645'. [ 157.381662][ T8198] netlink: 40 bytes leftover after parsing attributes in process `syz.4.649'. [ 157.402188][ T8200] openvswitch: netlink: Flow key attr not present in new flow. [ 157.419230][ T8191] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 157.423944][ T8198] netlink: 40 bytes leftover after parsing attributes in process `syz.4.649'. [ 157.426419][ T43] IPVS: starting estimator thread 0... [ 157.437866][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'. [ 157.483139][ T8200] : renamed from lo (while UP) [ 157.532995][ T8201] IPVS: using max 29 ests per chain, 69600 per kthread [ 157.674802][ T8209] hsr0 speed is unknown, defaulting to 1000 [ 157.698847][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.652'. [ 157.698847][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.652'. [ 158.438182][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.659'. [ 158.475163][ T8242] netlink: 'syz.4.659': attribute type 8 has an invalid length. [ 158.647561][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.664'. [ 158.664272][ T8250] netlink: 'syz.3.661': attribute type 5 has an invalid length. [ 158.683999][ T8265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.664'. [ 158.724161][ T8265] netlink: 'syz.4.664': attribute type 20 has an invalid length. [ 158.753511][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.664'. [ 158.768252][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.778042][ T8265] netlink: 'syz.4.664': attribute type 20 has an invalid length. [ 158.788496][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.808783][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.841707][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.878868][ T8276] tipc: Can't bind to reserved service type 0 [ 158.951948][ T8285] netlink: 'syz.1.669': attribute type 21 has an invalid length. [ 159.017571][ T8292] netlink: 'syz.1.669': attribute type 58 has an invalid length. [ 159.045999][ T8285] netlink: 'syz.1.669': attribute type 58 has an invalid length. [ 159.247779][ T8302] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 159.267478][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 159.309053][ T8302] syzkaller0: entered promiscuous mode [ 159.324379][ T8302] syzkaller0: entered allmulticast mode [ 159.595192][ T8322] netlink: 'syz.0.680': attribute type 7 has an invalid length. [ 159.679599][ T51] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.680171][ T8322] netlink: 'syz.0.680': attribute type 7 has an invalid length. [ 159.698880][ T50] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.732029][ T50] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.772880][ T50] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.790369][ T8332] syzkaller1: entered promiscuous mode [ 159.811327][ T8332] syzkaller1: entered allmulticast mode [ 160.134562][ T8351] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 160.450354][ T8378] netlink: 'syz.1.694': attribute type 10 has an invalid length. [ 160.459649][ T8378] bridge0: port 2(team0) entered blocking state [ 160.472139][ T8378] bridge0: port 2(team0) entered disabled state [ 160.507540][ T8378] team0: entered allmulticast mode [ 160.541738][ T8378] team_slave_0: entered allmulticast mode [ 160.551750][ T8378] team_slave_1: entered allmulticast mode [ 160.568235][ T8378] team0: entered promiscuous mode [ 160.574851][ T8378] team_slave_0: entered promiscuous mode [ 160.576864][ T8387] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 160.581297][ T8378] team_slave_1: entered promiscuous mode [ 160.598201][ T8378] bridge0: port 2(team0) entered blocking state [ 160.604635][ T8378] bridge0: port 2(team0) entered forwarding state [ 160.762231][ T8405] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 160.995253][ T5843] Bluetooth: hci3: command 0x0405 tx timeout [ 161.109161][ T8428] gtp0: entered promiscuous mode [ 161.120203][ T8428] gtp0: entered allmulticast mode [ 161.259093][ T8439] pim6reg: entered allmulticast mode [ 161.288058][ T8439] pim6reg: left allmulticast mode [ 161.416599][ T8448] syzkaller1: entered promiscuous mode [ 161.431581][ T8448] syzkaller1: entered allmulticast mode [ 161.473317][ T8455] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 161.521634][ T8457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.908787][ T8476] veth1_macvtap: left promiscuous mode [ 161.915549][ T8476] macsec0: entered promiscuous mode [ 161.921054][ T8476] macsec0: entered allmulticast mode [ 161.945231][ T8476] veth1_macvtap: entered promiscuous mode [ 161.966036][ T8476] veth1_macvtap: entered allmulticast mode [ 161.977236][ T8476] macsec0: left promiscuous mode [ 161.983781][ T8476] macsec0: left allmulticast mode [ 161.989199][ T8476] veth1_macvtap: left allmulticast mode [ 162.141262][ T8491] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 162.579838][ T8514] 8021q: adding VLAN 0 to HW filter on device bond4 [ 162.625817][ T8514] bond3: (slave bond4): making interface the new active one [ 162.653928][ T8514] bond3: (slave bond4): Enslaving as an active interface with an up link [ 162.687545][ T8514] __nla_validate_parse: 10 callbacks suppressed [ 162.687563][ T8514] netlink: 28 bytes leftover after parsing attributes in process `syz.0.727'. [ 162.769939][ T8514] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.806733][ T8540] raw_sendmsg: syz.2.734 forgot to set AF_INET. Fix it! [ 162.944220][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 163.014084][ T8545] netlink: 260 bytes leftover after parsing attributes in process `syz.3.735'. [ 163.040448][ T8545] netlink: 152 bytes leftover after parsing attributes in process `syz.3.735'. [ 163.065481][ T8547] netlink: 24 bytes leftover after parsing attributes in process `syz.2.736'. [ 163.348359][ T8561] netlink: 20 bytes leftover after parsing attributes in process `syz.0.738'. [ 163.529445][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.740'. [ 163.828274][ T8574] vlan3: entered promiscuous mode [ 163.842743][ T8574] bond0: entered promiscuous mode [ 163.847898][ T8574] bond_slave_0: entered promiscuous mode [ 163.854597][ T8574] bond_slave_1: entered promiscuous mode [ 163.861529][ T8574] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 164.178917][ T8600] netlink: 76 bytes leftover after parsing attributes in process `syz.1.746'. [ 164.263304][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'. [ 164.584087][ T8624] validate_nla: 2 callbacks suppressed [ 164.584104][ T8624] netlink: 'syz.1.752': attribute type 2 has an invalid length. [ 164.634144][ T8624] netlink: 244 bytes leftover after parsing attributes in process `syz.1.752'. [ 164.710573][ T8634] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 165.188128][ T8666] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.359261][ T8677] netlink: 'syz.1.765': attribute type 2 has an invalid length. [ 165.440387][ T8671] hsr0 speed is unknown, defaulting to 1000 [ 165.576476][ T8688] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004 [ 165.883177][ T8703] netlink: 'syz.2.770': attribute type 4 has an invalid length. [ 165.941648][ T8708] netlink: 'syz.3.775': attribute type 1 has an invalid length. [ 166.100558][ T8726] netlink: 'syz.4.779': attribute type 1 has an invalid length. [ 166.119349][ T8720] bond2: (slave geneve2): making interface the new active one [ 166.128971][ T8720] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 166.244458][ T50] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 166.256398][ T36] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 166.268707][ T36] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 166.321853][ T36] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 166.636764][ T8754] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 166.870734][ T8762] netlink: 'syz.0.788': attribute type 7 has an invalid length. [ 166.943828][ T8765] syzkaller0: entered promiscuous mode [ 166.980957][ T8765] syzkaller0: entered allmulticast mode [ 167.647771][ T8803] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 167.789603][ T8809] __nla_validate_parse: 45 callbacks suppressed [ 167.789622][ T8809] netlink: 16 bytes leftover after parsing attributes in process `syz.2.801'. [ 168.007961][ T8813] syzkaller0: entered promiscuous mode [ 168.013568][ T8813] syzkaller0: entered allmulticast mode [ 174.512156][ T1143] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 178.851375][ T1143] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 192.345367][ T8850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.808'. [ 192.363891][ T8845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.807'. [ 192.477468][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.806'. [ 192.568740][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.812'. [ 192.580299][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.812'. [ 192.738789][ T8878] netlink: 'syz.1.815': attribute type 4 has an invalid length. [ 192.750764][ T8881] netlink: 256 bytes leftover after parsing attributes in process `syz.3.814'. [ 192.910249][ T8887] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 192.956111][ T8887] bridge_slave_0: left allmulticast mode [ 192.962059][ T8887] bridge_slave_0: left promiscuous mode [ 192.976049][ T8887] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.004179][ T8887] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.048884][ T8887] bond0: (slave bond_slave_0): Releasing backup interface [ 193.067032][ T8887] bond_slave_0: left promiscuous mode [ 193.104004][ T8887] bond0: (slave bond_slave_1): Releasing backup interface [ 193.125637][ T8887] bond_slave_1: left promiscuous mode [ 193.161676][ T8887] team0: Port device team_slave_0 removed [ 193.183702][ T8887] team0: Port device team_slave_1 removed [ 193.195576][ T8887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.222397][ T8887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.253197][ T8887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.278800][ T8887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.293287][ T8887] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 193.375999][ T8915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.826'. [ 193.520785][ T8924] netlink: 56 bytes leftover after parsing attributes in process `syz.1.829'. [ 193.536188][ T8923] netlink: 16 bytes leftover after parsing attributes in process `syz.0.828'. [ 193.546937][ T8924] netlink: 56 bytes leftover after parsing attributes in process `syz.1.829'. [ 194.001042][ T8949] xt_TCPMSS: Only works on TCP SYN packets [ 194.004610][ T8947] syzkaller0: entered promiscuous mode [ 194.022176][ T8947] syzkaller0: entered allmulticast mode [ 194.359183][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.365824][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.398324][ T8972] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 194.484412][ T8980] netlink: 'syz.0.848': attribute type 58 has an invalid length. [ 195.185883][ T9030] netlink: 'syz.4.862': attribute type 1 has an invalid length. [ 195.400599][ T9045] veth0: entered promiscuous mode [ 195.585431][ T9060] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.604204][ T9060] netlink: 'syz.4.870': attribute type 1 has an invalid length. [ 195.796394][ T9070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.915130][ T9070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.039334][ T9082] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 196.088386][ T9084] netlink: 'syz.0.879': attribute type 29 has an invalid length. [ 196.097198][ T9084] netlink: 'syz.0.879': attribute type 29 has an invalid length. [ 196.149704][ T9037] veth0: left promiscuous mode [ 196.190007][ T9089] netlink: 'syz.3.881': attribute type 6 has an invalid length. [ 196.190989][ T9087] IPVS: Unknown mcast interface: netpci0 [ 196.350627][ T9099] sctp: [Deprecated]: syz.0.886 (pid 9099) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.350627][ T9099] Use struct sctp_sack_info instead [ 196.604710][ T9116] xt_NFQUEUE: number of total queues is 0 [ 197.141603][ T9151] netlink: 'syz.3.900': attribute type 4 has an invalid length. [ 197.177573][ T9155] xt_l2tp: missing protocol rule (udp|l2tpip) [ 197.374290][ T9166] __nla_validate_parse: 14 callbacks suppressed [ 197.374311][ T9166] netlink: 60 bytes leftover after parsing attributes in process `syz.0.904'. [ 197.454557][ T9166] netlink: 52 bytes leftover after parsing attributes in process `syz.0.904'. [ 197.472061][ T9166] netlink: 52 bytes leftover after parsing attributes in process `syz.0.904'. [ 197.614409][ T9179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.909'. [ 197.652327][ T9179] netlink: 56 bytes leftover after parsing attributes in process `syz.3.909'. [ 197.676143][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 197.688801][ T9186] netlink: 14 bytes leftover after parsing attributes in process `syz.0.911'. [ 197.732371][ T9183] tipc: Started in network mode [ 197.739849][ T9190] netlink: 14 bytes leftover after parsing attributes in process `syz.0.911'. [ 197.748926][ T9183] tipc: Node identity 069ffd14a2bc, cluster identity 4711 [ 197.749142][ T9183] tipc: Enabled bearer , priority 0 [ 197.793939][ T9183] syzkaller0: entered promiscuous mode [ 197.809968][ T9183] syzkaller0: entered allmulticast mode [ 197.888424][ T9183] tipc: Resetting bearer [ 197.905255][ T9182] tipc: Resetting bearer [ 197.968984][ T9182] tipc: Disabling bearer [ 198.003717][ T9200] netlink: 'syz.0.915': attribute type 33 has an invalid length. [ 198.007390][ T9202] netlink: 36 bytes leftover after parsing attributes in process `syz.2.916'. [ 198.043941][ T9200] netlink: 'syz.0.915': attribute type 11 has an invalid length. [ 198.172563][ T9207] xt_ecn: cannot match TCP bits for non-tcp packets [ 198.343355][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 198.595851][ T9236] netlink: 'syz.0.928': attribute type 1 has an invalid length. [ 199.440763][ T9290] openvswitch: netlink: Tunnel attr 20 out of range max 16 [ 200.292410][ T9] IPVS: starting estimator thread 0... [ 200.315864][ T9340] netlink: 'syz.4.957': attribute type 4 has an invalid length. [ 200.392579][ T9340] `: renamed from bond0 (while UP) [ 200.408854][ T9342] IPVS: using max 28 ests per chain, 67200 per kthread [ 200.646693][ T9383] netlink: 'syz.0.963': attribute type 5 has an invalid length. [ 200.778340][ T9387] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 200.834954][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 200.850392][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 200.867183][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 200.876695][ T9387] bond0 (unregistering): Released all slaves [ 200.923296][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 200.931649][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 200.995567][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 201.003206][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 201.011042][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 201.020286][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 201.028145][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 201.036052][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 201.043621][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 201.050912][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 201.058799][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 201.071968][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 201.103123][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 201.110363][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 201.135338][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 201.154961][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 201.191998][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 