last executing test programs: 1m38.81655039s ago: executing program 3 (id=2400): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x49}}}}}, 0x30}}, 0x240040c0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 1m38.816201295s ago: executing program 3 (id=2401): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x1, &(0x7f0000000140), &(0x7f0000000080)=0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r1, 0x2, 0x0, 0x88b}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f00000002c0)=0x20, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={@loopback, @loopback, 0x18, 0x1d}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r7, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r8}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r7, &(0x7f0000000380), 0x0}, 0x20) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000000c0)=r5, 0x4) listen(r6, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000240)=0x6, &(0x7f0000000280)=0x4) r9 = socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f0000000200)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) readv(r11, &(0x7f00000003c0)=[{&(0x7f0000001400)=""/227, 0xe3}], 0x1) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 1m38.80062457s ago: executing program 3 (id=2403): r0 = socket$inet6(0x10, 0x2, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16, 0x0, 0x0, 0xfffffffe}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) 1m38.766998104s ago: executing program 3 (id=2404): r0 = socket(0x1e, 0x2, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x100000, 0x0}, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r2], 0x7c}, 0x1, 0x0, 0x0, 0x2004c0c1}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}]}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) (async) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @none={0x3}}, 0x14, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x80}, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) close(r3) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x4, 0x1}, 0x10) (async) r7 = socket$kcm(0x10, 0x2, 0x4) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000240)={0x1080}, 0x10) (async) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000001200211700000000000000f706000000", @ANYRES32=0x0, @ANYBLOB="000000000000000004002b"], 0x24}}, 0x0) (async) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000200)="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", 0x103}], 0x1}, 0x0) 1m38.536390786s ago: executing program 3 (id=2405): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x21}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) (async) r1 = socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x8, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)={0x0, ""/256, 0x0, 0x0, 0x0}) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x8c, r5, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x448546318eeaeadc}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x42}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20048891}, 0x90) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000080)={"294a1a6fd10ede775cb8e7f606be8e44", r3, r4, {0x1, 0x85d}, {0x3, 0x1}, 0x10000, [0x3ff, 0x7f, 0xc, 0x27442f8b, 0xffffffffffffffff, 0x100000001, 0x47320aff, 0xff, 0x6, 0x3, 0x2, 0x4, 0x9, 0x9, 0x4]}) 1m38.536130123s ago: executing program 3 (id=2406): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x2d, 0xb, 0x0, 0x0, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)={0x3, 'netdevsim0\x00', {0x7}, 0xfff}) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000180)=[{0x1, 0x1, {0x1, 0xf0, 0x3}, {0x2}, 0xfd}], 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x2d, 0xb, 0x0, 0x0, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x8000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)={0x3, 'netdevsim0\x00', {0x7}, 0xfff}) (async) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000180)=[{0x1, 0x1, {0x1, 0xf0, 0x3}, {0x2}, 0xfd}], 0x20) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) 1m23.437147609s ago: executing program 32 (id=2406): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x2d, 0xb, 0x0, 0x0, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)={0x3, 'netdevsim0\x00', {0x7}, 0xfff}) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000180)=[{0x1, 0x1, {0x1, 0xf0, 0x3}, {0x2}, 0xfd}], 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x2d, 0xb, 0x0, 0x0, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x8000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)={0x3, 'netdevsim0\x00', {0x7}, 0xfff}) (async) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000180)=[{0x1, 0x1, {0x1, 0xf0, 0x3}, {0x2}, 0xfd}], 0x20) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) 9.015932308s ago: executing program 1 (id=4051): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @remote}) 8.916252902s ago: executing program 1 (id=4052): syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @broadcast=0xe0000001}, {0x4e21, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @typedef={0x4}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x4e}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$l2tp(0x2, 0x2, 0x73) 8.779635099s ago: executing program 1 (id=4059): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r5) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r5, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="192c2fbd7000fcdbdf2515000000080014006e66631008000100", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x840) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x128, r3, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_LLC_SDP={0xe0, 0x13, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [{0xc, 0x1, 'nl80211\x00'}, {0x9, 0x1, '-+\xfcE('}]}, {0x10, 0x0, 0x0, 0x1, [{0xc, 0x1, 'nl80211\x00'}]}, {0x58, 0x0, 0x0, 0x1, [{0x12, 0x1, 'memory.events\x00'}, {0xc, 0x1, 'nl80211\x00'}, {0x6, 0x1, '\\]'}, {0xc, 0x1, 'nl80211\x00'}, {0x12, 0x1, 'memory.events\x00'}, {0xc, 0x1, 'nl80211\x00'}]}, {0x38, 0x0, 0x0, 0x1, [{0x12, 0x1, 'memory.events\x00'}, {0xa, 0x1, '&\x83[&]{'}, {0x12, 0x1, 'memory.events\x00'}]}, {0x20, 0x0, 0x0, 0x1, [{0x5, 0x1, '+'}, {0x12, 0x1, 'memory.events\x00'}]}]}, @NFC_ATTR_LLC_SDP={0x2c, 0x13, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [{0x4}, {0x6, 0x1, '+]'}, {0x4}, {0x5, 0x1, '['}, {0xc, 0x1, 'nl80211\x00'}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r11, @ANYBLOB="08004d010001"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r13, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000f020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52, 0x0, 0x0, 0x10}, 0x28) 7.847469624s ago: executing program 1 (id=4072): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) (async) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c00028005000100000000000800074000000000100017000000000000000000"], 0x84}}, 0x0) (async) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) (async) write$cgroup_pressure(r2, &(0x7f00000001c0)={'full', 0x20, 0x7, 0x20, 0x4}, 0x2f) (async) close(r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r6, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r8, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async) close(r9) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$igmp(0x2, 0x3, 0x2) (async) syz_emit_ethernet(0x2a, &(0x7f0000000680)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510000600660000070290780a010102ac1414aa110190780000400077fb3e34d334210bc9fc58a7dfa5d8dea4b19e28338f9dba3d0bea335c320d11a2581909de5deae4ca19c79fddda98dc67bdc35b56c37b0cd42c7679618faf2f0ac8f45797a773dfe911313343f74d0982b32aa1a4b03a9365dd3063909f7c777e0b20e48a1218852cdb5a72daf508000000742738130b35f06c39475ec7084cac2c16bbd525013070ba4cb37b6955ff5405b48eca95f758731d75f790363de2e9d91e11edc60439e865e06f2c6b61fc193198d8994b740c03e0ea"], 0x0) (async) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000200)=0x5, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2e, '\x00', 0x0, @fallback, r2, 0x6}, 0x94) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)={0x1570, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x18, 0xfc, 0x0, 0x1, [@nested={0x14, 0x8, 0x0, 0x1, [@typed={0xe, 0x131, 0x0, 0x0, @str='*\'&-.+*{.\x00'}]}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x1530, 0x2, 0x0, 0x1, [@nested={0x152c, 0x115, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @u32}, @nested={0x452, 0x134, 0x0, 0x1, [@nested={0x47, 0x34, 0x0, 0x1, [@nested={0x4, 0x3}, @typed={0x8, 0x2b, 0x0, 0x0, @fd=r0}, @generic="e1027f84b25d557c33e40b883d434eb429cb89040ccfaa80fcdb5b4cc6a5845c2e57db533232acf220d7df2b587b5b019afb49ebee4247"]}, @nested={0x4, 0x7e}, @generic, @nested={0x10, 0x150, 0x0, 0x1, [@nested={0x4, 0x83}, @nested={0x4, 0x3b}, @nested={0x4, 0xd3}]}, @generic="a81cae2946fbd43b5bd39f9158b9387a96b37767f01c7911b366cba04cc729732785bad2d137ce21d966a9102f522f7c93f7b9c4ebb1a11eab1f6d3c6ccffb4f6300d2d6002fe1d9e3f80c78fadf0b1a29471f18d9360118e50752af4850ba1c2f96a3b18437aab280e175172b253fd7e0a6a07edb7499d598ad4d6b0b263289d25c13b335edd7a00d1b5ea54af1f076e78a8b8876d4ebd6a4cc24b4f368d4c4b0feb7c17a8639e12c75f1c6bf53a3167fdb70c791ba981399b86f78df6d8751c03cb73cf5fa6c547cc569853e66d1b83704eac6909992bd0d2ab48687b78d698267ff11a14aafeb66bdb12420025b2a7be2", @generic="d8bbb0048a9e46ac4c6969f79fa1a16f545e8aa5e75f31793b68ada23b4791f23556a8592298a8c7b5fff4301e28baadf289902bcabf8fb5900d04620aee610d8218220e00b724290e34688685cc11a28935bd9ed25527c70d42eb4cfb1773e94911501892749532823eae6aabdab229c6a3ea9699000a7780e6b2485c4504ad127ebf02a0a0576f74fe55df902d0f5a5309178ffbe52f789bf52f50eca0f215d62228d313b0babd9aae3cf2614fea1f22682b3f35731e5100c27866371437695b5cee55e9565d03ca2ab3f189e8f88bfa9fa15e511f79cd76be9f2a44924c84358c56ff3a29119b80aba6", @nested={0x114, 0xc, 0x0, 0x1, [@generic="340a3914e3e6b64c0b9adf8efea090893a282dd206ab78bec5e8b27d400d32e17a99df7e165b187781ccc8d0ba", @generic="a91c677db03bdc52b9b0cb2a8a5cd500bde6f9ac71f4a759127a3324d24337e5e8ec87a4906defed54306cb4a8718128632b087d43307638451463763af6a99750754effeb07fb245e6fbd856c23b823cd4f6afdd462e112cbcfa2d85650613a4cd1a1f30e38022f163c7b335826acb0d0a99ff1914d985519c0fb71b437fd3852ff73ea593022c3a021f7af0521e08baa99c8b5d88412792921213a4d3291e4bb6f0c1df20f0ae9986e130edccfcb00828242a20a599107c46d24d0374facbc2b9fffff90fb3df8c7395bd599715edf74028bf79331d66fc15a872d6d0619a3209cde"]}, @generic="91d3c1ba749156488dcc4351e21c3f507f81c617f97cabc1e720313f5212546d7b381d4c7ff5c52210ee1fb4b426a2e352438938b5115b877474622fd9f3b9fa5d2a1e8a90f45b06eb47b11f73d78cd92dec1db9330fc7d5af947174e3d217a89973ed1c2256da108cddfba1264f8c1693c566df8fbb61eb824e5f2ef28a9cc0bd593303210ff1f0dcdfa5561926643c99549e4259ddd1dadede08771619aaf7a2f5b810878c24ff5f415e37544795acea3348c8979675bd2dd7771f835fc5a3efc40bd0e732", @generic="56be654e540e96aaedd3107d70226ff68198819b87a16117763c603334dc34c6952e4f7c9c2f0e9d5c84a9ac21189d0fb1c8e9f480c08ee3c2b26c"]}, @nested={0x10ca, 0x11c, 0x0, 0x1, [@nested={0x1098, 0x1c, 0x0, 0x1, [@typed={0x8, 0x113, 0x0, 0x0, @uid}, @typed={0x8, 0x2a, 0x0, 0x0, @u32=0x6}, @generic="daeb28bf1b192f8433be4d5d98329c758bab2c2aec148961b42eabcd8c5a53e470692d795d06fff7780a8e377d79093de2be50c2b4907948e42fc053d64c9d16f3e12b773b06f8dd7780701346077b94a94dfd0f", @typed={0x14, 0x67, 0x0, 