201.211321][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 201.241101][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 201.251212][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 201.281404][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 201.296393][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 201.327647][ T9418] netlink: 'syz.4.968': attribute type 1 has an invalid length. [ 201.341969][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 201.371519][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 201.412182][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 201.434094][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 201.517594][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 201.527484][ T9418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.541447][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 201.582123][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 201.600346][ T9395] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 201.689230][ T9424] veth3: entered promiscuous mode [ 201.726133][ T9424] bond0: (slave veth3): Enslaving as an active interface with an up link [ 201.791472][ T9438] tipc: Enabled bearer , priority 0 [ 201.880429][ T9432] tipc: Resetting bearer [ 201.948658][ T9454] netlink: 'syz.4.977': attribute type 3 has an invalid length. [ 201.974733][ T9454] netlink: 'syz.4.977': attribute type 1 has an invalid length. [ 202.003340][ T9444] syzkaller0: entered promiscuous mode [ 202.009168][ T9444] syzkaller0: entered allmulticast mode [ 202.046219][ T9430] tipc: Resetting bearer [ 202.065857][ T9430] tipc: Disabling bearer [ 202.088803][ T9462] atomic_op ffff888031131998 conn xmit_atomic 0000000000000000 [ 202.429413][ T9477] __nla_validate_parse: 23 callbacks suppressed [ 202.429433][ T9477] netlink: 9 bytes leftover after parsing attributes in process `syz.1.978'. [ 202.507892][ T9481] netlink: 5 bytes leftover after parsing attributes in process `syz.1.978'. [ 202.565953][ T9477] gretap0: entered promiscuous mode [ 202.690302][ T9481] 0{X: renamed from gretap0 [ 202.859068][ T9492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.984'. [ 202.890978][ T9486] netlink: 20 bytes leftover after parsing attributes in process `syz.2.983'. [ 202.903526][ T9481] 0{X: left promiscuous mode [ 202.908588][ T9481] 0{X: entered allmulticast mode [ 203.036470][ T9481] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 203.531732][ T9513] netlink: 116 bytes leftover after parsing attributes in process `syz.0.990'. [ 203.771105][ T9528] netlink: 'syz.0.995': attribute type 1 has an invalid length. [ 203.851145][ T9531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.996'. [ 203.896039][ T9534] netlink: 36 bytes leftover after parsing attributes in process `syz.3.997'. [ 203.903341][ T9528] 8021q: adding VLAN 0 to HW filter on device bond5 [ 204.018611][ T9549] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1000'. [ 204.021475][ T9535] bond5: (slave veth3): Enslaving as an active interface with a down link [ 204.141338][ T9528] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 204.323828][ T9555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1001'. [ 204.384718][ T9565] netlink: 'syz.1.1005': attribute type 17 has an invalid length. [ 204.398716][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'. [ 204.562672][ T9565] erspan0: entered promiscuous mode [ 204.576180][ T9565] 0{X: entered promiscuous mode [ 204.747925][ T9586] bridge_slave_1: left allmulticast mode [ 204.763731][ T9586] bridge_slave_1: left promiscuous mode [ 204.769562][ T9586] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.849462][ T9586] bridge_slave_0: left allmulticast mode [ 204.881922][ T9586] bridge_slave_0: left promiscuous mode [ 204.909720][ T9586] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.437487][ T9623] chnl_net:caif_netlink_parms(): no params data found [ 205.554754][ T9633] netlink: 'syz.3.1019': attribute type 3 has an invalid length. [ 206.201159][ T9651] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.235152][ T9651] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.311187][ T9645] pim6reg: entered allmulticast mode [ 206.456576][ T9661] netlink: 'syz.3.1024': attribute type 1 has an invalid length. [ 206.473634][ T9651] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.484460][ T9651] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.515655][ T9349] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 206.655599][ T9651] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.666456][ T9651] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.678665][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 206.678687][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 206.685005][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 206.690784][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 206.808402][ T9651] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.834445][ T9651] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.168359][ T9361] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.182304][ T9361] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.232317][ T9359] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.254259][ T9359] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.324961][ T9361] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.346965][ T9361] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.425497][ T9359] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.458813][ T9359] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.514890][ T9714] __nla_validate_parse: 10 callbacks suppressed [ 207.514910][ T9714] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1037'. [ 207.554919][ T9718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1038'. [ 207.638376][ T9720] netlink: 'syz.1.1039': attribute type 1 has an invalid length. [ 207.704556][ T9720] netlink: 'syz.1.1039': attribute type 2 has an invalid length. [ 207.772355][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1042'. [ 207.897002][ T9737] netlink: 'syz.3.1044': attribute type 1 has an invalid length. [ 207.958548][ T9742] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1045'. [ 208.154471][ T9737] bond4: (slave gretap2): making interface the new active one [ 208.177199][ T9737] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 208.775946][ T9769] bond3: Unable to set down delay as MII monitoring is disabled [ 208.794055][ T9769] bond3 (unregistering): Released all slaves [ 208.914157][ T9775] tipc: Enabled bearer , priority 0 [ 208.949312][ T9773] tipc: Enabling of bearer rejected, already enabled [ 209.093015][ T9781] syzkaller0: entered promiscuous mode [ 209.107993][ T9781] syzkaller0: entered allmulticast mode [ 209.210700][ T9797] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.232893][ T9797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'. [ 209.251195][ T9775] tipc: Resetting bearer [ 209.304727][ T9775] tipc: Disabling bearer [ 209.499695][ T9813] netlink: 'syz.4.1060': attribute type 2 has an invalid length. [ 209.524546][ T9813] netlink: 119 bytes leftover after parsing attributes in process `syz.4.1060'. [ 209.779069][ T9372] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 209.953137][ T9847] netlink: 'syz.3.1067': attribute type 10 has an invalid length. [ 209.999891][ T9845] bridge0: port 2(team0) entered disabled state [ 210.068743][ T9856] netlink: 'syz.4.1069': attribute type 33 has an invalid length. [ 210.149774][ T9845] team0 (unregistering): left allmulticast mode [ 210.156454][ T9845] team_slave_0: left allmulticast mode [ 210.162890][ T9845] team_slave_1: left allmulticast mode [ 210.168634][ T9845] team0 (unregistering): left promiscuous mode [ 210.175231][ T9845] team_slave_0: left promiscuous mode [ 210.180941][ T9845] team_slave_1: left promiscuous mode [ 210.187983][ T9845] bridge0: port 2(team0) entered disabled state [ 210.202932][ T9845] team0 (unregistering): Port device team_slave_0 removed [ 210.220128][ T9845] team0 (unregistering): Port device team_slave_1 removed [ 210.247487][ T9835] hsr0 speed is unknown, defaulting to 1000 [ 210.457492][ T9870] veth1_macvtap: left promiscuous mode [ 210.475471][ T9870] macsec0: entered promiscuous mode [ 210.480721][ T9870] macsec0: entered allmulticast mode [ 210.519262][ T9871] veth1_macvtap: entered promiscuous mode [ 210.546960][ T9871] veth1_macvtap: entered allmulticast mode [ 210.579741][ T9871] macsec0: left promiscuous mode [ 210.586010][ T9871] macsec0: left allmulticast mode [ 210.592127][ T9871] veth1_macvtap: left allmulticast mode [ 210.609045][ T9875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1075'. [ 210.696103][ T9881] netlink: 'syz.1.1076': attribute type 11 has an invalid length. [ 210.705566][ T9881] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1076'. [ 210.963066][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1078'. [ 211.140679][ T9895] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 211.498559][ T5837] hsr0 speed is unknown, defaulting to 1000 [ 211.814339][ T9936] netlink: 788 bytes leftover after parsing attributes in process `syz.2.1089'. [ 212.680420][ T9990] tipc: Enabling of bearer rejected, already enabled [ 212.715131][ T9990] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 212.809392][ T9996] netlink: 'syz.0.1107': attribute type 2 has an invalid length. [ 212.842272][ T9996] __nla_validate_parse: 4 callbacks suppressed [ 212.842291][ T9996] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1107'. [ 212.937660][T10006] netlink: 'syz.4.1111': attribute type 3 has an invalid length. [ 212.948254][ T9996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1107'. [ 212.979819][T10006] netlink: 'syz.4.1111': attribute type 1 has an invalid length. [ 213.246483][T10021] netlink: 'syz.4.1113': attribute type 1 has an invalid length. [ 213.274483][T10025] delete_channel: no stack [ 213.303263][T10029] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 213.375048][T10021] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 213.417909][T10029] 8021q: adding VLAN 0 to HW filter on device bond3 [ 213.428923][ T9359] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 213.496266][T10021] veth5: entered promiscuous mode [ 213.521078][T10021] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 213.592934][ T9372] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 213.642195][T10038] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1116'. [ 213.813519][T10047] IPVS: set_ctl: invalid protocol: 92 10.1.1.1:20003 [ 213.840766][T10047] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20001 [ 213.865448][T10051] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1122'. [ 213.880874][T10046] veth0_to_team: entered promiscuous mode [ 213.909496][T10046] veth0_to_team: entered allmulticast mode [ 213.920572][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1122'. [ 213.927521][T10058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1119'. [ 213.929980][T10051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1122'. [ 214.065747][T10061] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 214.259319][T10076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1128'. [ 214.304744][T10076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1128'. [ 214.717631][T10104] netlink: 'syz.4.1134': attribute type 21 has an invalid length. [ 214.818373][T10106] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1135'. [ 215.008689][T10116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.016460][T10116] IPv6: NLM_F_CREATE should be set when creating new route [ 215.024131][T10116] IPv6: NLM_F_CREATE should be set when creating new route [ 215.039863][T10118] bridge_slave_0: entered promiscuous mode [ 215.078060][T10118] bridge_slave_0: left promiscuous mode [ 215.094966][T10116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.259865][T10124] syzkaller0: entered promiscuous mode [ 215.269165][T10124] syzkaller0: entered allmulticast mode [ 215.280397][T10135] netlink: 'syz.0.1147': attribute type 11 has an invalid length. [ 216.662060][T10150] 8021q: VLANs not supported on ip_vti0 [ 216.669333][T10155] netlink: 'syz.0.1150': attribute type 1 has an invalid length. [ 216.878099][T10163] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 216.897317][T10165] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20003 [ 216.910654][T10163] team1: entered promiscuous mode [ 216.916609][T10163] team1: entered allmulticast mode [ 216.972558][T10165] IPVS: set_ctl: invalid protocol: 9 10.1.1.2:20001 [ 217.006797][T10173] netlink: 'syz.0.1156': attribute type 1 has an invalid length. [ 217.086386][T10173] 8021q: adding VLAN 0 to HW filter on device bond6 [ 217.310342][T10180] bond5: (slave veth0_to_bond): Releasing active interface [ 217.346927][T10180] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 217.416580][T10196] bridge0: port 2(syz_tun) entered blocking state [ 217.464534][T10196] bridge0: port 2(syz_tun) entered disabled state [ 217.474512][T10196] syz_tun: entered allmulticast mode [ 217.498205][T10196] syz_tun: entered promiscuous mode [ 217.498834][T10195] netlink: 'syz.1.1164': attribute type 10 has an invalid length. [ 217.518738][T10196] bridge0: port 2(syz_tun) entered blocking state [ 217.526283][T10196] bridge0: port 2(syz_tun) entered forwarding state [ 217.591699][T10195] bridge0: port 2(syz_tun) entered disabled state [ 217.598567][T10195] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.627817][T10196] rdma_rxe: rxe_newlink: failed to add syz_tun [ 217.655373][T10195] bridge0: port 2(syz_tun) entered blocking state [ 217.662063][T10195] bridge0: port 2(syz_tun) entered forwarding state [ 217.669897][T10195] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.677158][T10195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.707059][T10195] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 217.834874][T10208] bond7: option resend_igmp: invalid value (32767) [ 217.855500][T10208] bond7: option resend_igmp: allowed values 0 - 255 [ 217.884258][T10208] bond7 (unregistering): Released all slaves [ 218.098767][T10235] __nla_validate_parse: 9 callbacks suppressed [ 218.098785][T10235] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1177'. [ 218.144438][T10241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1175'. [ 218.148283][T10235] bond4: entered promiscuous mode [ 218.175269][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1177'. [ 218.192729][T10241] netlink: 'syz.0.1175': attribute type 1 has an invalid length. [ 218.219320][T10235] bridge0: port 1(syz_tun) entered blocking state [ 218.257456][T10235] bridge0: port 1(syz_tun) entered disabled state [ 218.270894][T10235] syz_tun: entered allmulticast mode [ 218.285238][T10235] syz_tun: entered promiscuous mode [ 218.294142][T10242] netlink: 'syz.4.1177': attribute type 10 has an invalid length. [ 218.325677][T10242] bridge0: port 1(syz_tun) entered blocking state [ 218.332379][T10242] bridge0: port 1(syz_tun) entered forwarding state [ 218.346383][T10242] bridge0: entered allmulticast mode [ 218.353257][T10242] `: (slave bridge0): Enslaving as an active interface with an up link [ 218.365404][T10235] rdma_rxe: rxe_newlink: failed to add syz_tun [ 218.487347][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1181'. [ 218.563701][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1181'. [ 218.766901][T10265] tipc: Enabled bearer , priority 0 [ 218.774836][T10265] syzkaller0: entered promiscuous mode [ 218.780496][T10265] syzkaller0: entered allmulticast mode [ 218.791992][T10265] tipc: Resetting bearer [ 218.799540][T10264] tipc: Resetting bearer [ 218.812644][T10264] tipc: Disabling bearer [ 218.950303][T10269] xt_TPROXY: Can be used only with -p tcp or -p udp [ 218.996356][T10274] tipc: Enabling of bearer rejected, already enabled [ 219.085169][T10279] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1189'. [ 219.363237][T10292] netlink: 'syz.0.1193': attribute type 10 has an invalid length. [ 219.411996][T10292] team0: Port device dummy0 added [ 219.443471][T10292] netlink: 'syz.0.1193': attribute type 10 has an invalid length. [ 219.471552][T10292] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 219.498874][T10292] team0: Failed to send options change via netlink (err -105) [ 219.508022][T10292] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 219.518227][T10292] team0: Port device dummy0 removed [ 219.526588][T10292] dummy0: entered promiscuous mode [ 219.532815][T10292] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 219.550789][T10296] pim6reg1: entered promiscuous mode [ 219.557270][T10296] pim6reg1: entered allmulticast mode [ 219.770191][T10315] netlink: 'syz.4.1200': attribute type 75 has an invalid length. [ 219.912600][T10322] netlink: 'syz.4.1203': attribute type 1 has an invalid length. [ 219.930130][T10322] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1203'. [ 219.962352][T10324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.000683][T10324] bond0: (slave rose0): Enslaving as an active interface with an up link [ 220.427392][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1209'. [ 220.739370][T10371] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 220.757630][T10371] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 221.205005][T10397] lo: entered allmulticast mode [ 221.293924][T10408] syzkaller1: entered promiscuous mode [ 221.345895][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1216'. [ 221.353646][T10408] syzkaller1: entered allmulticast mode [ 221.733582][T10440] --map-set only usable from mangle table [ 221.826331][T10445] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1226'. [ 222.593019][T10496] netlink: 'syz.3.1237': attribute type 5 has an invalid length. [ 224.444478][T10530] __nla_validate_parse: 6 callbacks suppressed [ 224.444496][T10530] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1244'. [ 224.527470][T10548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1247'. [ 224.738412][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1251'. [ 224.770600][T10560] netlink: 'syz.4.1251': attribute type 8 has an invalid length. [ 225.018861][T10578] xt_TPROXY: Can be used only with -p tcp or -p udp [ 225.086781][T10583] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 225.121935][T10583] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 225.303326][T10596] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 225.521239][T10614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.572273][T10618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.606318][T10614] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1265'. [ 225.856622][T10623] mac80211_hwsim hwsim7 : renamed from wlan1 (while UP) [ 225.873440][T10629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1268'. [ 226.809182][T10684] syzkaller1: entered promiscuous mode [ 226.828307][T10684] syzkaller1: entered allmulticast mode [ 227.176188][T10703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1283'. [ 227.190238][T10703] netlink: 'syz.2.1283': attribute type 10 has an invalid length. [ 227.199111][T10703] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1283'. [ 227.225107][T10703] batadv0: entered promiscuous mode [ 227.273935][T10703] batadv0: entered allmulticast mode [ 227.296085][T10703] bridge0: port 3(batadv0) entered blocking state [ 227.329540][T10703] bridge0: port 3(batadv0) entered disabled state [ 227.646362][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 227.656818][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 227.921549][T10743] x_tables: duplicate underflow at hook 2 [ 227.947383][T10743] x_tables: duplicate underflow at hook 2 [ 228.075401][T10754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1297'. [ 228.220326][T10760] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1300'. [ 228.595402][T10779] xt_l2tp: v2 doesn't support IP mode [ 228.634884][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 229.136538][T10810] netlink: 'syz.0.1312': attribute type 1 has an invalid length. [ 229.145762][T10811] netlink: 'syz.3.1314': attribute type 1 has an invalid length. [ 229.244319][T10811] 8021q: adding VLAN 0 to HW filter on device bond5 [ 229.280090][T10816] bond5: (slave gretap3): making interface the new active one [ 229.301087][T10816] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 229.315370][ T30] audit: type=1800 audit(1760229002.418:7): pid=10819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1316" name="memory.events" dev="tmpfs" ino=1452 res=0 errno=0 [ 229.790383][T10844] netlink: 'syz.3.1324': attribute type 1 has an invalid length. [ 229.799305][T10842] netlink: 'syz.4.1323': attribute type 7 has an invalid length. [ 229.808478][T10844] __nla_validate_parse: 3 callbacks suppressed [ 229.808573][T10844] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1324'. [ 230.061156][T10863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1331'. [ 230.517366][T10890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1339'. [ 230.610292][T10895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1340'. [ 230.650120][T10897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1341'. [ 230.989656][T10921] gre1: entered promiscuous mode [ 230.997992][T10921] gre1: entered allmulticast mode [ 231.125875][T10929] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 231.686720][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1364'. [ 231.697499][T10971] netlink: 'syz.4.1364': attribute type 5 has an invalid length. [ 231.706354][T10971] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1364'. [ 231.729389][T10971] geneve2: entered promiscuous mode [ 231.735367][T10971] geneve2: entered allmulticast mode [ 231.750997][ T1154] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 231.768670][ T1154] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 231.787434][ T1154] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 231.813361][ T1154] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 231.884069][T10977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1366'. [ 231.958684][T10987] ieee802154 phy0 wpan0: encryption failed: -22 [ 232.379997][T11010] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1374'. [ 232.466369][T11019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1377'. [ 232.473657][T11010] tipc: Enabled bearer , priority 0 [ 232.483900][T11010] syzkaller0: entered promiscuous mode [ 232.489392][T11010] syzkaller0: entered allmulticast mode [ 232.538581][T11010] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 232.576955][T11010] tipc: Resetting bearer [ 232.618073][T11007] tipc: Resetting bearer [ 232.650978][T11007] tipc: Disabling bearer [ 232.990829][T11029] syzkaller1: entered promiscuous mode [ 233.000220][T11029] syzkaller1: entered allmulticast mode [ 233.219805][T11059] syzkaller1: left promiscuous mode [ 233.240368][T11059] syzkaller1: left allmulticast mode [ 233.418733][T11073] netlink: 'syz.2.1390': attribute type 11 has an invalid length. [ 233.429989][T11076] ip6t_srh: unknown srh invflags 4000 [ 233.482294][T11076] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 233.494955][T11076] bond4: (slave macvlan4): making interface the new active one [ 233.549238][T11076] macvlan4: entered promiscuous mode [ 233.558111][T11076] bond0: entered promiscuous mode [ 233.570872][T11081] netlink: 'syz.3.1394': attribute type 4 has an invalid length. [ 233.572978][T11076] bond4: (slave macvlan4): Enslaving as an active interface with an up link [ 233.771720][T11099] tipc: New replicast peer: 0.0.0.0 [ 233.804425][T11099] tipc: Enabled bearer , priority 10 [ 233.850698][T11099] tipc: New replicast peer: 255.255.255.255 [ 234.343242][T11120] xt_l2tp: wrong L2TP version: 0 [ 234.403004][T11120] netlink: 'syz.0.1406': attribute type 29 has an invalid length. [ 234.561066][T11139] tipc: Enabled bearer , priority 0 [ 234.589637][T11139] syzkaller0: entered promiscuous mode [ 234.604413][T11139] syzkaller0: entered allmulticast mode [ 234.664378][T11139] tipc: Resetting bearer [ 234.711107][T11145] netlink: 'syz.4.1413': attribute type 1 has an invalid length. [ 234.719065][T11145] netlink: 'syz.4.1413': attribute type 3 has an invalid length. [ 234.796432][T11145] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 234.923480][ T5918] tipc: Node number set to 3758096386 [ 235.034386][T11165] __nla_validate_parse: 14 callbacks suppressed [ 235.034477][T11165] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1419'. [ 235.064247][T11166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1420'. [ 235.088521][T11169] netlink: 'syz.4.1421': attribute type 2 has an invalid length. [ 235.103429][T11169] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1421'. [ 235.254866][T11124] tipc: Resetting bearer [ 235.271548][T11124] tipc: Disabling bearer [ 235.434747][T11186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1426'. [ 235.808666][T11212] tipc: Enabled bearer , priority 0 [ 235.823799][T11212] syzkaller0: entered promiscuous mode [ 235.835449][T11212] syzkaller0: entered allmulticast mode [ 235.880376][T11210] tipc: Resetting bearer [ 235.926649][T11210] tipc: Disabling bearer [ 236.023176][T11214] ip6gre1: entered allmulticast mode [ 236.279115][T11234] netlink: 'syz.0.1437': attribute type 1 has an invalid length. [ 236.292035][T11234] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1437'. [ 236.493251][T11245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.711268][T11266] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.723268][T11266] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.743199][T11266] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 236.767842][T11270] tipc: Enabling of bearer rejected, already enabled [ 236.826169][T11266] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.847060][T11266] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.857504][T11266] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 236.876909][T11270] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 236.913005][T11272] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1446'. [ 236.943826][T11266] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.961877][T11266] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.976366][T11279] xt_CT: You must specify a L4 protocol and not use inversions on it [ 236.978911][T11266] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 237.007639][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1446'. [ 237.051642][T11281] netlink: 'syz.3.1448': attribute type 21 has an invalid length. [ 237.089692][T11266] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.103849][T11266] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.115790][T11266] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 237.150647][T11281] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1448'. [ 237.262705][ T9359] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.276736][ T9359] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 237.297382][ T9359] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 237.335792][ T9343] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.350271][ T9343] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 237.375485][ T9343] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 237.406367][ T9343] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.418508][ T9343] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 237.429679][ T9343] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 237.457551][ T9355] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.494570][ T9355] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 237.531952][ T9355] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 237.550336][T11301] netlink: 'syz.2.1454': attribute type 1 has an invalid length. [ 237.667541][T11300] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 237.683577][T11300] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 237.722792][T11302] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 237.735746][T11302] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 237.769158][T11301] vlan3: entered allmulticast mode [ 237.779427][T11301] bridge0: entered promiscuous mode [ 237.785936][T11301] bridge0: left promiscuous mode [ 237.794075][T11301] bond2: (slave vlan3): Enslaving as an active interface with a down link [ 237.845823][T11325] netlink: 'syz.1.1461': attribute type 1 has an invalid length. [ 237.909497][T11325] bond1: entered promiscuous mode [ 237.915514][T11325] 8021q: adding VLAN 0 to HW filter on device bond1 [ 237.968928][T11325] bond1: (slave bridge5): making interface the new active one [ 237.977678][T11325] bridge5: entered promiscuous mode [ 237.985783][T11325] bond1: (slave bridge5): Enslaving as an active interface with an up link [ 238.051277][T11328] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1462'. [ 238.235884][T11349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1468'. [ 238.513800][ T9359] : No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 238.746038][T11378] netlink: 'syz.4.1474': attribute type 6 has an invalid length. [ 238.829652][T11382] tipc: Enabling of bearer rejected, already enabled [ 239.470558][T11423] netlink: 'syz.0.1487': attribute type 12 has an invalid length. [ 239.617020][T11429] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 239.677810][T11429] bridge_slave_0: default FDB implementation only supports local addresses [ 239.711988][ T5148] Bluetooth: hci3: command 0x0405 tx timeout [ 239.756111][T11439] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 239.789868][T11429] bridge_slave_0: default FDB implementation only supports local addresses [ 240.069643][T11466] __nla_validate_parse: 6 callbacks suppressed [ 240.069661][T11466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1500'. [ 240.088189][T11457] bond5 (unregistering): Released all slaves [ 240.125691][T11467] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.126518][T11471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1501'. [ 240.153219][T11471] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1501'. [ 240.165243][T11458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.328993][T11481] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1504'. [ 240.339432][T11481] netlink: 'syz.4.1504': attribute type 1 has an invalid length. [ 240.347390][T11481] netlink: 'syz.4.1504': attribute type 2 has an invalid length. [ 240.356463][T11481] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.1504'. [ 240.489877][T11489] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1506'. [ 240.530821][T11487] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1506'. [ 240.736107][T11505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1515'. [ 240.767687][T11507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1515'. [ 240.786789][T11506] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 240.817037][T11514] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1516'. [ 240.907252][ T9355] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 241.019755][T11511] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.031264][T11511] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.148460][T11528] tipc: Enabled bearer , priority 0 [ 241.280929][T11511] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.296213][T11511] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.345327][T11538] netlink: 'syz.4.1519': attribute type 1 has an invalid length. [ 241.379064][T11530] syzkaller0: entered promiscuous mode [ 241.412425][T11530] syzkaller0: entered allmulticast mode [ 241.473319][T11542] netlink: 