0x0, @ipv6=@private0}, @nested={0x4, 0xdb}, @typed={0xc, 0xec, 0x0, 0x0, @u64=0x7}, @typed={0xc, 0xca, 0x0, 0x0, @u64=0x100000001}, @generic="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"]}, @generic="d16beb181d9ec83039eeb5722737507418b4a2e9bbe4f737b11f672f93e70bcb86637323d5e19be61e0f8b09784f"]}]}]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x9}]}, 0x1570}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 7.75185202s ago: executing program 1 (id=4078): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000005, 0x12, r0, 0x1000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x10, &(0x7f0000000040), 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r6) sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r7, 0x325, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10004}, 0x8000) (async, rerun: 32) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x100000000, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1406, 0x1}, 0x10}}, 0x0) (async) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0xfeffff7f00000000}, {0x100, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x4cc00) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}}, 0x4800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xc}, {0x0, 0xd}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async, rerun: 32) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000400)=""/65, &(0x7f0000000280)=0x41) (rerun: 32) 7.579667204s ago: executing program 1 (id=4084): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) (async) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) (async) sendmmsg$sock(r2, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a", 0x4d}, {&(0x7f0000000fc0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b43", 0xb9}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f", 0x70}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9e", 0x16}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861d", 0xf}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192909644d18f5695718d3c3532f6ed73c2422e87", 0x31}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc010) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) accept$nfc_llcp(r3, &(0x7f0000001540), &(0x7f0000000180)=0x60) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r4, r4, 0x2f, 0x10}, 0x20) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r5, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) (async, rerun: 64) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r6, r4, 0x4, r4}, 0x10) (async, rerun: 64) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, 0x0, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001d000bcc000000000000000007000000c7"], 0x1c}}, 0x0) 1.36554345s ago: executing program 2 (id=4209): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) (async) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c002b6a0fe4fb27340a1e12800c0001006d6163766c616e000c00028008000200080000000a000100aaaaaaaaaabb0000"], 0x48}}, 0x0) socket(0x11, 0x800000003, 0x0) (async) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xb0}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x5, 0x1, 0x5, 0x0, 0xffffffff, 0x7fffffff}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000040)=0x40, 0x4) 1.312468735s ago: executing program 5 (id=4210): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r1, 0x0, 0x7fffffff}, 0x18) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r4, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000002c0)={r5, 0x3}, &(0x7f00000003c0)=0x8) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) (async) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000640)=""/82, 0x52}], 0x2}, 0x40}], 0x1, 0x102, 0x0) 1.298398222s ago: executing program 5 (id=4212): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffa5b, 0x4b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x40}}, 0x4800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c00028008000740000000000500020000000000080003400000004a08000640000000010800044000000002140000001100010000000000000000000000000a72dcd551611c08c6cd48a0bc2492e5f2de"], 0x94}}, 0x0) 1.13434828s ago: executing program 5 (id=4213): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000002f00040000000000000005000000000000000000070000070900010073797a30000000004c0042cb49db4e5e0cd02aa39dd53a730000090a01040000000000000000070000000900020073797a31000000000900010073797a3001000000080005400000001c08000a4000000000080003400000004008000f40000000063c0000000c0a01030000000000000000070000070900020073797a31000000000900010073797a3000000012100003800c0000800800034000000002140000001000"], 0xd0}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/29, 0x1d}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f0000002900)=""/4096, 0xe17}, {&(0x7f0000000000)=""/127, 0x7f}, {&(0x7f0000000600)=""/53, 0x35}], 0x5, &(0x7f00000006c0)=""/105, 0x69}, 0x4}], 0x48, 0x2000, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="44000000180001002cbd7000000000000a0000000000fd020000000008000400", @ANYRES32=r1, @ANYBLOB="0600150008000000180016"], 0x44}, 0x1, 0x0, 0x0, 0x4810}, 0x0) 892.575356ms ago: executing program 4 (id=4214): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) splice(r2, 0x0, r5, 0x0, 0x1000, 0x0) recvfrom$rxrpc(r0, &(0x7f0000000080)=""/209, 0xd1, 0x10001, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xc562}}, 0x24) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0xfffffffc}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 597.310498ms ago: executing program 2 (id=4216): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r0, 0x24, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x150, r1, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x52cf}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x210}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7ff}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x40}, 0x4000891) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x100000001, 0x2, 0x9709}) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea018512babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7acbf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000005d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd353646000000000000000000002b0000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c30180000000000000c03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3e16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e2e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54ae54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1386f5800"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a85fe0ffff00124000632177fbac141416e000030a94029f03030180b706000000000000008100", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000330001002bbd7000fedbdb2505000000080004"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1}}}}}}]}, 0x48}, 0x1, 0x4801000000000000}, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r7, 0x1}, 0x14}}, 0x0) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs$namespace(r9, &(0x7f0000000040)='ns/cgroup\x00') recvmsg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2041) (async) r10 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) sendmsg$key(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 548.553393ms ago: executing program 4 (id=4217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x34}}, 0x240008c0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x40) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r5, 0x200, 0x70bd2d, 0x6, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xff}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc041}, 0x24008000) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 521.144397ms ago: executing program 2 (id=4219): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000171102a00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079103000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0x38}}, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x8, 0x3f, 0x3202, @vifc_lcl_addr=@rand_addr=0x64010102, @multicast2}, 0x10) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x1, 0x3}, 0x6) socket$nl_route(0x10, 0x3, 0x0) 424.537788ms ago: executing program 2 (id=4220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000003e00)=""/4098, 0x1002}], 0x2}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}], 0x4, 0x40010020, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf257c00000008000300", @ANYRES32=r4, @ANYBLOB="0a08060008021100000100000a000600080200000a0006000802110000000094c4f3070008021100000000000a"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0xd0) 423.938927ms ago: executing program 0 (id=4221): r0 = socket$inet6(0xa, 0x803, 0x1be) sendto$inet6(r0, &(0x7f0000000000)="2db529835e", 0x5, 0x4000011, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @loopback, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="88bf5a48f22f0ebe47aacecc8e1f9420aefcbb4127f540ab5ccae886ee60", 0x1e, 0x4, &(0x7f00000000c0)={0xa, 0x4e21, 0x2254948a, @local, 0x81}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000011) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000240)=""/41, &(0x7f0000000280)=0x29) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x10, 0x0, 0x6, 0xf2, {{0xd, 0x4, 0x1, 0x2b, 0x34, 0x68, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x41}, {[@rr={0x7, 0xf, 0x62, [@dev={0xac, 0x14, 0x14, 0x37}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x11, 0x0, [{0x7, 0xb, "7ae9d8482013a242df"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x9, 0x8, 0x30, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x8, 0x1, 0x5}}) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x90, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xc}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x3}, @ETHTOOL_A_RINGS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x5}]}, 0x90}, 0x1, 0x0, 0x0, 0x9}, 0x44010) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r7, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x11) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000800), 0x4) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r7, 0x20, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004010}, 0x10040) recvfrom$unix(r1, &(0x7f0000000940)=""/155, 0x9b, 0x101, &(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x6e) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), r2) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x80, r8, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x80}, 0x1, 0x0, 0x0, 0xc001}, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000c00)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000c40)=0x2c) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r1) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x34, r9, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000000) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x30, r3, 0xf3c, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, 0x4, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x811}, 0x4002084) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x44, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) epoll_create(0x10) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000001100)={0xc, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x1, 