'syz.4.1521': attribute type 1 has an invalid length. [ 241.476478][T11511] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.492926][T11511] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.512590][T11519] tipc: Resetting bearer [ 241.555885][T11518] tipc: Resetting bearer [ 241.583140][T11518] tipc: Disabling bearer [ 241.747178][T11511] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.775592][T11511] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.996386][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.042185][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.127734][ T9361] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.154188][ T9361] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.225003][ T9361] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.235095][ T9361] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.328177][ T9361] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.348843][ T9361] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.583054][T11595] smc: net device gre0 applied user defined pnetid SYZ1 [ 242.596061][T11593] tipc: Enabled bearer , priority 0 [ 242.615171][T11595] smc: net device gre0 erased user defined pnetid SYZ1 [ 242.615543][T11593] syzkaller0: entered promiscuous mode [ 242.643013][T11593] syzkaller0: entered allmulticast mode [ 242.679314][T11593] tipc: Resetting bearer [ 242.719008][T11591] tipc: Resetting bearer [ 242.794959][T11591] tipc: Disabling bearer [ 242.823804][T11609] tipc: New replicast peer: 255.255.255.255 [ 242.830620][T11609] tipc: Enabled bearer , priority 10 [ 242.897491][T11612] netlink: 'syz.3.1542': attribute type 39 has an invalid length. [ 242.953630][T11612] veth0_macvtap: left promiscuous mode [ 243.720889][T11667] netlink: 'syz.1.1555': attribute type 1 has an invalid length. [ 244.001343][T11678] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 244.494720][T11733] netlink: 'syz.2.1573': attribute type 83 has an invalid length. [ 244.631525][T11739] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 244.709061][T11739] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 244.887452][T11752] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.894847][T11752] IPv6: NLM_F_CREATE should be set when creating new route [ 244.902236][T11752] IPv6: NLM_F_CREATE should be set when creating new route [ 244.909534][T11752] IPv6: NLM_F_CREATE should be set when creating new route [ 244.923490][T11752] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.961548][T11752] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 244.988740][T11754] netlink: 'syz.3.1580': attribute type 64 has an invalid length. [ 245.370011][T11771] __nla_validate_parse: 18 callbacks suppressed [ 245.370029][T11771] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1588'. [ 245.498975][T11782] netlink: 'syz.3.1590': attribute type 1 has an invalid length. [ 245.578149][T11786] 8021q: VLANs not supported on syzkaller1 [ 245.673547][T11789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1593'. [ 245.694883][T11794] tipc: Enabling of bearer rejected, already enabled [ 245.706149][T11794] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1594'. [ 245.720977][T11795] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1592'. [ 246.076959][T11822] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1602'. [ 246.228776][T11827] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1605'. [ 246.256791][T11827] 8021q: VLANs not supported on ip_vti0 [ 246.480678][T11846] netlink: 'syz.1.1611': attribute type 1 has an invalid length. [ 246.495945][T11846] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1611'. [ 246.508192][T11846] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1611'. [ 246.725829][T11860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.736441][T11862] netlink: 'syz.1.1617': attribute type 1 has an invalid length. [ 246.841632][T11862] bond2: entered promiscuous mode [ 246.857633][T11862] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.899959][T11869] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.916373][T11869] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 246.927915][T11869] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 246.945187][T11869] bond2: (slave wireguard0): making interface the new active one [ 246.953984][T11869] wireguard0: entered promiscuous mode [ 246.961540][T11869] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 246.962151][T11875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1618'. [ 247.404136][T11902] ipt_REJECT: TCP_RESET invalid for non-tcp [ 247.441521][T11904] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 247.734095][T11926] netlink: 'syz.3.1633': attribute type 1 has an invalid length. [ 247.858403][T11935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1637'. [ 247.951234][T11928] bond6: (slave bridge4): making interface the new active one [ 248.014311][T11928] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 248.210943][T11954] bridge4: entered promiscuous mode [ 248.251912][T11954] bridge4: entered allmulticast mode [ 248.452656][T11974] syzkaller0: entered promiscuous mode [ 248.453575][T11975] netlink: 'syz.3.1646': attribute type 58 has an invalid length. [ 248.472071][T11974] syzkaller0: entered allmulticast mode [ 249.626063][T12037] xt_policy: output policy not valid in PREROUTING and INPUT [ 249.867233][T12051] syzkaller0: entered promiscuous mode [ 249.875565][T12051] syzkaller0: entered allmulticast mode [ 250.068984][ T30] audit: type=1804 audit(1760229023.168:8): pid=12061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1671" name="/newroot/321/cgroup.controllers" dev="tmpfs" ino=1647 res=1 errno=0 [ 250.119486][ T30] audit: type=1800 audit(1760229023.168:9): pid=12061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1671" name="cgroup.controllers" dev="tmpfs" ino=1647 res=0 errno=0 [ 250.430071][T12086] tipc: Enabled bearer , priority 0 [ 250.465780][T12086] syzkaller0: entered promiscuous mode [ 250.502286][T12086] syzkaller0: entered allmulticast mode [ 250.533417][T12094] __nla_validate_parse: 7 callbacks suppressed [ 250.533444][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1681'. [ 250.537021][T12086] tipc: Resetting bearer [ 250.571047][T12097] netlink: 'syz.4.1682': attribute type 1 has an invalid length. [ 250.612769][T12085] tipc: Resetting bearer [ 250.703400][T12085] tipc: Disabling bearer [ 250.801841][T12105] netlink: 'syz.2.1685': attribute type 1 has an invalid length. [ 250.830996][T12105] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1685'. [ 250.848298][T12109] tipc: Enabling of bearer rejected, failed to enable media [ 251.011510][T12119] netlink: 'syz.2.1691': attribute type 1 has an invalid length. [ 251.031670][T12119] netlink: 'syz.2.1691': attribute type 2 has an invalid length. [ 251.257840][T12136] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1697'. [ 251.280113][T12136] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1697'. [ 251.321701][T12132] hsr0 speed is unknown, defaulting to 1000 [ 251.342572][T12138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1698'. [ 251.367743][T12140] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 251.370002][T12138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1698'. [ 251.408516][T12138] netlink: 'syz.4.1698': attribute type 15 has an invalid length. [ 251.449541][T12144] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1701'. [ 251.562455][T12153] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1703'. [ 251.712648][T12163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1707'. [ 252.131598][T12167] hsr0 speed is unknown, defaulting to 1000 [ 252.143948][T12167] tipc: Enabling of bearer rejected, failed to enable media [ 252.158322][T12167] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1708'. [ 252.669158][T12179] tipc: Enabled bearer , priority 0 [ 252.699992][T12179] syzkaller0: entered promiscuous mode [ 252.728379][T12179] syzkaller0: entered allmulticast mode [ 252.826825][T12195] netlink: 'syz.0.1717': attribute type 2 has an invalid length. [ 252.888764][T12192] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 252.896642][T12201] xt_socket: unknown flags 0x50 [ 252.913616][T12192] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 252.950291][T12189] tipc: Resetting bearer [ 253.022927][T12213] netlink: 'syz.3.1720': attribute type 1 has an invalid length. [ 253.072357][T12178] tipc: Resetting bearer [ 253.107346][T12178] tipc: Disabling bearer [ 253.431349][T12235] netlink: 'syz.1.1728': attribute type 1 has an invalid length. [ 253.514311][T12235] 8021q: adding VLAN 0 to HW filter on device bond4 [ 253.553108][T12235] atomic_op ffff88807e323198 conn xmit_atomic 0000000000000000 [ 253.565713][T12248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.573084][T12243] 8021q: adding VLAN 0 to HW filter on device bond4 [ 253.583553][T12243] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 253.595565][T12249] netlink: 'syz.3.1731': attribute type 1 has an invalid length. [ 253.595995][T12243] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 253.641151][T12254] vlan3: entered allmulticast mode [ 253.646573][T12254] bond4: entered allmulticast mode [ 253.670484][T12240] sock: sock_timestamping_bind_phc: sock not bind to device [ 253.692499][T12235] veth5: entered promiscuous mode [ 253.700287][T12235] bond4: (slave veth5): Enslaving as an active interface with a down link [ 253.711633][T12249] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 254.387585][T12277] nft_compat: unsupported protocol 0 [ 254.445041][T12284] 8021q: VLANs not supported on syzkaller1 [ 254.546747][T12289] netlink: 'syz.1.1740': attribute type 10 has an invalid length. [ 255.329205][T12330] 8021q: adding VLAN 0 to HW filter on device bond8 [ 255.433409][T12328] bridge6: entered promiscuous mode [ 255.444833][T12328] bridge6: entered allmulticast mode [ 255.796058][T12358] __nla_validate_parse: 11 callbacks suppressed [ 255.796076][T12358] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1761'. [ 255.818194][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.825888][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.834954][T12359] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 255.869350][T12359] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1762'. [ 256.024583][T12370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1767'. [ 256.045391][T12358] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 256.056907][T12358] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 256.070511][T12358] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 256.080395][T12358] dummy0: left promiscuous mode [ 256.094226][T12358] bond0 (unregistering): Released all slaves [ 256.378177][T12388] validate_nla: 1 callbacks suppressed [ 256.378196][T12388] netlink: 'syz.2.1772': attribute type 1 has an invalid length. [ 256.397274][T12391] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 256.405535][T12388] netlink: 'syz.2.1772': attribute type 2 has an invalid length. [ 256.417327][T12388] netlink: 'syz.2.1772': attribute type 1 has an invalid length. [ 256.440943][T12393] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1774'. [ 256.473776][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1775'. [ 256.544910][T12396] netlink: 'syz.0.1775': attribute type 32 has an invalid length. [ 256.557148][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1775'. [ 256.615857][T12396] bond0: option coupled_control: invalid value (109) [ 256.624764][T12396] bond0 (unregistering): Released all slaves [ 256.741326][T12418] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1779'. [ 256.761825][T12415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.830524][T12422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1780'. [ 256.937751][T12422] 8021q: adding VLAN 0 to HW filter on device bond7 [ 256.946850][T12424] netlink: 'syz.0.1781': attribute type 14 has an invalid length. [ 256.969689][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1781'. [ 257.001261][T12424] netlink: 'syz.0.1781': attribute type 14 has an invalid length. [ 257.011282][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1781'. [ 257.139271][T12441] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 257.228007][T12448] netlink: 'syz.1.1788': attribute type 10 has an invalid length. [ 257.265133][T12451] netlink: 'syz.0.1790': attribute type 11 has an invalid length. [ 257.544793][T12463] sctp: [Deprecated]: syz.3.1795 (pid 12463) Use of int in max_burst socket option deprecated. [ 257.544793][T12463] Use struct sctp_assoc_value instead [ 257.556181][T12466] netlink: 'syz.0.1796': attribute type 2 has an invalid length. [ 257.580584][T12469] syzkaller1: entered promiscuous mode [ 257.589979][T12469] syzkaller1: entered allmulticast mode [ 257.615238][T12469] tipc: Enabled bearer , priority 0 [ 257.781544][T12480] netlink: 'syz.4.1801': attribute type 12 has an invalid length. [ 257.794147][T12486] tipc: Enabled bearer , priority 0 [ 257.802573][T12475] syzkaller0: entered promiscuous mode [ 257.808068][T12475] syzkaller0: entered allmulticast mode [ 257.820996][T12488] netlink: 'syz.3.1802': attribute type 6 has an invalid length. [ 257.825644][T12475] tipc: Resetting bearer [ 257.845229][T12485] tipc: Enabling of bearer rejected, already enabled [ 257.910915][T12480] bond6: option primary_reselect: invalid value (255) [ 257.927778][T12480] bond6 (unregistering): Released all slaves [ 257.964575][T12468] tipc: Disabling bearer [ 257.979786][T12485] tipc: Resetting bearer [ 258.020433][T12485] tipc: Disabling bearer [ 258.252352][T12521] veth0_to_bond: entered allmulticast mode [ 258.816609][T12549] syzkaller1: entered promiscuous mode [ 258.825618][T12549] syzkaller1: entered allmulticast mode [ 259.697476][T12582] 8021q: adding VLAN 0 to HW filter on device ` [ 259.718382][T12582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.327413][T12612] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 260.875726][ T9] IPVS: starting estimator thread 0... [ 260.877209][T12630] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 260.961907][T12638] IPVS: using max 26 ests per chain, 62400 per kthread [ 270.513257][ T36] : No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 282.509429][T12653] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 282.524580][T12652] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 283.055160][T12684] validate_nla: 5 callbacks suppressed [ 283.055179][T12684] netlink: 'syz.1.1857': attribute type 9 has an invalid length. [ 283.070597][T12684] netlink: 'syz.1.1857': attribute type 6 has an invalid length. [ 283.126765][T12692] __nla_validate_parse: 19 callbacks suppressed [ 283.126786][T12692] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1858'. [ 283.259329][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1862'. [ 283.275293][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1862'. [ 283.465581][T12715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1864'. [ 283.541054][T12714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.576705][T12725] netlink: 'syz.0.1864': attribute type 3 has an invalid length. [ 283.592615][T12725] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1864'. [ 283.694275][T12722] gtp0: entered promiscuous mode [ 283.699268][T12722] gtp0: entered allmulticast mode [ 283.937942][T12747] netlink: 'syz.2.1874': attribute type 6 has an invalid length. [ 283.951170][T12747] netlink: 'syz.2.1874': attribute type 21 has an invalid length. [ 283.955673][T12751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1875'. [ 283.960631][T12747] netlink: 'syz.2.1874': attribute type 6 has an invalid length. [ 284.197496][T12761] netlink: 'syz.0.1876': attribute type 1 has an invalid length. [ 284.206129][T12761] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1876'. [ 284.224368][T12763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1877'. [ 284.380279][T12763] netlink: 'syz.2.1877': attribute type 1 has an invalid length. [ 284.418960][T12763] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1877'. [ 284.656861][T12780] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1882'. [ 285.116065][T12820] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 285.733300][T12863] netlink: 'syz.4.1909': attribute type 10 has an invalid length. [ 285.923823][T12863] bridge0: port 1(syz_tun) entered disabled state [ 285.925436][T12876] netlink: 'syz.3.1911': attribute type 1 has an invalid length. [ 285.968330][T12875] tipc: Enabled bearer , priority 0 [ 286.064580][T12875] tipc: Disabling bearer [ 286.305835][T12890] bond0: (slave bridge_slave_1): Releasing backup interface [ 288.450696][T12960] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.630409][T12969] __nla_validate_parse: 11 callbacks suppressed [ 288.630429][T12969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1933'. [ 288.664514][T12969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1933'. [ 288.724753][T12973] lo: entered allmulticast mode [ 288.731607][T12975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1935'. [ 288.763946][T12973] tunl0: entered allmulticast mode [ 288.782747][T12973] gre0: entered allmulticast mode [ 288.958829][T12973] erspan0: entered allmulticast mode [ 288.985506][T12973] ip_vti0: entered allmulticast mode [ 289.003652][T12985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1938'. [ 289.019058][T12973] ip6_vti0: entered allmulticast mode [ 289.030709][T12973] sit0: entered allmulticast mode [ 289.055826][T12973] ip6tnl0: entered allmulticast mode [ 289.082707][T12973] ip6gre0: entered allmulticast mode [ 289.100574][T12973] bridge0: port 2(syz_tun) entered disabled state [ 289.111387][T12973] ip6gretap0: entered allmulticast mode [ 289.134110][T12973] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.163105][T12973] bridge0: entered allmulticast mode [ 289.239611][T12973] vcan0: entered allmulticast mode [ 289.257956][T12973] bond0: entered allmulticast mode [ 289.263327][T12973] bond_slave_0: entered allmulticast mode [ 289.269154][T12973] bond_slave_1: entered allmulticast mode [ 289.285463][T12973] dummy0: entered allmulticast mode [ 289.287405][T13001] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1939'. [ 289.303258][T12973] nlmon0: entered allmulticast mode [ 289.314627][T12973] caif0: entered allmulticast mode [ 289.320633][T12973] vxcan0: entered allmulticast mode [ 289.347915][T12973] vxcan1: entered allmulticast mode [ 289.356677][T12973] veth0: entered allmulticast mode [ 289.374491][T12973] veth1: entered allmulticast mode [ 289.388262][T12973] wg0: entered allmulticast mode [ 289.398486][T12973] wg1: entered allmulticast mode [ 289.413077][T12973] wg2: entered allmulticast mode [ 289.423392][T12973] veth0_to_bridge: entered allmulticast mode [ 289.445878][T12973] veth1_to_bond: entered allmulticast mode [ 289.459576][T12973] veth0_to_team: entered allmulticast mode [ 289.472776][T12973] team_slave_0: entered allmulticast mode [ 289.479318][T12973] veth1_to_team: entered allmulticast mode [ 289.505869][T12973] team_slave_1: entered allmulticast mode [ 289.518773][T12973] veth0_to_batadv: entered allmulticast mode [ 289.532495][T12973] batadv_slave_0: entered allmulticast mode [ 289.548586][T12973] veth1_to_batadv: entered allmulticast mode [ 289.559486][T12973] batadv_slave_1: entered allmulticast mode [ 289.579204][T12973] xfrm0: entered allmulticast mode [ 289.588935][T12973] veth0_to_hsr: entered allmulticast mode [ 289.599077][T12973] hsr_slave_0: entered allmulticast mode [ 289.608660][T12973] veth1_to_hsr: entered allmulticast mode [ 289.618622][T12973] hsr_slave_1: entered allmulticast mode [ 289.664141][T12973] hsr0: entered allmulticast mode [ 289.674403][T12973] veth1_virt_wifi: entered allmulticast mode [ 289.702836][T12973] veth0_virt_wifi: entered allmulticast mode [ 289.719637][T12973] veth1_vlan: entered allmulticast mode [ 289.736749][T12973] veth0_vlan: entered allmulticast mode [ 289.767928][T12973] vlan0: entered allmulticast mode [ 289.773401][T12973] vlan1: entered allmulticast mode [ 289.779522][T12973] macvlan0: entered allmulticast mode [ 289.791554][T12973] macvlan1: entered allmulticast mode [ 289.804035][T12973] ipvlan0: entered allmulticast mode [ 289.812033][T12973] ipvlan1: entered allmulticast mode [ 289.818550][T12973] veth1_macvtap: entered allmulticast mode [ 289.830702][T12973] veth0_macvtap: entered allmulticast mode [ 289.844128][T12973] macvtap0: entered allmulticast mode [ 289.857949][T12973] macsec0: entered allmulticast mode [ 289.869603][T12973] geneve0: entered allmulticast mode [ 289.885963][T12973] geneve1: entered allmulticast mode [ 289.907940][T12973] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 289.934585][T12973] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 289.955922][T12973] syzkaller1: entered allmulticast mode [ 289.964327][T12973] sit1: entered allmulticast mode [ 290.005474][T12973] bridge1: entered allmulticast mode [ 290.014162][T12973] vxlan0: entered allmulticast mode [ 290.025379][T12973] bridge2: entered allmulticast mode [ 290.032803][T12973] mac80211_hwsim hwsim17 wlan2: entered allmulticast mode [ 290.040242][T12973] mac80211_hwsim hwsim18 wlan3: entered allmulticast mode [ 290.048273][T12973] ip6gre1: entered allmulticast mode [ 290.057353][T12973] bridge3: entered allmulticast mode [ 290.063953][T12973] : entered allmulticast mode [ 290.072961][T12973] mac80211_hwsim hwsim24 wlan4: entered allmulticast mode [ 290.081605][T12973] vlan2: entered allmulticast mode [ 290.088711][T12973] bridge4: entered allmulticast mode [ 290.102192][T12973] erspan1: entered allmulticast mode [ 290.107658][T12973] ip6tnl1: entered allmulticast mode [ 290.113403][T12973] macsec2: entered allmulticast mode [ 290.125593][T12973] bond1: left promiscuous mode [ 290.130533][T12973] bridge5: left promiscuous mode [ 290.135950][T12973] bond1: entered allmulticast mode [ 290.141088][T12973] bridge5: entered allmulticast mode [ 290.183209][T12973] ipip0: entered allmulticast mode [ 290.190245][T12973] netdevsim netdevsim1 eth0: entered allmulticast mode [ 290.197635][T12973] netdevsim netdevsim1 eth1: entered allmulticast mode [ 290.206103][T12973] netdevsim netdevsim1 eth2: entered allmulticast mode [ 290.213488][T12973] netdevsim netdevsim1 eth3: entered allmulticast mode [ 290.221253][T12973] bond2: left promiscuous mode [ 290.226445][T12973] wireguard0: left promiscuous mode [ 290.232171][T12973] bond2: entered allmulticast mode [ 290.237373][T12973] wireguard0: entered allmulticast mode [ 290.247902][T12973] veth2: entered allmulticast mode [ 290.257949][T12973] veth3: entered allmulticast mode [ 290.268096][T12973] sit2: entered allmulticast mode [ 290.304668][T12973] bond3: entered allmulticast mode [ 290.312396][T12973] veth4: entered allmulticast mode [ 290.322238][T12973] veth5: left promiscuous mode [ 290.327046][T12973] veth5: entered allmulticast mode [ 290.339652][T12973] bridge6: left promiscuous mode [ 290.352322][T12973] vxcan2: entered allmulticast mode [ 290.359964][T12973] vxcan3: entered allmulticast mode [ 290.368382][T12973] vlan3: entered allmulticast mode [ 290.374881][T12973] sit3: entered allmulticast mode [ 290.412054][ T5493] veth0_vlan: left promiscuous mode [ 290.449498][ T5493] veth0_vlan: entered promiscuous mode [ 290.487043][T12980] hsr0 speed is unknown, defaulting to 1000 [ 290.526092][T13015] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1941'. [ 290.565449][T13017] openvswitch: netlink: Flow actions attr not present in new flow. [ 290.612260][T13017] openvswitch: netlink: Flow actions attr not present in new flow. [ 290.620346][ T9355] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.629927][ T9355] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.652426][ T9355] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.660959][ T9355] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.672277][T13015] !: renamed from bond_slave_0 [ 290.715622][ T9355] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.748246][ T9355] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.767725][ T9355] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.796910][ T9355] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.022546][T13044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1948'. [ 291.657269][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1956'. [ 292.018254][T13109] tap0: tun_chr_ioctl cmd 1074025677 [ 292.024780][T13109] tap0: linktype set to 65534 [ 292.073700][T13116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1964'. [ 292.176968][T13115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1965'. [ 292.195402][T13119] tipc: Enabling of bearer rejected, already enabled [ 292.847074][T13156] validate_nla: 2 callbacks suppressed [ 292.847094][T13156] netlink: 'syz.4.1976': attribute type 1 has an invalid length. [ 293.259728][T13163] "syz.0.1978" (13163) uses obsolete ecb(arc4) skcipher [ 293.398401][T13195] netlink: 'syz.2.1985': attribute type 1 has an invalid length. [ 293.486299][T13203] veth0: entered promiscuous mode [ 293.612071][T13197] veth0 (unregistering): left promiscuous mode [ 293.998486][T13227] __nla_validate_parse: 5 callbacks suppressed [ 293.998504][T13227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1994'. [ 294.186105][T13236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1997'. [ 294.232772][T13236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1997'. [ 294.241678][T13236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1997'. [ 294.330404][T13244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1998'. [ 294.494715][T13255] syzkaller1: left allmulticast mode [ 294.787895][T13274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2005'. [ 294.822710][T13274] chnl_net:caif_netlink_parms(): no params data found [ 294.865581][T13272] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2003'. [ 294.877377][T13283] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2005'. [ 294.886590][T13276] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2004'. [ 294.908780][T13276] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2004'. [ 294.979949][T13280] 8021q: adding VLAN 0 to HW filter on device bond4 [ 295.140732][ T5843] block nbd2: Receive control failed (result -32) [ 295.656931][T13325] bond5: entered allmulticast mode [ 295.688093][T13325] 8021q: adding VLAN 0 to HW filter on device bond5 [ 295.711939][T13335] netlink: zone id is out of range [ 295.735172][T13335] netlink: zone id is out of range [ 295.753875][T13335] netlink: zone id is out of range [ 295.778998][T13335] netlink: zone id is out of range [ 295.785735][T13335] netlink: zone id is out of range [ 295.790902][T13335] netlink: zone id is out of range [ 295.797161][T13335] netlink: zone id is out of range [ 295.803183][T13335] netlink: zone id is out of range [ 295.808427][T13335] netlink: zone id is out of range [ 295.813981][T13335] netlink: zone id is out of range [ 296.290079][T13376] netlink: 'syz.0.2032': attribute type 33 has an invalid length. [ 296.385851][T13379] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 296.450061][T13381] ip6t_REJECT: ECHOREPLY is not supported [ 296.521681][T13392] netlink: 'syz.0.2036': attribute type 1 has an invalid length. [ 296.660286][T13400] xt_CT: You must specify a L4 protocol and not use inversions on it [ 296.873278][T13419] tipc: New replicast peer: 255.255.255.255 [ 296.879939][T13419] tipc: Enabled bearer , priority 10 [ 296.988957][T13428] netlink: 'syz.1.2044': attribute type 12 has an invalid length. [ 297.003734][T13428] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 297.247185][T13451] xt_l2tp: v2 doesn't support IP mode [ 297.257199][ T9359] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.277338][T13447] netlink: 'syz.4.2052': attribute type 21 has an invalid length. [ 297.297454][T13447] IPv6: NLM_F_CREATE should be specified when creating new route [ 297.297809][ T9359] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.321163][T13447] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 297.328519][T13447] IPv6: NLM_F_CREATE should be set when creating new route [ 297.335838][T13447] IPv6: NLM_F_CREATE should be set when creating new route [ 297.343110][T13447] IPv6: NLM_F_CREATE should be set when creating new route [ 297.362064][ T9361] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.371135][ T9355] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.419899][T13447] !: renamed from bond_slave_0 [ 297.764949][T13472] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 297.795583][T13472] bond7: option packets_per_slave: allowed values 0 - 65535 [ 297.815221][T13472] bond7 (unregistering): Released all slaves [ 297.991846][ T1211] tipc: Node number set to 1969262544 [ 299.451190][T13614] __nla_validate_parse: 15 callbacks suppressed [ 299.451209][T13614] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2098'. [ 299.533719][T13620] bond8: option mode: invalid value (133) [ 299.543067][T13620] bond8 (unregistering): Released all slaves [ 299.568302][T13621] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2098'. [ 299.711433][T13634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2105'. [ 299.882999][T13641] xt_limit: Overflow, try lower: 271964/0 [ 300.149570][T13665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2114'. [ 300.236940][T13672] ipt_rpfilter: unknown options [ 300.242023][T13668] ipt_rpfilter: unknown options [ 300.406432][T13681] netlink: 'syz.0.2118': attribute type 1 has an invalid length. [ 300.414938][T13683] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2119'. [ 300.584950][T13681] bond0: entered promiscuous mode [ 300.596294][T13681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.644132][T13701] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2124'. [ 300.676582][T13701] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2124'. [ 300.734321][T13681] bond0: (slave bridge8): making interface the new active one [ 300.741970][T13681] bridge8: entered promiscuous mode [ 300.749382][T13681] bond0: (slave bridge8): Enslaving as an active interface with an up link [ 300.771245][T13711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2127'. [ 300.840964][T13708] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2125'. [ 300.841537][T13706] delete_channel: no stack [ 301.034365][T13723] tipc: Enabled bearer , priority 0 [ 301.042101][T13723] syzkaller0: entered promiscuous mode [ 301.047622][T13723] syzkaller0: entered allmulticast mode [ 301.118727][T13730] tipc: Resetting bearer [ 301.147131][T13721] tipc: Resetting bearer [ 301.156939][T13734] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2136'. [ 301.174639][T13721] tipc: Disabling bearer [ 301.329779][T13745] syzkaller0: entered promiscuous mode [ 301.344308][T13745] syzkaller0: entered allmulticast mode [ 301.965145][T13787] tipc: Enabled bearer , priority 0 [ 301.973272][T13787] syzkaller0: entered promiscuous mode [ 301.978785][T13787] syzkaller0: entered allmulticast mode [ 302.068158][T13787] tipc: Resetting bearer [ 302.109894][T13784] tipc: Resetting bearer [ 302.159272][T13784] tipc: Disabling bearer [ 302.193894][T13800] vlan2: entered allmulticast mode [ 302.466878][T13822] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 302.484269][T13822] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 302.514379][ T9355] : No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 302.658899][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059874400: rx timeout, send abort [ 