'ovf\x00', 0x11, 0x0, 0x30}, 0x2c) socket(0x27, 0x800, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) 415.699365ms ago: executing program 4 (id=4222): r0 = socket$inet(0x2, 0x2, 0x9) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @local}, 0x10) close(0x4) 405.282791ms ago: executing program 0 (id=4223): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYRESOCT], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000080)=0xb, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0xf0, 0x0, 0xf0, 0x2e8, 0x1a0, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, &(0x7f0000000000), {[{{@ip={@empty, @loopback, 0xffffff00, 0xff000000, 'syzkaller0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x4, 0x1, 0x11}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@unspec=@mark={{0x30}, {0x9, 0x8f, 0x1}}, @common=@icmp={{0x28}, {0x3, '\"y', 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xb8}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x1a}, 0xff000000, 0xffffffff, 'gretap0\x00', 'ip6erspan0\x00', {0xff}, {}, 0x89, 0x3, 0x9}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x9, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xffffff00, 0xffffff00, 'batadv_slave_1\x00', 'macvlan0\x00', {}, {}, 0x1d, 0x1, 0x4e}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x2, @ipv4=@loopback, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x88}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 344.699115ms ago: executing program 4 (id=4224): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "0002000000753904030405a024f0dd00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a14a1d8c6900"}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 280.339593ms ago: executing program 0 (id=4225): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x67a, 0x1ff}, &(0x7f00000000c0)=0x90) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r3 = socket(0x40000000015, 0x5, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x400000000000003, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x60}}, 0x0) (async) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000100)={r1, 0xdc8}, &(0x7f0000000380)=0x8) (async) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) (async) r7 = socket(0x1d, 0x2, 0x6) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000740)=ANY=[@ANYBLOB="040100001000000429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000306200002800d40000000000000063616efeea0018000288140001000000000059f51a878814e96a62d49b91f75fae972c44f146e31db81e8407a2a823c597e11ac31153fa24ac8bf468968162cd79ce6f5802af2bdbb5f655b9d7ee76b9ec90ba0b5d02", @ANYRES32=0x0, @ANYBLOB="0214020000000000bc001680a80001801000020003000000680800000100000054000c801400010004000000c10b00000000000088a800001400010001040000960f0000000008008100000014000100b3925935eb050000c40d000088a800001400010000000200ee090000d973000088a8000018000c801400010004000000ec0e000004000000810000000c00030000000000000000001000020003000000e60100007f0000000c0007000300000000010000100001800c00070001800000ffffff7f"], 0x104}}, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) socket(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) (async) setsockopt$inet_buf(r9, 0x0, 0x20, &(0x7f0000000400)="170000000200020000ffbe8c", 0xc) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) (async) r11 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000003c0)={r5, 0x2}, 0x8) (async) bind$vsock_stream(r11, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r11, 0x0) accept4$vsock_stream(r11, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x800) (async) r12 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r12, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14ecff00", @ANYRES16=r10, @ANYBLOB="2000000000000000000006000000"], 0x14}}, 0x4) (async) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r8, @ANYRES32=0x0, @ANYBLOB="0a00000000000000140012800b0001006d6163736563000004000280"], 0x34}}, 0x0) 278.142575ms ago: executing program 2 (id=4226): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'macvlan1\x00', &(0x7f0000000000)=@ethtool_cmd={0x20, 0xd, 0x28b83f1f, 0x0, 0x4, 0x4, 0xf7, 0xff, 0x5, 0x81, 0x40, 0x7ff, 0x100, 0x1, 0x5, 0x4, [0x3, 0x2]}}) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="3400000019000100000a56b018d36f122d"], 0x34}}, 0x0) (rerun: 32) 276.721565ms ago: executing program 4 (id=4227): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000880) r1 = socket(0x2, 0x5, 0x0) setsockopt$CAIFSO_REQ_PARAM(r1, 0x84, 0x80, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt(r3, 0x22, 0xfffffff1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x1001, @fixed}, 0xe) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='GPL\x00'}, 0x94) 274.694589ms ago: executing program 0 (id=4228): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000100)=0x0) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000240)=@nfc_llcp={0x27, r4, 0xffffffffffffffff, 0x7, 0x21, 0xff, "f040acbfa62ee3e2204bf4ce6bd711f19522d240b2c6f58b4b15024f0bb074739bac3571a98f9f392407c71aa426ccf0d1ef77106f1266095854d6b75aede6", 0x2c}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)="381df6a632d59d352035a7192cce24ff2c698a2bff280fc0269981b5a3ea3f6004644f0811ead27613d6b1b9d946cc70c9bc455b62e3c338881b78a2050938ad69d90a9657e93dfbdeeb14258ace7216ec3854bce0d7b2d3a616f6a299a1db282a1700be3dca9eac4277f226876316c30360a7b37e2bc9d0c53259c581025ef055c639a5282442598a3595b15c3365bdb7ea51740c72ef13966084ef126af41c04cb0c3c0bad911888e8acf15533a654b5a62d015b85054e7f357796480f05888ae0b4df23e2803e2fcfbd8ea2d1e32018f3ae41405681f021c8d9a4ee98a70ad90984", 0xe3}, {&(0x7f0000000400)="e8553aacfd927c1bee4aee6369b92d079006c0e84cafb5494a574793cd5604cee8e4725d36", 0x25}], 0x2, &(0x7f00000005c0)=[{0x110, 0x84, 0x1, "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"}], 0x110}, 0x40000) (async) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000240)=@nfc_llcp={0x27, r4, 0xffffffffffffffff, 0x7, 0x21, 0xff, "f040acbfa62ee3e2204bf4ce6bd711f19522d240b2c6f58b4b15024f0bb074739bac3571a98f9f392407c71aa426ccf0d1ef77106f1266095854d6b75aede6", 0x2c}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)="381df6a632d59d352035a7192cce24ff2c698a2bff280fc0269981b5a3ea3f6004644f0811ead27613d6b1b9d946cc70c9bc455b62e3c338881b78a2050938ad69d90a9657e93dfbdeeb14258ace7216ec3854bce0d7b2d3a616f6a299a1db282a1700be3dca9eac4277f226876316c30360a7b37e2bc9d0c53259c581025ef055c639a5282442598a3595b15c3365bdb7ea51740c72ef13966084ef126af41c04cb0c3c0bad911888e8acf15533a654b5a62d015b85054e7f357796480f05888ae0b4df23e2803e2fcfbd8ea2d1e32018f3ae41405681f021c8d9a4ee98a70ad90984", 0xe3}, {&(0x7f0000000400)="e8553aacfd927c1bee4aee6369b92d079006c0e84cafb5494a574793cd5604cee8e4725d36", 0x25}], 0x2, &(0x7f00000005c0)=[{0x110, 0x84, 0x1, "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"}], 0x110}, 0x40000) socket$l2tp(0x2, 0x2, 0x73) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = socket(0x10, 0x803, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0xa, &(0x7f00000004c0)=ANY=[@ANYRES16=r6, @ANYBLOB="5e017b"], 0x4) setsockopt$inet_int(r5, 0x0, 0x12, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000000800010001000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000203030000000000000000000000000008000100020000"], 0x1c}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="07206a261000", @ANYRES16=r9, @ANYBLOB="04002dbd7000fbdbdf25080000000c009900080000003d000000"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0xa0bff88582b3067) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="07206a261000", @ANYRES16=r9, @ANYBLOB="04002dbd7000fbdbdf25080000000c009900080000003d000000"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0xa0bff88582b3067) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000740)={&(0x7f00000004c0), 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x40, r11, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x70}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x40808) (async) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000740)={&(0x7f00000004c0), 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x40, r11, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x70}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x40808) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x88}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001400b5952dbd7000000000000a0000ff", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000500aa0800090007000000"], 0x34}}, 0x0) 207.262548ms ago: executing program 5 (id=4229): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r6 = accept4(r4, 0x0, &(0x7f0000000000), 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000040)={0x5, 0x4, 0xb, 0x32, 0xf7, 0x4, 0x0, 0x3, 0x9, 0xf6, 0x8, 0x0, 0x7}, 0xe) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xf4, 0x65, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0xb4, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x1}, @TCA_FLOW_XOR={0x8, 0x7, 0x1ff}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffff9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x88, 0x9, 0x0, 0x1, [@m_bpf={0x84, 0x1e, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x6, 0x5, 0xb4, 0xa5}, {0xcc, 0xd8, 0x9, 0xe}]}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xfffffffa, 0x5, 0xffffffffffffffff, 0x10000, 0x10000}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x441d}]}, 0xf4}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r10 = socket(0x10, 0x803, 0x0) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r9, @ANYBLOB="0524060040030001300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x0) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9741f97d", @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf2503000000060001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4008010) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB=' \x00'], 0x50) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, 0x1, 0x0, 0x4], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) 140.403088ms ago: executing program 0 (id=4230): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000001c00088004000c8014"], 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x2) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000001c00088004000c8014"], 0x44}}, 0x0) (async) 122.266869ms ago: executing program 4 (id=4231): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069108e0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) (async) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000002c0)={0xfffffffffffffffc, 0x10000, 0x1000, 0x3, 0x7}, 0x20) (async) setsockopt$inet6_int(r1, 0x29, 0x4a, 0x0, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r6, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r2, r4, 0xa6f7dda754eb751c, 0x0, @val=@uprobe_multi={&(0x7f00000003c0)='\x00', &(0x7f0000000440)=[0xfffffffffffffeff, 0x100000000000000, 0x1, 0x31, 0x4, 0x5820, 0x5, 0x3, 0x17fa], &(0x7f00000004c0)=[0x2, 0x4, 0x0, 0x0, 0x3], 0x90000000000000, 0x9, 0x1, r6}}, 0x40) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r7, r7, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup=r7, r8, 0x2f, 0x18, 0x4, @void, @value=r7}, 0x20) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c8, &(0x7f0000000100)) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000000000000141000000180017"], 0x34}}, 0x0) 62.725961ms ago: executing program 2 (id=4232): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="110027bd70000800000003000000140001800d0001007564703a73797a2d00000000a46c344883ca421c87ed2f640b3210ce5ef002cd810dfce9fee557bda57661b090d3d8447e655dae"], 0x28}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) unshare(0x6020400) socket$vsock_stream(0x28, 0x1, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r3, 0x300) (async) shutdown(r3, 0x300) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x28, r2, 0x201, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4002080}, 0x4000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x50, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x42}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r6, 0x800, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x48800) 62.286329ms ago: executing program 5 (id=4233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r5, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd91, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300901a77f9fcca8cf8d40a080500c87aba6e7d4764470c1037f06f9ac3025eb47496a6d01d8a652d2e36d37353201b133aac392c0cba7280fc088d0e20f6540895e300717cd292408bcf8438bbb4fff68bf05c21c05dca14c36ea6bbc3ef47534f2721eff5655a780ac3", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) 420.411µs ago: executing program 0 (id=4234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000feff00000014000300686173683a69702c706f72742c6970000900020073797a32000a00000500040000000000050005000a000000050001000600000014000780080006402000000008000840"], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x4, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x4004004) 0s ago: executing program 5 (id=4235): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000004c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @void, {@ipv4={0x800, @icmp={{0x2a, 0x4, 0x1, 0x0, 0xb0, 0x66, 0x0, 0x5, 0x1, 0x0, @remote, @private=0xa010101, {[@generic={0x7, 0x11, "2fcf38792b1a032efdeaf703b3b7a1"}, @timestamp_addr={0x44, 0x2c, 0xb7, 0x1, 0x7, [{@local}, {@broadcast, 0x5}, {@broadcast, 0x3b23}, {@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x9}]}, @timestamp_prespec={0x44, 0xc, 0x11, 0x3, 0x2, [{@private=0xa010102, 0x1000}]}, @ssrr={0x89, 0x7, 0xb3, [@loopback]}, @lsrr={0x83, 0x17, 0x7, [@empty, @broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @end, @timestamp_prespec={0x44, 0xc, 0xb1, 0x3, 0x0, [{@loopback}]}, @noop, @rr={0x7, 0x1f, 0xc6, [@dev={0xac, 0x14, 0x14, 0x20}, @multicast1, @rand_addr=0x64010100, @remote, @loopback, @multicast2, @remote]}]}}, @echo_reply={0x0, 0x0, 0x0, 0x66}}}}}, 0x0) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r6) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x1, 0x3}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r8, @ANYRES32, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) syz_init_net_socket$rose(0xb, 0x5, 0x0) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r9, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) recvfrom$ax25(r1, 0x0, 0x1a, 0x2, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10dfe000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000004000200110000", 0x5b}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = socket(0x28, 0x1, 0x0) getsockname$packet(r10, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) connect$bt_l2cap(r10, &(0x7f0000000100)={0x1f, 0x7, @none, 0xc906, 0x1}, 0xe) kernel console output (not intermixed with test programs): null),cpuset=/,mems_allowed=0-1 [ 222.656507][T14266] CPU: 1 UID: 0 PID: 14266 Comm: syz.1.2517 Not tainted syzkaller #0 PREEMPT(full) [ 222.656535][T14266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.656548][T14266] Call Trace: [ 222.656555][T14266] [ 222.656564][T14266] dump_stack_lvl+0x189/0x250 [ 222.656599][T14266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.656621][T14266] ? __pfx__printk+0x10/0x10 [ 222.656642][T14266] ? lock_release+0x4b/0x3e0 [ 222.656668][T14266] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 222.656689][T14266] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 222.656710][T14266] warn_alloc+0x214/0x310 [ 222.656735][T14266] ? stack_depot_save_flags+0x40/0x860 [ 222.656759][T14266] ? __pfx_warn_alloc+0x10/0x10 [ 222.656788][T14266] ? kasan_save_track+0x4f/0x80 [ 222.656810][T14266] ? xskq_create+0x56/0x170 [ 222.656831][T14266] ? xsk_init_queue+0xb0/0x110 [ 222.656851][T14266] ? xsk_setsockopt+0x4dc/0x8d0 [ 222.656871][T14266] ? do_sock_setsockopt+0x17c/0x1b0 [ 222.656888][T14266] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 222.656904][T14266] ? do_syscall_64+0xfa/0x3b0 [ 222.656927][T14266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.656949][T14266] __vmalloc_node_range_noprof+0x125/0x12f0 [ 222.656987][T14266] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 222.657012][T14266] ? xsk_setsockopt+0x462/0x8d0 [ 222.657034][T14266] ? __kasan_kmalloc+0x93/0xb0 [ 222.657057][T14266] vmalloc_user_noprof+0xad/0xf0 [ 222.657082][T14266] ? xskq_create+0xbf/0x170 [ 222.657103][T14266] xskq_create+0xbf/0x170 [ 222.657126][T14266] xsk_init_queue+0xb0/0x110 [ 222.657148][T14266] xsk_setsockopt+0x4dc/0x8d0 [ 222.657170][T14266] ? __pfx_xsk_setsockopt+0x10/0x10 [ 222.657191][T14266] ? __pfx_aa_sk_perm+0x10/0x10 [ 222.657215][T14266] ? lock_release+0x4b/0x3e0 [ 222.657239][T14266] ? aa_sock_opt_perm+0xff/0x1b0 [ 222.657257][T14266] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 222.657275][T14266] ? __pfx_xsk_setsockopt+0x10/0x10 [ 222.657297][T14266] do_sock_setsockopt+0x17c/0x1b0 [ 222.657316][T14266] __x64_sys_setsockopt+0x13f/0x1b0 [ 222.657336][T14266] do_syscall_64+0xfa/0x3b0 [ 222.657359][T14266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.657377][T14266] ? clear_bhb_loop+0x60/0xb0 [ 222.657396][T14266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.657413][T14266] RIP: 0033:0x7f6313f8ebe9 [ 222.657429][T14266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.657445][T14266] RSP: 002b:00007f6314dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 222.657465][T14266] RAX: ffffffffffffffda RBX: 00007f63141b5fa0 RCX: 00007f6313f8ebe9 [ 222.657479][T14266] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 222.657491][T14266] RBP: 00007f6314011e19 R08: 0000000000000004 R09: 0000000000000000 [ 222.657503][T14266] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.657515][T14266] R13: 00007f63141b6038 R14: 00007f63141b5fa0 R15: 00007ffc69cdb888 [ 222.657537][T14266] [ 222.658766][T14266] Mem-Info: [ 222.708592][T14268] tipc: Enabled bearer , priority 0 [ 222.714639][T14266] active_anon:4636 inactive_anon:0 isolated_anon:0 [ 222.714639][T14266] active_file:2628 inactive_file:39872 isolated_file:0 [ 222.714639][T14266] unevictable:768 dirty:171 writeback:0 [ 222.714639][T14266] slab_reclaimable:12118 slab_unreclaimable:121671 [ 222.714639][T14266] mapped:29199 shmem:1367 pagetables:1109 [ 222.714639][T14266] sec_pagetables:0 bounce:0 [ 222.714639][T14266] kernel_misc_reclaimable:0 [ 222.714639][T14266] free:1298750 free_pcp:17134 free_cma:0 [ 222.729405][T14268] syzkaller0: entered promiscuous mode [ 222.731634][T14266] Node 0 active_anon:18544kB inactive_anon:0kB active_file:10512kB inactive_file:159284kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116796kB dirty:684kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13508kB pagetables:4296kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 222.736979][T14268] syzkaller0: entered allmulticast mode [ 223.069603][T14266] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 223.071460][T14270] tipc: Resetting bearer [ 223.100271][T14266] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 223.135329][T14266] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 223.141107][T14266] Node 0 DMA32 free:1293868kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18432kB inactive_anon:0kB active_file:10512kB inactive_file:157716kB unevictable:1536kB writepending:684kB present:3129332kB managed:2557456kB mlocked:0kB bounce:0kB free_pcp:46460kB local_pcp:20940kB free_cma:0kB [ 223.174411][T14266] lowmem_reserve[]: 0 0 1 1 1 [ 223.174560][T14267] tipc: Resetting bearer [ 223.179958][T14266] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 223.218803][T14266] lowmem_reserve[]: 0 0 0 0 0 [ 223.223754][T14266] Node 1 Normal free:3885748kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22168kB local_pcp:14120kB free_cma:0kB [ 223.224191][T14267] tipc: Disabling bearer [ 223.258421][T14266] lowmem_reserve[]: 0 0 0 0 0 [ 223.266501][T14266] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 223.286204][T14266] Node 0 DMA32: 1729*4kB (UME) 219*8kB (UM) 585*16kB (UME) 310*32kB (UM) 30*64kB (UM) 13*128kB (ME) 59*256kB (UM) 56*512kB (UME) 44*1024kB (UM) 9*2048kB (UME) 282*4096kB (UM) = 1293868kB [ 223.307016][T14266] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 223.319918][T14266] Node 1 Normal: 211*4kB (UE) 45*8kB (UME) 46*16kB (UME) 51*32kB (UME) 23*64kB (UM) 6*128kB (UME) 4*256kB (ME) 6*512kB (UME) 3*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3885748kB [ 223.338250][T14266] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 223.352020][T14266] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 223.373722][T14266] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 223.386279][T14266] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 223.396467][T14281] tipc: Enabled bearer , priority 0 [ 223.403774][T14281] syzkaller0: entered promiscuous mode [ 223.409993][T14266] 43863 total pagecache pages [ 223.410264][T14281] syzkaller0: entered allmulticast mode [ 223.414751][T14266] 0 pages in swap cache [ 223.429072][T14266] Free swap = 124996kB [ 223.433245][T14266] Total swap = 124996kB [ 223.438354][T14266] 2097051 pages RAM [ 223.442273][T14266] 0 pages HighMem/MovableOnly [ 223.448716][T14266] 425661 pages reserved [ 223.452999][T14266] 0 pages cma reserved [ 223.463498][T14280] tipc: Resetting bearer [ 223.507994][T14280] tipc: Disabling bearer [ 223.728310][T14308] bond0: (slave dummy0): Releasing backup interface [ 223.831954][T14322] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 224.048222][T14338] openvswitch: netlink: IP tunnel dst address not specified [ 224.091538][T14347] netlink: 'syz.1.2541': attribute type 1 has an invalid length. [ 224.098631][T14348] netlink: 'syz.1.2541': attribute type 1 has an invalid length. [ 224.113695][T14347] unknown channel width for channel at 909000KHz? [ 224.120988][T14347] unknown channel width for channel at 909000KHz? [ 224.128739][T14347] unknown channel width for channel at 909000KHz? [ 224.241607][T14352] netlink: 'syz.0.2543': attribute type 10 has an invalid length. [ 224.274456][T14355] netlink: 'syz.1.2544': attribute type 1 has an invalid length. [ 224.339422][T14367] vcan1: entered allmulticast mode [ 224.495522][T14375] netlink: 'syz.1.2550': attribute type 15 has an invalid length. [ 224.507398][T14375] netlink: 'syz.1.2550': attribute type 15 has an invalid length. [ 224.507397][T12844] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 224.507451][T12844] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 