302.669421][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059874400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 302.810645][T13839] bond9: Unable to set peer notification delay as MII monitoring is disabled [ 302.827902][T13839] bond9 (unregistering): Released all slaves [ 302.883103][T13844] xt_SECMARK: invalid mode: 9 [ 302.896757][T13844] Bluetooth: MGMT ver 1.23 [ 303.007875][T13851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.046843][T13856] IPv6: NLM_F_CREATE should be specified when creating new route [ 303.110851][T13859] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 303.194087][T13868] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20000 [ 303.512897][T13894] lo: left allmulticast mode [ 303.519083][T13894] tunl0: left allmulticast mode [ 303.525055][T13894] gre0: left allmulticast mode [ 303.530318][T13894] net_ratelimit: 16 callbacks suppressed [ 303.530334][T13894] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 303.705161][T13903] netlink: 'syz.4.2187': attribute type 32 has an invalid length. [ 303.745810][T13903] bond8: option coupled_control: invalid value (52) [ 303.764671][T13903] bond8 (unregistering): Released all slaves [ 304.653536][T13913] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 304.779062][T13964] __nla_validate_parse: 11 callbacks suppressed [ 304.779080][T13964] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2201'. [ 304.814557][T13964] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2201'. [ 304.814557][T13965] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2201'. [ 304.857668][T13968] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2202'. [ 304.913026][T13975] team0: Device geneve3 is up. Set it down before adding it as a team port [ 305.010669][T13982] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2206'. [ 305.226893][T13992] veth11: entered allmulticast mode [ 305.609733][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2214'. [ 305.651363][T14014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2214'. [ 305.923250][T14030] veth0_to_bond: entered allmulticast mode [ 305.936595][T14033] xt_cgroup: invalid path, errno=-2 [ 306.179252][T14029] syz.2.2217 (14029) used greatest stack depth: 16936 bytes left [ 306.317826][T14051] netlink: 'syz.0.2223': attribute type 1 has an invalid length. [ 306.505787][T14066] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 306.652142][T14078] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2232'. [ 306.838495][T14093] tipc: Enabled bearer , priority 0 [ 306.879376][T14093] syzkaller0: entered promiscuous mode [ 306.885878][T14093] syzkaller0: entered allmulticast mode [ 306.949530][T14093] tipc: Resetting bearer [ 306.962855][T14093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.971254][T14093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.989158][T14096] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2240'. [ 307.019096][T14091] tipc: Resetting bearer [ 307.036053][T14096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2240'. [ 307.053985][T14091] tipc: Disabling bearer [ 307.091343][T14103] syzkaller1: entered promiscuous mode [ 307.107302][T14103] syzkaller1: entered allmulticast mode [ 307.361663][T14121] geneve3: entered promiscuous mode [ 307.367657][T14121] geneve3: entered allmulticast mode [ 307.377738][ T9355] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 307.390439][ T9355] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 307.418222][ T9355] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 307.442640][ T9355] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 307.468551][T14121] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.500741][T14121] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.514238][T14121] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 307.541288][T14133] bridge_slave_1: default FDB implementation only supports local addresses [ 307.564603][T14139] netlink: 'syz.0.2253': attribute type 1 has an invalid length. [ 307.591609][T14121] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.603449][T14121] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.616128][T14121] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 307.718479][T14121] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.735652][T14121] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.751820][T14121] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 307.852821][T14121] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.880487][T14121] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.899017][T14121] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 307.983076][T14161] No such timeout policy "syz1" [ 308.031564][ T9361] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.050730][ T9361] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 308.067933][ T9361] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 308.088136][ T9361] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.099944][ T9361] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 308.118629][ T9361] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 308.148912][ T9361] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.163435][ T9361] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 308.177552][ T9361] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 308.210123][T14169] netlink: 'syz.4.2261': attribute type 30 has an invalid length. [ 308.221082][ T9361] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.241646][ T9361] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 308.283654][ T9361] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 308.632464][T14190] syzkaller1: entered promiscuous mode [ 308.699077][T14190] syzkaller1: entered allmulticast mode [ 308.750489][T14206] netlink: 'syz.2.2265': attribute type 10 has an invalid length. [ 308.830191][T14206] bond0: (slave wlan1): Opening slave failed [ 309.502626][T14215] netlink: 'syz.1.2268': attribute type 1 has an invalid length. [ 309.743516][T14252] tipc: Enabled bearer , priority 2 [ 309.796789][T14255] __nla_validate_parse: 5 callbacks suppressed [ 309.796806][T14255] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2282'. [ 309.825809][T14257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2282'. [ 309.865271][T14257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2282'. [ 309.925973][T14263] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2283'. [ 310.037950][T14267] netlink: 'syz.1.2285': attribute type 4 has an invalid length. [ 310.129794][T14269] bridge: RTM_NEWNEIGH with invalid ether address [ 310.206227][T14278] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.383746][T14291] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2293'. [ 310.740916][T14306] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 311.018411][T14327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2304'. [ 311.074779][T14333] netlink: 'syz.1.2302': attribute type 1 has an invalid length. [ 311.122055][T14333] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2302'. [ 311.170064][T14322] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2302'. [ 311.246355][T14343] netlink: 'syz.4.2306': attribute type 1 has an invalid length. [ 311.270280][T14343] netlink: 5624 bytes leftover after parsing attributes in process `syz.4.2306'. [ 311.415051][T14356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2309'. [ 311.931514][T14388] netlink: 'syz.4.2318': attribute type 1 has an invalid length. [ 312.169250][T14414] netlink: 'syz.1.2320': attribute type 3 has an invalid length. [ 312.804800][T14459] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 313.085213][T14475] Unsupported ieee802154 address type: 0 [ 313.408013][T14493] Cannot find del_set index 3 as target [ 313.748693][T14508] hsr0 speed is unknown, defaulting to 1000 [ 313.852255][T14520] IPv6: addrconf: prefix option has invalid lifetime [ 314.116181][T14529] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 314.763900][T14582] Unknown options in mask b7f2 [ 315.114789][T14601] __nla_validate_parse: 14 callbacks suppressed [ 315.114809][T14601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2384'. [ 315.151249][T14604] bond9: option resend_igmp: invalid value (32767) [ 315.159700][T14604] bond9: option resend_igmp: allowed values 0 - 255 [ 315.168752][T14604] bond9 (unregistering): Released all slaves [ 315.354504][T14616] netlink: 'syz.4.2389': attribute type 1 has an invalid length. [ 315.374182][T14616] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2389'. [ 315.410893][T14621] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2390'. [ 315.424246][T14622] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 315.437659][T14615] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2388'. [ 315.439184][T14622] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 315.452252][T14621] 0{X: entered promiscuous mode [ 315.459627][T14621] 0{X: left allmulticast mode [ 315.758937][T14637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2394'. [ 316.089591][T14653] netlink: 'syz.0.2399': attribute type 12 has an invalid length. [ 316.097874][T14653] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2399'. [ 316.742137][T14697] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2410'. [ 316.810385][T14700] pim6reg1: entered promiscuous mode [ 316.825235][T14700] pim6reg1: entered allmulticast mode [ 316.951176][T14712] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.2413'. [ 317.224447][T14728] tipc: Enabling of bearer rejected, already enabled [ 317.242818][T14728] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 317.251561][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.461624][T14746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2423'. [ 317.535734][T14750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2424'. [ 317.548390][T14750] netlink: 'syz.4.2424': attribute type 1 has an invalid length. [ 317.587229][T14748] bridge0: Device is already in use. [ 317.876157][T14767] netlink: 'syz.1.2430': attribute type 1 has an invalid length. [ 317.908572][T14766] 0{X: left promiscuous mode [ 318.396555][T14766] bridge_slave_1: left promiscuous mode [ 318.403168][T14766] bridge_slave_1: left allmulticast mode [ 318.413723][T14766] veth0_to_bond: left allmulticast mode [ 318.420722][T14766] bond6: (slave veth0_to_bond): Releasing active interface [ 318.440021][T14766] veth0_to_team: left promiscuous mode [ 318.445912][T14766] veth0_to_team: left allmulticast mode [ 318.488159][T14766] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 318.773752][T14796] vlan2: entered allmulticast mode [ 318.793009][T14796] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 318.932694][T14807] openvswitch: netlink: Message has 512 unknown bytes. [ 318.940139][T14808] openvswitch: netlink: Message has 512 unknown bytes. [ 319.578232][T14851] netlink: 'syz.1.2453': attribute type 1 has an invalid length. [ 319.714039][T14866] netlink: 'syz.3.2457': attribute type 2 has an invalid length. [ 319.751862][T14864] netlink: 'syz.3.2457': attribute type 2 has an invalid length. [ 319.859087][T14880] veth0: entered promiscuous mode [ 319.865819][T14880] veth0: left promiscuous mode [ 319.939990][T14883] syzkaller1: left promiscuous mode [ 319.946038][T14883] syzkaller1: left allmulticast mode [ 319.955846][T14883] netlink: 'syz.1.2461': attribute type 10 has an invalid length. [ 319.970061][T14884] IPVS: set_ctl: invalid protocol: 137 172.20.20.33:20001 [ 320.317646][T14897] vxcan1: entered promiscuous mode [ 320.799944][T14924] netlink: 'syz.1.2476': attribute type 13 has an invalid length. [ 320.819709][T14924] netlink: 'syz.1.2476': attribute type 58 has an invalid length. [ 320.842206][T14924] __nla_validate_parse: 13 callbacks suppressed [ 320.842223][T14924] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2476'. [ 320.930665][T14928] netlink: 'syz.4.2478': attribute type 1 has an invalid length. [ 320.949323][T14928] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2478'. [ 321.156184][T14945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2484'. [ 321.168097][T14944] tipc: Enabled bearer , priority 0 [ 321.182836][T14944] syzkaller0: entered promiscuous mode [ 321.196316][T14944] syzkaller0: entered allmulticast mode [ 321.222119][T14951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2488'. [ 321.261042][T14944] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 321.304379][T14951] netlink: 'syz.3.2488': attribute type 19 has an invalid length. [ 321.306728][T14944] tipc: Resetting bearer [ 321.336688][T14951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2488'. [ 321.352546][T14943] tipc: Resetting bearer [ 321.377293][T14943] tipc: Disabling bearer [ 321.424664][T14951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2488'. [ 321.682800][T14983] Cannot find set identified by id 65534 to match [ 321.689439][T14984] Cannot find set identified by id 65534 to match [ 321.870458][T14986] bond9: option lp_interval: invalid value (0) [ 321.883983][T14986] bond9: option lp_interval: allowed values 1 - 2147483647 [ 321.894448][T14986] bond9 (unregistering): Released all slaves [ 322.143991][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2504'. [ 322.398371][T15018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2504'. [ 323.493724][T14968] hsr0 speed is unknown, defaulting to 1000 [ 324.038830][T15060] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.061836][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2515'. [ 324.417506][T15090] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2521'. [ 325.243113][T15124] hsr0 speed is unknown, defaulting to 1000 [ 325.326968][T15133] validate_nla: 1 callbacks suppressed [ 325.326987][T15133] netlink: 'syz.3.2536': attribute type 1 has an invalid length. [ 325.353768][T15133] netlink: 'syz.3.2536': attribute type 1 has an invalid length. [ 325.883327][T15164] __nla_validate_parse: 6 callbacks suppressed [ 325.883344][T15164] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2545'. [ 326.196907][T15186] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2550'. [ 326.209106][T15186] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2550'. [ 326.238741][T15186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2550'. [ 326.305010][T15183] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2551'. [ 326.357288][T15188] hsr0 speed is unknown, defaulting to 1000 [ 326.454881][T15196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2553'. [ 326.545868][T15195] xt_hashlimit: invalid rate [ 326.603578][T15204] pim6reg1: entered promiscuous mode [ 326.609067][T15204] pim6reg1: entered allmulticast mode [ 326.929005][T15214] veth0_virt_wifi: renamed from ipvlan1 [ 327.222747][T15233] veth13: entered promiscuous mode [ 327.246348][T15233] veth13: entered allmulticast mode [ 327.334901][T15236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2565'. [ 327.420270][T15254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2568'. [ 328.100520][T15278] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyڇv[Dwz [ 328.309483][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2578'. [ 328.587795][T15300] Unsupported ieee802154 address type: 0 [ 328.661022][T15302] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2582'. [ 328.676943][T15296] nftables ruleset with unbound chain [ 328.873774][T15308] tipc: Enabled bearer , priority 0 [ 328.900899][T15308] syzkaller0: entered promiscuous mode [ 328.932786][T15308] syzkaller0: entered allmulticast mode [ 328.964259][T15308] tipc: Resetting bearer [ 328.973494][T15307] tipc: Resetting bearer [ 328.989056][T15307] tipc: Disabling bearer [ 329.039558][T15314] netlink: 'syz.1.2587': attribute type 1 has an invalid length. [ 329.058285][T15314] ipt_rpfilter: unknown options [ 329.150110][T15317] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 329.312106][ T5148] Bluetooth: hci3: command 0x0405 tx timeout [ 329.327787][T15323] netlink: 'syz.2.2592': attribute type 25 has an invalid length. [ 329.461666][T15339] 1{X: renamed from 30{X [ 329.473764][T15339] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 329.669567][T15351] netlink: 'syz.1.2600': attribute type 5 has an invalid length. [ 329.763965][T15355] nbd: nbd1 already in use [ 329.881494][T15362] tipc: Enabling of bearer rejected, already enabled [ 329.954240][T15365] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 329.970656][T15365] bond5 (unregistering): Released all slaves [ 330.026994][T15375] netlink: 'syz.2.2609': attribute type 21 has an invalid length. [ 330.304255][T15386] can: request_module (can-proto-4) failed. [ 330.472816][T15412] sctp: [Deprecated]: syz.4.2620 (pid 15412) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.472816][T15412] Use struct sctp_sack_info instead [ 330.817982][T15429] hsr0 speed is unknown, defaulting to 1000 [ 331.082297][T15449] netlink: 'syz.0.2629': attribute type 21 has an invalid length. [ 331.090424][T15449] IPv6: NLM_F_CREATE should be specified when creating new route [ 331.103413][T15449] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 331.110708][T15449] IPv6: NLM_F_CREATE should be set when creating new route [ 331.118109][T15449] IPv6: NLM_F_CREATE should be set when creating new route [ 331.125388][T15449] IPv6: NLM_F_CREATE should be set when creating new route [ 331.389632][T15463] syz_tun: left allmulticast mode [ 331.408016][T15463] syz_tun: left promiscuous mode [ 331.425291][T15463] bridge0: port 1(syz_tun) entered disabled state [ 331.471628][T15463] `: (slave bridge0): Releasing backup interface [ 331.486177][T15463] bridge0 (unregistering): left allmulticast mode [ 331.546503][T15477] netlink: 'syz.0.2634': attribute type 12 has an invalid length. [ 332.259885][T15527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.347738][T15539] __nla_validate_parse: 18 callbacks suppressed [ 332.347758][T15539] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2649'. [ 332.395749][T15542] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2649'. [ 332.684727][T15558] netlink: 'syz.3.2656': attribute type 1 has an invalid length. [ 332.698449][T15559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2656'. [ 332.712479][T15558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2656'. [ 332.920040][T15577] xt_TPROXY: Can be used only with -p tcp or -p udp [ 332.944201][T15577] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2662'. [ 333.635486][T15630] hsr0 speed is unknown, defaulting to 1000 [ 333.709311][T15620] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 333.918150][T15646] netlink: 'syz.3.2677': attribute type 6 has an invalid length. [ 334.513065][ T1154] : No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 334.673334][T15650] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 334.679569][T15650] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 334.724838][T15650] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 334.730780][T15650] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 334.767352][T15650] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 334.783299][T15650] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 334.806342][T15650] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 334.822864][T15650] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 334.837239][T15650] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 334.852681][T15650] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 334.872195][T15696] bond9: option min_links: invalid value (18446744073709551614) [ 334.879883][T15696] bond9: option min_links: allowed values 0 - 2147483647 [ 334.931202][T15696] bond9 (unregistering): Released all slaves [ 335.203629][T15717] pim6reg1: entered promiscuous mode [ 335.215767][T15717] pim6reg1: entered allmulticast mode [ 336.581347][T15791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2694'. [ 336.666490][T15791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 336.987331][T15813] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2699'. [ 336.997181][T15813] unsupported nlmsg_type 40 [ 337.220889][T15823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2701'. [ 337.612185][T15844] netlink: 'syz.2.2705': attribute type 21 has an invalid length. [ 337.620222][T15844] netlink: 'syz.2.2705': attribute type 1 has an invalid length. [ 378.675334][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.115049][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 484.912354][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 484.919986][ T31] Not tainted syzkaller #0 [ 484.926380][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 484.935444][ T31] task:kworker/1:0 state:D stack:24008 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 484.947804][ T31] Workqueue: events rfkill_uevent_work [ 484.953867][ T31] Call Trace: [ 484.957151][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 484.960069][ T31] __schedule+0x1798/0x4cc0 [ 484.964703][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 484.970103][ T31] ? __pfx___schedule+0x10/0x10 [ 484.975403][ T31] ? schedule+0x91/0x360 [ 484.979680][ T31] schedule+0x165/0x360 [ 484.984295][ T31] schedule_preempt_disabled+0x13/0x30 [ 485.028470][ T31] __mutex_lock+0x7e6/0x1350 [ 485.035148][ T31] ? __mutex_lock+0x5bb/0x1350 [ 485.039960][ T31] ? rfkill_uevent_work+0x1d/0xa0 [ 485.046625][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 485.052232][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 485.057996][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 485.063798][ T31] rfkill_uevent_work+0x1d/0xa0 [ 485.068677][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 485.076330][ T31] process_scheduled_works+0xae1/0x17b0 [ 485.082294][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 485.088307][ T31] worker_thread+0x8a0/0xda0 [ 485.093272][ T31] kthread+0x711/0x8a0 [ 485.097375][ T31] ? __pfx_worker_thread+0x10/0x10 [ 485.102882][ T31] ? __pfx_kthread+0x10/0x10 [ 485.107587][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 485.113300][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.118523][ T31] ? __pfx_kthread+0x10/0x10 [ 485.123264][ T31] ret_from_fork+0x4bc/0x870 [ 485.127861][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 485.133015][ T31] ? __switch_to_asm+0x39/0x70 [ 485.137975][ T31] ? __switch_to_asm+0x33/0x70 [ 485.143326][ T31] ? __pfx_kthread+0x10/0x10 [ 485.148024][ T31] ret_from_fork_asm+0x1a/0x30 [ 485.153146][ T31] [ 485.156320][ T31] INFO: task kworker/1:4:5840 blocked for more than 143 seconds. [ 485.164226][ T31] Not tainted syzkaller #0 [ 485.169308][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 485.178481][ T31] task:kworker/1:4 state:D stack:22856 pid:5840 tgid:5840 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 485.190822][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 485.197660][ T31] Call Trace: [ 485.201031][ T31] [ 485.204489][ T31] __schedule+0x1798/0x4cc0 [ 485.209026][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 485.214598][ T31] ? __pfx___schedule+0x10/0x10 [ 485.219470][ T31] ? schedule+0x91/0x360 [ 485.223850][ T31] schedule+0x165/0x360 [ 485.228019][ T31] schedule_preempt_disabled+0x13/0x30 [ 485.234071][ T31] __mutex_lock+0x7e6/0x1350 [ 485.238667][ T31] ? __mutex_lock+0x5bb/0x1350 [ 485.243648][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 485.249903][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 485.254993][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 485.260729][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 485.268821][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 485.274991][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 485.280732][ T31] process_scheduled_works+0xae1/0x17b0 [ 485.286491][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 485.292939][ T31] worker_thread+0x8a0/0xda0 [ 485.297564][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 485.304050][ T31] ? __kthread_parkme+0x7b/0x200 [ 485.309003][ T31] kthread+0x711/0x8a0 [ 485.313348][ T31] ? __pfx_worker_thread+0x10/0x10 [ 485.318472][ T31] ? __pfx_kthread+0x10/0x10 [ 485.323522][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 485.328721][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.333980][ T31] ? __pfx_kthread+0x10/0x10 [ 485.338855][ T31] ret_from_fork+0x4bc/0x870 [ 485.343605][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 485.348772][ T31] ? __switch_to_asm+0x39/0x70 [ 485.354049][ T31] ? __switch_to_asm+0x33/0x70 [ 485.359074][ T31] ? __pfx_kthread+0x10/0x10 [ 485.363792][ T31] ret_from_fork_asm+0x1a/0x30 [ 485.368583][ T31] [ 485.371710][ T31] INFO: task syz.0.2675:15622 blocked for more than 143 seconds. [ 485.379694][ T31] Not tainted syzkaller #0 [ 485.385406][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 485.394148][ T31] task:syz.0.2675 state:D stack:24584 pid:15622 tgid:15622 ppid:5832 task_flags:0x400040 flags:0x00080002 [ 485.406219][ T31] Call Trace: [ 485.409517][ T31] [ 485.412969][ T31] __schedule+0x1798/0x4cc0 [ 485.417511][ T31] ? __lock_acquire+0xab9/0xd20 [ 485.422516][ T31] ? __lock_acquire+0xab9/0xd20 [ 485.427373][ T31] ? __pfx___schedule+0x10/0x10 [ 485.432283][ T31] ? schedule+0x91/0x360 [ 485.436529][ T31] schedule+0x165/0x360 [ 485.440683][ T31] schedule_preempt_disabled+0x13/0x30 [ 485.446669][ T31] __mutex_lock+0x7e6/0x1350 [ 485.451263][ T31] ? __mutex_lock+0x5bb/0x1350 [ 485.456147][ T31] ? rfkill_unregister+0xc8/0x220 [ 485.461189][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 485.466357][ T31] ? __pfx_device_del+0x10/0x10 [ 485.471229][ T31] rfkill_unregister+0xc8/0x220 [ 485.476613][ T31] nfc_unregister_device+0x96/0x2a0 [ 485.481980][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 485.487714][ T31] virtual_ncidev_close+0x56/0x90 [ 485.492780][ T31] __fput+0x449/0xa70 [ 485.496778][ T31] task_work_run+0x1d4/0x260 [ 485.501389][ T31] ? __pfx_task_work_run+0x10/0x10 [ 485.507021][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 485.512556][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 485.518229][ T31] do_syscall_64+0x2bd/0xfa0 [ 485.522961][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.529039][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 485.535730][ T31] ? clear_bhb_loop+0x60/0xb0 [ 485.540404][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.546419][ T31] RIP: 0033:0x7f39b018eec9 [ 485.550844][ T31] RSP: 002b:00007ffe94548448 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 485.559334][ T31] RAX: 0000000000000000 RBX: 00007f39b03e7da0 RCX: 00007f39b018eec9 [ 485.567683][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 485.575708][ T31] RBP: 00007f39b03e7da0 R08: 000000000000014c R09: 000000109454873f [ 485.583823][ T31] R10: 00007f39b03e7cb0 R11: 0000000000000246 R12: 0000000000051a03 [ 485.592315][ T31] R13: 00007f39b03e6450 R14: ffffffffffffffff R15: 00007ffe94548560 [ 485.600314][ T31] [ 485.603494][ T31] INFO: task syz.1.2678:15650 blocked for more than 144 seconds. [ 485.611207][ T31] Not tainted syzkaller #0 [ 485.622642][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 485.631336][ T31] task:syz.1.2678 state:D stack:24856 pid:15650 tgid:15649 ppid:5827 task_flags:0x400040 flags:0x00080003 [ 485.643526][ T31] Call Trace: [ 485.646824][ T31] [ 485.649760][ T31] __schedule+0x1798/0x4cc0 [ 485.655097][ T31] ? __lock_acquire+0xab9/0xd20 [ 485.659975][ T31] ? __lock_acquire+0xab9/0xd20 [ 485.664896][ T31] ? __pfx___schedule+0x10/0x10 [ 485.669764][ T31] ? schedule+0x91/0x360 [ 485.674162][ T31] schedule+0x165/0x360 [ 485.678504][ T31] schedule_preempt_disabled+0x13/0x30 [ 485.684524][ T31] __mutex_lock+0x7e6/0x1350 [ 485.689122][ T31] ? __mutex_lock+0x5bb/0x1350 [ 485.693943][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 485.699238][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 485.704394][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.709724][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 485.719066][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 485.725533][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 485.731266][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 485.736452][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 485.742521][ T31] rfkill_set_block+0x1cf/0x440 [ 485.747382][ T31] rfkill_fop_write+0x44b/0x570 [ 485.752306][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 485.757712][ T31] ? security_kernfs_init_security+0x220/0x290 [ 485.764010][ T31] ? rw_verify_area+0x255/0x4d0 [ 485.768879][ T31] ? __lock_acquire+0xab9/0xd20 [ 485.774412][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 485.779809][ T31] vfs_write+0x27b/0xb30 [ 485.784211][ T31] ? __pfx_vfs_write+0x10/0x10 [ 485.788996][ T31] ? __fget_files+0x2a/0x420 [ 485.793742][ T31] ? __fget_files+0x2a/0x420 [ 485.798366][ T31] ? __fget_files+0x3a0/0x420 [ 485.803504][ T31] ? __fget_files+0x2a/0x420 [ 485.808096][ T31] ksys_write+0x145/0x250 [ 485.812486][ T31] ? __pfx_ksys_write+0x10/0x10 [ 485.817346][ T31] ? do_syscall_64+0xbe/0xfa0 [ 485.822123][ T31] do_syscall_64+0xfa/0xfa0 [ 485.826637][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.832430][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.838490][ T31] ? clear_bhb_loop+0x60/0xb0 [ 485.843293][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.849204][ T31] RIP: 0033:0x7f8b4a18eec9 [ 485.853664][ T31] RSP: 002b:00007f8b4afb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 485.862476][ T31] RAX: ffffffffffffffda RBX: 00007f8b4a3e5fa0 RCX: 00007f8b4a18eec9 [ 485.870455][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 485.878551][ T31] RBP: 00007f8b4a211f91 R08: 0000000000000000 R09: 0000000000000000 [ 485.886664][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.895169][ T31] R13: 00007f8b4a3e6038 R14: 00007f8b4a3e5fa0 R15: 00007ffe3a61ba78 [ 485.903312][ T31] [ 485.906349][ T31] INFO: task syz.3.2689:15734 blocked for more than 144 seconds. [ 485.914145][ T31] Not tainted syzkaller #0 [ 485.919077][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 485.928195][ T31] task:syz.3.2689 state:D stack:26088 pid:15734 tgid:15732 ppid:5834 task_flags:0x400140 flags:0x00080002 [ 485.940170][ T31] Call Trace: [ 485.943532][ T31] [ 485.946455][ T31] __schedule+0x1798/0x4cc0 [ 485.951038][ T31] ? __lock_acquire+0xab9/0xd20 [ 485.956464][ T31] ? __lock_acquire+0xab9/0xd20 [ 485.961312][ T31] ? __pfx___schedule+0x10/0x10 [ 485.966275][ T31] ? schedule+0x91/0x360 [ 485.970562][ T31] schedule+0x165/0x360 [ 485.974765][ T31] schedule_preempt_disabled+0x13/0x30 [ 485.980233][ T31] __mutex_lock+0x7e6/0x1350 [ 485.985258][ T31] ? __mutex_lock+0x5bb/0x1350 [ 485.990033][ T31] ? rfkill_fop_open+0x12d/0x820 [ 485.995030][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 486.000064][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 486.005483][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 486.010893][ T31] rfkill_fop_open+0x12d/0x820 [ 486.016344][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 486.021801][ T31] misc_open+0x2d5/0x350 [ 486.026067][ T31] chrdev_open+0x4cc/0x5e0 [ 486.030502][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 486.035724][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 486.042406][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 486.047356][ T31] do_dentry_open+0x953/0x13f0 [ 486.052194][ T31] vfs_open+0x3b/0x340 [ 486.056287][ T31] ? path_openat+0x2ecd/0x3830 [ 486.061047][ T31] path_openat+0x2ee5/0x3830 [ 486.065791][ T31] ? __pfx_path_openat+0x10/0x10 [ 486.070763][ T31] do_filp_open+0x1fa/0x410 [ 486.075743][ T31] ? __lock_acquire+0xab9/0xd20 [ 486.080625][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 