224.532108][T12844] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 224.540498][T12844] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 224.673719][T14381] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 224.687579][T14382] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 224.812949][T14392] bond0: entered allmulticast mode [ 224.818659][T14392] bond_slave_0: entered allmulticast mode [ 224.824393][T14392] bond_slave_1: entered allmulticast mode [ 224.831819][T14392] team0: entered allmulticast mode [ 224.837075][T14392] team_slave_0: entered allmulticast mode [ 224.843132][T14392] team_slave_1: entered allmulticast mode [ 224.850181][T14392] geneve0: entered allmulticast mode [ 224.855919][T14392] !: entered allmulticast mode [ 224.860813][T14392] geneve1: entered allmulticast mode [ 224.866824][T14392] bridge_slave_1: entered allmulticast mode [ 224.878871][T14394] vxcan1: entered promiscuous mode [ 224.884009][T14394] vxcan1: entered allmulticast mode [ 224.929685][T14398] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 224.941715][T14398] netlink: 'syz.1.2559': attribute type 10 has an invalid length. [ 224.951270][T14398] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 224.963013][T14398] bond0: (slave team0): Releasing backup interface [ 224.972330][T14398] team0: left allmulticast mode [ 224.978114][T14398] team_slave_0: left allmulticast mode [ 224.983665][T14398] team_slave_1: left allmulticast mode [ 224.990055][T14398] geneve0: left allmulticast mode [ 224.995202][T14398] !: left allmulticast mode [ 225.018533][T14398] team0: Port device 0! removed [ 225.031735][T14398] bond0: (slave bridge_slave_1): Releasing backup interface [ 225.039849][T14398] bridge_slave_1: left allmulticast mode [ 225.050743][T14398] bond0: (slave bond_slave_0): Releasing backup interface [ 225.060164][T14398] bond_slave_0: left allmulticast mode [ 225.070246][T14398] bond0: (slave bond_slave_1): Releasing backup interface [ 225.078918][T14398] bond_slave_1: left allmulticast mode [ 225.092506][T14398] team0: Port device team_slave_0 removed [ 225.103363][T14398] team0: Port device team_slave_1 removed [ 225.110937][T14398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.119670][T14398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.128866][T14398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.137555][T14398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.150645][T14398] team0: Port device geneve0 removed [ 225.158137][T14398] bond0: (slave geneve1): Releasing backup interface [ 225.166873][T14398] geneve1: left allmulticast mode [ 225.173476][T14398] bond1: (slave bond2): Releasing backup interface [ 225.181189][T14398] bond1: (slave bond2): the permanent HWaddr of slave - 0a:ad:60:e2:af:0a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 225.198481][T14398] bond1: (slave gretap1): making interface the new active one [ 225.207882][T14398] bond1: (slave gretap1): Releasing backup interface [ 225.282225][T14424] __nla_validate_parse: 30 callbacks suppressed [ 225.282243][T14424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2566'. [ 225.313021][T14417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2565'. [ 225.328752][T14417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2565'. [ 225.340002][T14417] netlink: 'syz.2.2565': attribute type 11 has an invalid length. [ 225.398548][T14434] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2570'. [ 225.590448][T14450] netlink: 'syz.0.2575': attribute type 8 has an invalid length. [ 225.729243][T14460] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 225.780256][T14464] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2580'. [ 225.790045][T14464] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2580'. [ 225.801456][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2580'. [ 225.845535][T14468] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2582'. [ 225.861016][T14468] batman_adv: batadv0: Adding interface: wlan1 [ 225.867751][T14468] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.893267][T14468] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 225.942128][T14476] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2585'. [ 225.957272][T14476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2585'. [ 226.140439][T14490] netlink: 'syz.4.2588': attribute type 20 has an invalid length. [ 226.212551][T14487] IPVS: length: 145 != 24 [ 226.227868][T14497] sctp: [Deprecated]: syz.4.2589 (pid 14497) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.227868][T14497] Use struct sctp_sack_info instead [ 226.488686][T14523] veth9: entered promiscuous mode [ 226.783281][T14556] Unsupported ieee802154 address type: 0 [ 227.067329][T14570] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 227.073729][T14570] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 227.089352][T14570] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 227.104159][T14570] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 227.131909][T14570] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 227.150846][T14570] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 227.154581][T14596] NCSI netlink: No device for ifindex 0 [ 227.178897][T14570] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 227.186936][T14570] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 227.198352][T14570] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 227.217988][T14570] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 227.780617][T14656] sit2: entered promiscuous mode [ 227.792986][T14656] sit2: entered allmulticast mode [ 228.043592][T14670] 8021q: adding VLAN 0 to HW filter on device bond6 [ 228.261773][T14697] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.809619][T14749] tipc: Bearer : already 2 bearers with priority 10 [ 228.811577][T14743] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 228.819281][T14749] tipc: Bearer : trying with adjusted priority [ 228.834391][T14749] tipc: New replicast peer: 255.255.255.255 [ 228.842760][T14749] tipc: Enabled bearer , priority 9 [ 228.905491][T14753] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 228.951398][T14757] pim6reg527: entered allmulticast mode [ 229.040048][T14766] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 229.070762][T14764] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 229.103039][T14764] syzkaller0: entered promiscuous mode [ 229.124525][T14764] syzkaller0: entered allmulticast mode [ 229.343279][T14801] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 229.352442][T14801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.109656][T14836] validate_nla: 12 callbacks suppressed [ 230.109676][T14836] netlink: 'syz.1.2691': attribute type 1 has an invalid length. [ 230.140610][T14836] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 230.142788][T14841] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 230.394822][T14862] netlink: 'syz.4.2700': attribute type 1 has an invalid length. [ 230.720918][T14886] __nla_validate_parse: 26 callbacks suppressed [ 230.720982][T14886] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2711'. [ 230.739685][T14886] netlink: 'syz.4.2711': attribute type 1 has an invalid length. [ 230.809119][T14886] veth11: entered promiscuous mode [ 230.883556][T14896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2714'. [ 230.897047][T14896] netlink: 'syz.2.2714': attribute type 33 has an invalid length. [ 230.908642][T14897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2715'. [ 230.931377][T14896] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2714'. [ 231.040388][T14912] netlink: 'syz.2.2722': attribute type 11 has an invalid length. [ 231.171881][T14926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2725'. [ 231.205819][T14926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2725'. [ 231.223095][T14926] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 231.503458][T14960] netlink: 'syz.4.2737': attribute type 11 has an invalid length. [ 231.519153][T14960] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2737'. [ 231.530012][T14954] netlink: 'syz.0.2734': attribute type 7 has an invalid length. [ 231.530243][T14960] netlink: 'syz.4.2737': attribute type 10 has an invalid length. [ 231.549061][T14954] : entered promiscuous mode [ 231.589704][T14967] netlink: 'syz.2.2738': attribute type 11 has an invalid length. [ 231.616301][T14967] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2738'. [ 231.686920][T14977] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2740'. [ 231.699828][T14971] kthread_run failed with err -4 [ 231.702533][T14978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2739'. [ 231.953826][T15001] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 231.972905][T15001] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 231.986087][T15007] tipc: Enabling of bearer rejected, failed to enable media [ 232.133003][T15013] can: request_module (can-proto-0) failed. [ 232.197964][T15016] can: request_module (can-proto-0) failed. [ 232.426601][T15031] bridge5: port 1(veth11) entered blocking state [ 232.433203][T15031] bridge5: port 1(veth11) entered disabled state [ 232.442330][T15031] veth11: entered allmulticast mode [ 232.458917][T15031] veth11: entered promiscuous mode [ 232.510284][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 232.517553][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 232.528090][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 232.535991][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 232.543403][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.574198][ T5183] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 232.582736][ T5183] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 232.591117][ T5183] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 232.599846][ T5183] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 232.608473][ T5183] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.646261][T15037] lo speed is unknown, defaulting to 1000 [ 233.001512][T15037] chnl_net:caif_netlink_parms(): no params data found [ 233.109066][T15037] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.117062][T15037] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.124292][T15037] bridge_slave_0: entered allmulticast mode [ 233.132000][T15037] bridge_slave_0: entered promiscuous mode [ 233.139570][T15037] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.147621][T15037] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.155183][T15037] bridge_slave_1: entered allmulticast mode [ 233.161992][T12847] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 233.162347][T15037] bridge_slave_1: entered promiscuous mode [ 233.197349][T15037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.209361][T15037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.238214][T15037] team0: Port device team_slave_0 added [ 233.246877][T15037] team0: Port device team_slave_1 added [ 233.267193][T15037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.274153][T15037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.300991][T15037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.313800][T15037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.321244][T15037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.349665][T15037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.376682][T12830] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.386900][T12830] netdevsim netdevsim1 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 233.396968][T12830] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.417848][T15037] hsr_slave_0: entered promiscuous mode [ 233.424204][T15037] hsr_slave_1: entered promiscuous mode [ 233.430808][T15037] debugfs: 'hsr0' already exists in 'hsr' [ 233.438302][T15037] Cannot create hsr debugfs directory [ 233.445838][T12830] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.456401][T12830] netdevsim netdevsim1 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 233.467070][T12830] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.514298][T12830] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.524242][T12830] netdevsim netdevsim1 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 233.534893][T12830] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.578919][T12830] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.589290][T12830] netdevsim netdevsim1 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 233.600324][T12830] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.916614][T15087] netlink: 'syz.2.2764': attribute type 11 has an invalid length. [ 233.981059][ T5864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 233.981099][T15111] netlink: 'syz.2.2771': attribute type 25 has an invalid length. [ 233.997188][ T5864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 234.004484][ T5864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 234.015698][ T5864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 234.023101][ T5864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 234.143868][T12830] bond0 (unregistering): Released all slaves [ 234.157043][T12830] bond1 (unregistering): Released all slaves [ 234.171137][T12830] bond2 (unregistering): Released all slaves [ 234.191755][T12830] bond3 (unregistering): Released all slaves [ 234.203529][T12830] bond4 (unregistering): Released all slaves [ 234.212905][T12830] bond5 (unregistering): Released all slaves [ 234.222242][T12830] bond6 (unregistering): Released all slaves [ 234.232402][T12830] bond7 (unregistering): Released all slaves [ 234.241937][T12830] bond8 (unregistering): Released all slaves [ 234.267522][T15121] team0: Device vti0 is of different type [ 234.315143][T15109] lo speed is unknown, defaulting to 1000 [ 234.337054][T12830] : left promiscuous mode [ 234.418034][T12830] tipc: Disabling bearer [ 234.457879][T12830] tipc: Left network mode [ 234.628704][T15037] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 234.653603][T15037] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 234.668431][T15037] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 234.685330][ T5864] Bluetooth: hci2: command tx timeout [ 234.729757][T15037] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 234.801728][T15109] chnl_net:caif_netlink_parms(): no params data found [ 234.817061][T15163] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 234.824390][T15163] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 234.832757][T15163] tipc: Resetting bearer [ 234.900971][T15167] netlink: 'syz.4.2786': attribute type 32 has an invalid length. [ 234.944573][T15109] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.967363][T15109] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.980418][T15109] bridge_slave_0: entered allmulticast mode [ 234.990919][T15109] bridge_slave_0: entered promiscuous mode [ 234.998293][T15167] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 235.018293][T12830] hsr_slave_0: left promiscuous mode [ 235.024183][T12830] hsr_slave_1: left promiscuous mode [ 235.033038][T12830] veth1_macvtap: left promiscuous mode [ 235.041155][T12830] veth0_macvtap: left promiscuous mode [ 235.049102][T12830] veth1_vlan: left promiscuous mode [ 235.057042][T12830] veth0_vlan: left promiscuous mode [ 235.263572][T15109] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.272468][T15109] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.282141][T15109] bridge_slave_1: entered allmulticast mode [ 235.291347][T15109] bridge_slave_1: entered promiscuous mode [ 235.362534][T15109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.376431][T15109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.401946][T15109] team0: Port device team_slave_0 added [ 235.410659][T15109] team0: Port device team_slave_1 added [ 235.446226][T15109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.454541][T15109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.481751][T15109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.502252][T15109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.509584][T15109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.537625][T15109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.568437][T15037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.613527][T15186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.618751][T15109] hsr_slave_0: entered promiscuous mode [ 235.634195][T15109] hsr_slave_1: entered promiscuous mode [ 235.641758][T15109] debugfs: 'hsr0' already exists in 'hsr' [ 235.651075][T15109] Cannot create hsr debugfs directory [ 235.664284][T15191] netlink: 'syz.0.2791': attribute type 21 has an invalid length. [ 235.679093][T12845] tipc: Resetting bearer [ 235.691344][T15193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.696579][T15191] xt_HMARK: spi-set and port-set can't be combined [ 235.730997][T12830] IPVS: stop unused estimator thread 0... [ 235.739641][T15037] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.757952][T12845] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.765198][T12845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.778749][T12845] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.785899][T12845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.848424][T15198] tipc: Enabled bearer , priority 0 [ 235.858305][T15199] syzkaller0: entered promiscuous mode [ 235.858636][T15201] __nla_validate_parse: 17 callbacks suppressed [ 235.858651][T15201] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2795'. [ 235.863789][T15199] syzkaller0: entered allmulticast mode [ 235.893490][T15198] tipc: Resetting bearer [ 235.967845][T15109] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 235.984053][T15109] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 236.006964][T15109] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 236.036988][T15109] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 236.046209][ T5864] Bluetooth: hci5: command tx timeout [ 236.080424][T15198] tipc: Resetting bearer [ 236.091622][T15198] tipc: Disabling bearer [ 236.221772][T15109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.263274][T15109] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.313178][T12847] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.320357][T12847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.331830][T12847] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.338977][T12847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.350799][T15234] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 236.392264][T15037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.496853][T15037] veth0_vlan: entered promiscuous mode [ 236.502873][T15246] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2805'. [ 236.521568][T15037] veth1_vlan: entered promiscuous mode [ 236.612708][T15037] veth0_macvtap: entered promiscuous mode [ 236.620043][T15258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.641985][T15037] veth1_macvtap: entered promiscuous mode [ 236.660196][T15037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.687832][T15037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.734165][T12830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.751072][T12839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.767484][ T5864] Bluetooth: hci2: command tx timeout [ 236.793947][T12839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.817050][T12839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.900525][T15109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.943709][T12845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.969825][T12845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.000026][T12845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.015637][T12845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.070805][T15290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2815'. [ 237.127210][T15299] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 237.147439][T15290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2815'. [ 237.351526][T15109] veth0_vlan: entered promiscuous mode [ 237.378359][T15317] netlink: 'syz.0.2821': attribute type 1 has an invalid length. [ 237.383874][T15109] veth1_vlan: entered promiscuous mode [ 237.400619][T15317] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2821'. [ 237.447960][T15109] veth0_macvtap: entered promiscuous mode [ 237.478852][T15109] veth1_macvtap: entered promiscuous mode [ 237.522656][T15109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.546036][T15109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.572318][T12830] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.582430][T12830] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.627607][T12830] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.651672][T12830] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.754412][T15342] netlink: 'syz.0.2829': attribute type 10 has an invalid length. [ 237.779526][T12829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.790040][T12829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.866996][T12847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.884583][T12847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.954534][T15356] vlan0: left allmulticast mode [ 237.963006][T15356] bridge0: left allmulticast mode [ 237.970325][T15356] vlan0: left promiscuous mode [ 237.976899][T15356] tipc: Resetting bearer [ 238.010093][T12830] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.031509][T12830] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.048359][T12830] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.081215][T12830] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.135154][ T5864] Bluetooth: hci5: command tx timeout [ 238.178171][T15372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2835'. [ 238.231165][T15377] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2836'. [ 238.242013][T15379] netlink: 'syz.4.2835': attribute type 1 has an invalid length. [ 238.256742][T15373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2837'. [ 238.281061][T15370] syzkaller0: entered promiscuous mode [ 238.287058][T15370] syzkaller0: entered allmulticast mode [ 238.294303][T15383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2835'. [ 238.301323][T15372] geneve2: entered promiscuous mode [ 238.310136][T15372] geneve2: entered allmulticast mode [ 