486.085784][ T31] ? _raw_spin_unlock+0x28/0x50 [ 486.090757][ T31] ? alloc_fd+0x64c/0x6c0 [ 486.095183][ T31] do_sys_openat2+0x121/0x1c0 [ 486.099886][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 486.105651][ T31] ? rcu_is_watching+0x15/0xb0 [ 486.110422][ T31] __x64_sys_openat+0x138/0x170 [ 486.115555][ T31] do_syscall_64+0xfa/0xfa0 [ 486.120115][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.125447][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.131531][ T31] ? clear_bhb_loop+0x60/0xb0 [ 486.136873][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.142899][ T31] RIP: 0033:0x7f282898eec9 [ 486.147442][ T31] RSP: 002b:00007f2826bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 486.156044][ T31] RAX: ffffffffffffffda RBX: 00007f2828be5fa0 RCX: 00007f282898eec9 [ 486.164383][ T31] RDX: 0000000000000801 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 486.172606][ T31] RBP: 00007f2828a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 486.180678][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.188821][ T31] R13: 00007f2828be6038 R14: 00007f2828be5fa0 R15: 00007fffd380e468 [ 486.197855][ T31] [ 486.200944][ T31] INFO: task syz.4.2690:15756 blocked for more than 144 seconds. [ 486.208908][ T31] Not tainted syzkaller #0 [ 486.213900][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.223010][ T31] task:syz.4.2690 state:D stack:26920 pid:15756 tgid:15754 ppid:5825 task_flags:0x400040 flags:0x00080002 [ 486.235068][ T31] Call Trace: [ 486.238350][ T31] [ 486.241271][ T31] __schedule+0x1798/0x4cc0 [ 486.245910][ T31] ? security_file_open+0xb1/0x270 [ 486.251053][ T31] ? __lock_acquire+0xab9/0xd20 [ 486.256360][ T31] ? __lock_acquire+0xab9/0xd20 [ 486.261230][ T31] ? __pfx___schedule+0x10/0x10 [ 486.266249][ T31] ? schedule+0x91/0x360 [ 486.270502][ T31] schedule+0x165/0x360 [ 486.274725][ T31] schedule_preempt_disabled+0x13/0x30 [ 486.280288][ T31] __mutex_lock+0x7e6/0x1350 [ 486.285326][ T31] ? __mutex_lock+0x5bb/0x1350 [ 486.290124][ T31] ? misc_open+0x51/0x350 [ 486.294514][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 486.299641][ T31] misc_open+0x51/0x350 [ 486.303926][ T31] chrdev_open+0x4cc/0x5e0 [ 486.308349][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 486.313741][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 486.320063][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 486.325110][ T31] do_dentry_open+0x953/0x13f0 [ 486.329887][ T31] vfs_open+0x3b/0x340 [ 486.333999][ T31] ? path_openat+0x2ecd/0x3830 [ 486.338777][ T31] path_openat+0x2ee5/0x3830 [ 486.343810][ T31] ? __pfx_path_openat+0x10/0x10 [ 486.348754][ T31] do_filp_open+0x1fa/0x410 [ 486.353309][ T31] ? __lock_acquire+0xab9/0xd20 [ 486.358195][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 486.363381][ T31] ? _raw_spin_unlock+0x28/0x50 [ 486.368255][ T31] ? alloc_fd+0x64c/0x6c0 [ 486.373115][ T31] do_sys_openat2+0x121/0x1c0 [ 486.377796][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 486.383088][ T31] ? rcu_is_watching+0x15/0xb0 [ 486.387887][ T31] __x64_sys_openat+0x138/0x170 [ 486.392820][ T31] do_syscall_64+0xfa/0xfa0 [ 486.397337][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.402992][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.409060][ T31] ? clear_bhb_loop+0x60/0xb0 [ 486.413792][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.419690][ T31] RIP: 0033:0x7f87a3d8eec9 [ 486.424236][ T31] RSP: 002b:00007f87a4ba1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 486.432988][ T31] RAX: ffffffffffffffda RBX: 00007f87a3fe6090 RCX: 00007f87a3d8eec9 [ 486.440958][ T31] RDX: 0000000000048241 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 486.449056][ T31] RBP: 00007f87a3e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 486.457088][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.465537][ T31] R13: 00007f87a3fe6128 R14: 00007f87a3fe6090 R15: 00007fff0a718668 [ 486.473609][ T31] [ 486.476647][ T31] INFO: task syz.2.2709:15872 blocked for more than 144 seconds. [ 486.484549][ T31] Not tainted syzkaller #0 [ 486.489668][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.498886][ T31] task:syz.2.2709 state:D stack:28296 pid:15872 tgid:15871 ppid:5830 task_flags:0x400040 flags:0x00080002 [ 486.510928][ T31] Call Trace: [ 486.514385][ T31] [ 486.517311][ T31] __schedule+0x1798/0x4cc0 [ 486.522367][ T31] ? security_file_open+0xb1/0x270 [ 486.527479][ T31] ? __lock_acquire+0xab9/0xd20 [ 486.532368][ T31] ? __lock_acquire+0xab9/0xd20 [ 486.537231][ T31] ? __pfx___schedule+0x10/0x10 [ 486.542233][ T31] ? schedule+0x91/0x360 [ 486.546494][ T31] schedule+0x165/0x360 [ 486.550636][ T31] schedule_preempt_disabled+0x13/0x30 [ 486.556581][ T31] __mutex_lock+0x7e6/0x1350 [ 486.561178][ T31] ? __mutex_lock+0x5bb/0x1350 [ 486.566063][ T31] ? misc_open+0x51/0x350 [ 486.570465][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 486.575575][ T31] misc_open+0x51/0x350 [ 486.579749][ T31] chrdev_open+0x4cc/0x5e0 [ 486.584615][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 486.589560][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 486.595970][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 486.600928][ T31] do_dentry_open+0x953/0x13f0 [ 486.605904][ T31] vfs_open+0x3b/0x340 [ 486.609986][ T31] ? path_openat+0x2ecd/0x3830 [ 486.615337][ T31] path_openat+0x2ee5/0x3830 [ 486.619995][ T31] ? __pfx_path_openat+0x10/0x10 [ 486.625100][ T31] do_filp_open+0x1fa/0x410 [ 486.629699][ T31] ? __lock_acquire+0xab9/0xd20 [ 486.634613][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 486.639656][ T31] ? _raw_spin_unlock+0x28/0x50 [ 486.644958][ T31] ? alloc_fd+0x64c/0x6c0 [ 486.649297][ T31] do_sys_openat2+0x121/0x1c0 [ 486.654057][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 486.659265][ T31] ? exc_page_fault+0x82/0x100 [ 486.664177][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 486.669472][ T31] __x64_sys_openat+0x138/0x170 [ 486.674753][ T31] do_syscall_64+0xfa/0xfa0 [ 486.679264][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.684617][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.690704][ T31] ? clear_bhb_loop+0x60/0xb0 [ 486.695488][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.701475][ T31] RIP: 0033:0x7f2c9b18eec9 [ 486.706359][ T31] RSP: 002b:00007f2c9bf60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 486.714864][ T31] RAX: ffffffffffffffda RBX: 00007f2c9b3e5fa0 RCX: 00007f2c9b18eec9 [ 486.722994][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 486.730982][ T31] RBP: 00007f2c9b211f91 R08: 0000000000000000 R09: 0000000000000000 [ 486.739514][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.747705][ T31] R13: 00007f2c9b3e6038 R14: 00007f2c9b3e5fa0 R15: 00007fff50d6a648 [ 486.756279][ T31] [ 486.759392][ T31] [ 486.759392][ T31] Showing all locks held in the system: [ 486.767294][ T31] 3 locks held by kworker/1:0/24: [ 486.772848][ T31] #0: ffff88813ff19948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 486.784026][ T31] #1: ffffc900001e7ba0 ((work_completion)(&rfkill->uevent_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 486.796900][ T31] #2: ffffffff8f7be1a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_uevent_work+0x1d/0xa0 [ 486.807469][ T31] 1 lock held by khungtaskd/31: [ 486.812369][ T31] #0: ffffffff8e13d320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 486.822348][ T31] 2 locks held by getty/5587: [ 486.827011][ T31] #0: ffff88814d3ad0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 486.837251][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 486.847578][ T31] 3 locks held by kworker/1:4/5840: [ 486.852813][ T31] #0: ffff88813ff19948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 486.864399][ T31] #1: ffffc90003c07ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 486.877964][ T31] #2: ffffffff8f7be1a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 486.889412][ T31] 2 locks held by syz.0.2675/15622: [ 486.895020][ T31] #0: ffff88807e8eb100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 486.904898][ T31] #1: ffffffff8f7be1a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 486.915200][ T31] 2 locks held by syz.1.2678/15650: [ 486.920394][ T31] #0: ffffffff8f7be1a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 486.930953][ T31] #1: ffff88807e8eb100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 486.940706][ T31] 2 locks held by syz.3.2689/15734: [ 486.945995][ T31] #0: ffffffff8e98aca8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 486.955026][ T31] #1: ffffffff8f7be1a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 486.965172][ T31] 1 lock held by syz.4.2690/15756: [ 486.970284][ T31] #0: ffffffff8e98aca8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 486.978822][ T31] 1 lock held by syz.2.2709/15872: [ 486.984610][ T31] #0: ffffffff8e98aca8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 486.993415][ T31] 1 lock held by syz-executor/16086: [ 486.998702][ T31] #0: ffffffff8e98aca8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 487.007245][ T31] 1 lock held by syz-executor/16087: [ 487.012946][ T31] #0: ffffffff8e98aca8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 487.021389][ T31] 1 lock held by syz-executor/16090: [ 487.026775][ T31] #0: ffffffff8e98aca8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 487.035390][ T31] 1 lock held by syz-executor/16091: [ 487.040655][ T31] #0: ffffffff8e98aca8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 487.049623][ T31] 1 lock held by syz-executor/16093: [ 487.054989][ T31] #0: ffffffff8e98aca8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 487.063560][ T31] 1 lock held by syz-executor/16100: [ 487.068830][ T31] #0: ffffffff8e98aca8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 487.077758][ T31] 1 lock held by syz-executor/16101: [ 487.083227][ T31] #0: ffffffff8e98aca8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 487.091877][ T31] 1 lock held by syz-executor/16104: [ 487.097166][ T31] #0: ffffffff8e98aca8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 487.106262][ T31] 1 lock held by syz-executor/16105: [ 487.111559][ T31] #0: ffffffff8e98aca8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 487.120225][ T31] 1 lock held by syz-executor/16107: [ 487.125635][ T31] #0: ffffffff8e98aca8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 487.134500][ T31] 1 lock held by syz-executor/16114: [ 487.139769][ T31] #0: ffffffff8e98aca8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 487.148391][ T31] 1 lock held by syz-executor/16115: [ 487.153838][ T31] #0: ffffffff8e98aca8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 487.162885][ T31] 1 lock held by syz-executor/16118: [ 487.168382][ T31] #0: ffffffff8e98aca8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 487.176904][ T31] 1 lock held by syz-executor/16119: [ 487.182355][ T31] #0: ffffffff8e98aca8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 487.190903][ T31] 1 lock held by syz-executor/16121: [ 487.196725][ T31] #0: ffffffff8e98aca8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 487.205339][ T31] [ 487.207675][ T31] ============================================= [ 487.207675][ T31] [ 487.216261][ T31] NMI backtrace for cpu 0 [ 487.216284][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 487.216303][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 487.216313][ T31] Call Trace: [ 487.216321][ T31] [ 487.216328][ T31] dump_stack_lvl+0x189/0x250 [ 487.216355][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.216372][ T31] ? __pfx__printk+0x10/0x10 [ 487.216403][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 487.216436][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 487.216467][ T31] ? __pfx__printk+0x10/0x10 [ 487.216490][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 487.216521][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 487.216554][ T31] watchdog+0xf60/0xfa0 [ 487.216580][ T31] ? watchdog+0x1e2/0xfa0 [ 487.216607][ T31] kthread+0x711/0x8a0 [ 487.216636][ T31] ? __pfx_watchdog+0x10/0x10 [ 487.216655][ T31] ? __pfx_kthread+0x10/0x10 [ 487.216682][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 487.216702][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.216723][ T31] ? __pfx_kthread+0x10/0x10 [ 487.216748][ T31] ret_from_fork+0x4bc/0x870 [ 487.216770][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 487.216796][ T31] ? __switch_to_asm+0x39/0x70 [ 487.216817][ T31] ? __switch_to_asm+0x33/0x70 [ 487.216837][ T31] ? __pfx_kthread+0x10/0x10 [ 487.216863][ T31] ret_from_fork_asm+0x1a/0x30 [ 487.216900][ T31] [ 487.216908][ T31] Sending NMI from CPU 0 to CPUs 1: [ 487.363986][ C1] NMI backtrace for cpu 1 [ 487.364004][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 487.364023][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 487.364033][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 487.364058][ C1] Code: c3 e6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 f0 1c 00 f3 0f 1e fa fb f4 98 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 487.364072][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 487.364088][ C1] RAX: 4f7b0781bfed0f00 RBX: ffffffff81960c17 RCX: 4f7b0781bfed0f00 [ 487.364101][ C1] RDX: 0000000000000001 RSI: ffffffff8d7e8769 RDI: ffffffff8bc074e0 [ 487.364114][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb [ 487.364126][ C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8f9e0f70 [ 487.364139][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038dcb58 [ 487.364150][ C1] FS: 0000000000000000(0000) GS:ffff888125e0f000(0000) knlGS:0000000000000000 [ 487.364164][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 487.364175][ C1] CR2: 0000562d260e8468 CR3: 000000000df38000 CR4: 00000000003526f0 [ 487.364190][ C1] Call Trace: [ 487.364198][ C1] [ 487.364204][ C1] default_idle+0x13/0x20 [ 487.364225][ C1] default_idle_call+0x73/0xb0 [ 487.364255][ C1] do_idle+0x1e7/0x510 [ 487.364272][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 487.364294][ C1] ? __pfx_do_idle+0x10/0x10 [ 487.364315][ C1] ? do_idle+0x10/0x510 [ 487.364333][ C1] cpu_startup_entry+0x44/0x60 [ 487.364351][ C1] start_secondary+0x101/0x110 [ 487.364375][ C1] common_startup_64+0x13e/0x147 [ 487.364405][ C1] [ 487.365006][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 487.541352][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 487.550457][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 487.560506][ T31] Call Trace: [ 487.563777][ T31] [ 487.566700][ T31] dump_stack_lvl+0x99/0x250 [ 487.571296][ T31] ? __asan_memcpy+0x40/0x70 [ 487.575882][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.581075][ T31] ? __pfx__printk+0x10/0x10 [ 487.585672][ T31] vpanic+0x237/0x6d0 [ 487.589651][ T31] ? __pfx_vpanic+0x10/0x10 [ 487.594153][ T31] ? preempt_schedule_common+0x83/0xd0 [ 487.599612][ T31] panic+0xb9/0xc0 [ 487.603372][ T31] ? __pfx_panic+0x10/0x10 [ 487.607786][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 487.613161][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 487.619316][ T31] watchdog+0xf9f/0xfa0 [ 487.623471][ T31] ? watchdog+0x1e2/0xfa0 [ 487.627806][ T31] kthread+0x711/0x8a0 [ 487.631873][ T31] ? __pfx_watchdog+0x10/0x10 [ 487.636541][ T31] ? __pfx_kthread+0x10/0x10 [ 487.641151][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 487.646350][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.651548][ T31] ? __pfx_kthread+0x10/0x10 [ 487.656137][ T31] ret_from_fork+0x4bc/0x870 [ 487.660728][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 487.665837][ T31] ? __switch_to_asm+0x39/0x70 [ 487.670593][ T31] ? __switch_to_asm+0x33/0x70 [ 487.675350][ T31] ? __pfx_kthread+0x10/0x10 [ 487.679937][ T31] ret_from_fork_asm+0x1a/0x30 [ 487.684711][ T31] [ 487.688001][ T31] Kernel Offset: disabled [ 487.692346][ T31] Rebooting in 86400 seconds..