238.318640][T12830] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.327666][T15380] netlink: 13 bytes leftover after parsing attributes in process `syz.5.2768'. [ 238.337154][T12830] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.368658][T15383] veth11: entered promiscuous mode [ 238.416163][T12845] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.429502][T12845] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.444792][T15389] netlink: 'syz.5.2839': attribute type 4 has an invalid length. [ 238.472928][T15389] `: renamed from bond0 (while UP) [ 238.723429][T15404] netlink: 'syz.0.2844': attribute type 9 has an invalid length. [ 238.846291][ T5864] Bluetooth: hci2: command tx timeout [ 238.945065][T15412] IPVS: persistence engine module ip_vs_pe_ not found [ 239.297378][T15440] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 239.571554][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.579703][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.595210][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.602910][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.611502][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.700488][T15454] lo speed is unknown, defaulting to 1000 [ 239.725416][ T94] block nbd2: Possible stuck request ffff888025195080: control (read@0,1024B). Runtime 30 seconds [ 239.737759][ T94] block nbd2: Possible stuck request ffff888025195240: control (read@1024,1024B). Runtime 30 seconds [ 239.749671][ T94] block nbd2: Possible stuck request ffff888025195400: control (read@2048,1024B). Runtime 30 seconds [ 239.761321][ T94] block nbd2: Possible stuck request ffff8880251955c0: control (read@3072,1024B). Runtime 30 seconds [ 239.941396][T15474] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 239.971803][T15481] openvswitch: netlink: Key 6 has unexpected len 52 expected 2 [ 240.036082][T15454] chnl_net:caif_netlink_parms(): no params data found [ 240.049509][T15483] netlink: 'syz.0.2869': attribute type 23 has an invalid length. [ 240.182718][T15454] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.193138][T15454] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.201217][T15454] bridge_slave_0: entered allmulticast mode [ 240.208633][ T5867] Bluetooth: hci5: command tx timeout [ 240.215827][T15454] bridge_slave_0: entered promiscuous mode [ 240.222815][T15496] tipc: Started in network mode [ 240.228848][T15496] tipc: Node identity , cluster identity 4711 [ 240.236607][T15496] tipc: Failed to obtain node identity [ 240.242213][T15496] tipc: Enabling of bearer rejected, failed to enable media [ 240.263632][T15454] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.274515][T15454] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.297351][T15454] bridge_slave_1: entered allmulticast mode [ 240.304214][T15454] bridge_slave_1: entered promiscuous mode [ 240.342147][T15454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.361902][T15454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.402369][T15454] team0: Port device team_slave_0 added [ 240.412825][T15454] team0: Port device team_slave_1 added [ 240.419042][T15511] lo speed is unknown, defaulting to 1000 [ 240.449061][T15454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.462859][T15454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.530576][T15454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.546924][T15454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.556312][T15454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.594409][T15454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.652662][T15454] hsr_slave_0: entered promiscuous mode [ 240.660430][T15513] netlink: 'syz.0.2878': attribute type 13 has an invalid length. [ 240.660590][T15454] hsr_slave_1: entered promiscuous mode [ 240.670234][T15513] netlink: 'syz.0.2878': attribute type 17 has an invalid length. [ 240.682020][T15454] debugfs: 'hsr0' already exists in 'hsr' [ 240.682038][T15454] Cannot create hsr debugfs directory [ 240.736546][T15513] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.747434][T15513] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.772239][ T5927] lo speed is unknown, defaulting to 1000 [ 240.778740][ T5927] syz0: Port: 1 Link ACTIVE [ 240.784744][ T5927] lo speed is unknown, defaulting to 1000 [ 240.857803][T15454] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.868824][T15454] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.929582][ T5867] Bluetooth: hci2: command tx timeout [ 240.944704][T15454] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.959873][T15454] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.001339][T15454] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.020986][ T55] block nbd0: Possible stuck request ffff888025105080: control (read@0,1024B). Runtime 180 seconds [ 241.032792][ T55] block nbd0: Possible stuck request ffff888025105240: control (read@1024,1024B). Runtime 180 seconds [ 241.046206][ T55] block nbd0: Possible stuck request ffff888025105400: control (read@2048,1024B). Runtime 180 seconds [ 241.057665][ T55] block nbd0: Possible stuck request ffff8880251055c0: control (read@3072,1024B). Runtime 180 seconds [ 241.069432][T15454] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.087025][T15522] __nla_validate_parse: 12 callbacks suppressed [ 241.087043][T15522] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2881'. [ 241.103828][T15522] netlink: zone id is out of range [ 241.109656][T15522] netlink: get zone limit has 8 unknown bytes [ 241.146919][T15454] netdevsim netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.159505][T15454] netdevsim netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.316673][T15454] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 241.340110][T15454] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 241.386818][T15454] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 241.420153][T15546] netlink: 'syz.5.2888': attribute type 1 has an invalid length. [ 241.431081][T15539] netlink: 'syz.1.2887': attribute type 5 has an invalid length. [ 241.449857][T15454] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 241.581295][T15560] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2891'. [ 241.609716][T15567] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2893'. [ 241.641985][T15454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.650450][ T5867] Bluetooth: hci0: command tx timeout [ 241.680117][T15454] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.703344][T15571] unknown channel width for channel at 909000KHz? [ 241.713408][T15422] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.720899][T15422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.740577][T15571] unknown channel width for channel at 909000KHz? [ 241.755437][T15571] unknown channel width for channel at 909000KHz? [ 241.756636][T15422] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.768988][T15422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.789321][T15579] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 241.818296][T15582] netlink: 'syz.1.2898': attribute type 21 has an invalid length. [ 241.921412][T15587] netlink: 'syz.5.2900': attribute type 15 has an invalid length. [ 242.100455][T15454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.153774][T15454] veth0_vlan: entered promiscuous mode [ 242.166841][T15454] veth1_vlan: entered promiscuous mode [ 242.223142][T15454] veth0_macvtap: entered promiscuous mode [ 242.240200][T15454] veth1_macvtap: entered promiscuous mode [ 242.269788][T15454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.287499][ T5867] Bluetooth: hci5: command 0x0419 tx timeout [ 242.318352][T15454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.349726][T15425] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.381637][T15425] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.431370][T15425] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.468554][T15425] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.549504][T15626] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2910'. [ 242.564267][T12850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.583890][T12850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.622772][T15425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.648246][T15425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.889771][T15652] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 242.892203][T15655] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2918'. [ 242.914023][T15655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2918'. [ 242.929073][T15655] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2918'. [ 243.038764][T15652] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.046264][T15652] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.177026][T15652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.189234][T15652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.287571][T15661] netlink: 'syz.4.2919': attribute type 4 has an invalid length. [ 243.318031][T15428] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.359490][T15425] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.385546][T15682] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2925'. [ 243.407657][T15425] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.435510][T15425] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.468444][T15687] netlink: 'syz.5.2928': attribute type 1 has an invalid length. [ 243.496358][T15689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2927'. [ 243.678705][ T5867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 243.686592][ T5867] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 243.693935][ T5867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 243.696363][T15698] netlink: 'syz.2.2930': attribute type 4 has an invalid length. [ 243.703567][ T5867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 243.717690][ T5867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 243.727551][ T5867] Bluetooth: hci0: command tx timeout [ 243.741858][T15698] netlink: 'syz.2.2930': attribute type 1 has an invalid length. [ 243.770464][T15698] ip6tnl1: entered promiscuous mode [ 243.786915][T15698] ip6tnl1: entered allmulticast mode [ 243.810752][T15700] lo speed is unknown, defaulting to 1000 [ 243.947790][T15715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2936'. [ 244.219791][T15737] Bluetooth: MGMT ver 1.23 [ 244.220659][T15700] chnl_net:caif_netlink_parms(): no params data found [ 244.334379][T15746] netlink: 'syz.2.2947': attribute type 1 has an invalid length. [ 244.366831][ T5867] Bluetooth: hci5: command 0x0419 tx timeout [ 244.421033][T15700] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.434759][T15700] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.457855][T15700] bridge_slave_0: entered allmulticast mode [ 244.471901][T15700] bridge_slave_0: entered promiscuous mode [ 244.500541][T15700] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.521911][T15700] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.529471][T15700] bridge_slave_1: entered allmulticast mode [ 244.539830][T15700] bridge_slave_1: entered promiscuous mode [ 244.551194][T15762] : entered promiscuous mode [ 244.627282][T15700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.659504][T15700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.733069][T15700] team0: Port device team_slave_0 added [ 244.749711][T15700] team0: Port device team_slave_1 added [ 244.760032][T15777] pimreg: entered allmulticast mode [ 244.853256][T15700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.871185][T15700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.935522][T15700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.986395][T15700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.993363][T15700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.115834][T15700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.227577][T15700] hsr_slave_0: entered promiscuous mode [ 245.233956][T15700] hsr_slave_1: entered promiscuous mode [ 245.296224][T15700] debugfs: 'hsr0' already exists in 'hsr' [ 245.302064][T15700] Cannot create hsr debugfs directory [ 245.818532][ T5867] Bluetooth: hci1: command tx timeout [ 245.823962][ T5867] Bluetooth: hci0: command tx timeout [ 246.072737][T15700] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 246.098480][T15700] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 246.111352][T15867] __nla_validate_parse: 9 callbacks suppressed [ 246.111368][T15867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2984'. [ 246.132547][T15700] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 246.141111][T15869] validate_nla: 4 callbacks suppressed [ 246.141180][T15869] netlink: 'syz.2.2984': attribute type 1 has an invalid length. [ 246.158911][T15869] netlink: 'syz.2.2984': attribute type 2 has an invalid length. [ 246.168932][T15868] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2985'. [ 246.187795][T15868] netem: invalid attributes len -24 [ 246.201379][T15868] netem: change failed [ 246.207384][T15700] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 246.320129][T15888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2989'. [ 246.348689][T15700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.363433][T15888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2989'. [ 246.379436][T15700] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.419625][ T3161] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.426806][ T3161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.441133][ T3161] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.448281][ T3161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.452782][T15895] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2992'. [ 246.472151][T15888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2989'. [ 246.500931][T15892] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 246.514564][T15892] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 246.541143][T15892] tipc: Resetting bearer [ 246.602702][T15901] netlink: 'syz.2.2994': attribute type 1 has an invalid length. [ 246.614780][T15901] netlink: 'syz.2.2994': attribute type 2 has an invalid length. [ 246.638350][T15901] netlink: 'syz.2.2994': attribute type 1 has an invalid length. [ 246.655591][T15901] netlink: 1156 bytes leftover after parsing attributes in process `syz.2.2994'. [ 246.735855][T15914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2998'. [ 246.767283][T15914] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 246.783120][T15914] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 246.791747][T15914] gretap1: entered promiscuous mode [ 246.798260][T15914] gretap1: entered allmulticast mode [ 246.999558][T15924] netlink: 'syz.1.3001': attribute type 5 has an invalid length. [ 247.018284][T15700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.019749][T15927] vcan0: tx drop: invalid da for name 0x0000040000000000 [ 247.033286][T15922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2999'. [ 247.093301][T15931] IPv6: Can't replace route, no match found [ 247.136755][T15700] veth0_vlan: entered promiscuous mode [ 247.177511][T15700] veth1_vlan: entered promiscuous mode [ 247.200331][T15700] veth0_macvtap: entered promiscuous mode [ 247.209298][T15700] veth1_macvtap: entered promiscuous mode [ 247.223196][T15940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3005'. [ 247.230766][T15700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.346961][T15700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.400240][T12847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.437673][T12847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.470471][T15962] pim6reg1: entered promiscuous mode [ 247.483389][T15962] pim6reg1: entered allmulticast mode [ 247.492050][T12847] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.513435][T12847] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.534186][T15950] netem: change failed [ 247.664308][T12829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.696797][T12829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.734401][T12847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.754392][T12847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.859530][T15991] netlink: 'syz.1.3018': attribute type 15 has an invalid length. [ 247.886073][ T5864] Bluetooth: hci0: command tx timeout [ 247.891601][ T5867] Bluetooth: hci1: command tx timeout [ 247.904795][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 247.905714][T15991] netlink: 'syz.1.3018': attribute type 15 has an invalid length. [ 247.934731][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 247.959824][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 247.972474][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 248.101195][T16007] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.119770][T16010] netem: incorrect gi model size [ 248.127287][T16010] netem: change failed [ 248.537861][T16051] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 248.574719][T16054] syz_tun: entered allmulticast mode [ 248.667267][T16059] netlink: 'syz.4.3039': attribute type 9 has an invalid length. [ 248.964686][T16007] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.084519][T16099] veth0: entered promiscuous mode [ 249.147633][T12840] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 249.166717][T16098] veth0: left promiscuous mode [ 249.344044][T16047] syz_tun: left allmulticast mode [ 249.392812][T16128] dvmrp1: left allmulticast mode [ 249.451394][T16129] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 249.477819][T16129] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 249.508264][T12847] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.528926][T12847] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.538107][T12847] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.549424][T12847] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.700046][T16142] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 249.708011][T16142] tipc: Resetting bearer [ 249.958877][T16152] netlink: 'syz.5.3066': attribute type 1 has an invalid length. [ 249.967896][ T5864] Bluetooth: hci0: command tx timeout [ 249.967932][ T5864] Bluetooth: hci1: command tx timeout [ 249.990609][T16152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.033167][T16007] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.054063][T16156] tipc: Enabling of bearer rejected, failed to enable media [ 250.210435][T16007] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.322273][T16180] IPv6: NLM_F_CREATE should be specified when creating new route [ 250.357413][T12847] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.370334][T12847] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.407104][T12847] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.423681][T12847] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.588641][T16196] Bluetooth: MGMT ver 1.23 [ 250.837504][T16211] syzkaller0: entered promiscuous mode [ 250.856238][T16211] syzkaller0: entered allmulticast mode [ 250.869587][T16211] tipc: Started in network mode [ 250.874566][T16211] tipc: Node identity 82f55f72e12d, cluster identity 4711 [ 250.882236][T16211] tipc: Enabled bearer , priority 0 [ 250.899678][T16211] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 250.942067][T16211] tipc: Resetting bearer [ 250.953059][T16209] tipc: Resetting bearer [ 250.973576][T16209] tipc: Disabling bearer [ 251.201324][T16234] __nla_validate_parse: 30 callbacks suppressed [ 251.201342][T16234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3091'. [ 251.483170][T16256] validate_nla: 1 callbacks suppressed [ 251.483190][T16256] netlink: 'syz.4.3096': attribute type 6 has an invalid length. [ 251.522850][T16263] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3098'. [ 251.539804][T16256] pim6reg1: entered promiscuous mode [ 251.555576][T16256] pim6reg1: entered allmulticast mode [ 251.857859][T16294] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 251.921444][T16301] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3106'. [ 251.925746][T16302] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3106'. [ 251.940881][T16303] netlink: 'syz.4.3105': attribute type 21 has an invalid length. [ 251.941745][T16301] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3106'. [ 252.043025][T16308] tipc: Enabled bearer , priority 0 [ 252.047118][ T5864] Bluetooth: hci1: command tx timeout [ 252.053563][T16308] syzkaller0: entered promiscuous mode [ 252.063821][T16308] syzkaller0: entered allmulticast mode [ 252.075841][T16308] tipc: Resetting bearer [ 252.083211][T16304] tipc: Resetting bearer [ 252.107876][T16309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3108'. [ 252.126570][T16304] tipc: Disabling bearer [ 252.183609][T16317] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3113'. [ 252.346004][T16331] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3116'. [ 252.356837][T16332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3117'. [ 252.381140][T16332] netlink: 'syz.2.3117': attribute type 3 has an invalid length. [ 252.382810][T16334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.478997][T16336] bridge_slave_0: left allmulticast mode [ 252.484756][T16336] bridge_slave_0: left promiscuous mode [ 252.502592][T16336] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.517425][T16336] bridge_slave_1: left allmulticast mode [ 252.530898][T16336] bridge_slave_1: left promiscuous mode [ 252.555192][T16336] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.581677][T16336] bond0: (slave bond_slave_0): Releasing backup interface [ 252.606434][T16336] bond0: (slave bond_slave_1): Releasing backup interface [ 252.655973][T16336] team0: Port device team_slave_0 removed [ 252.686047][ T5867] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 252.704582][T16336] team0: Port device team_slave_1 removed [ 252.714072][T16336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.724651][T16336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.733229][T16336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.742327][T16336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.761539][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.769659][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.781807][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.794413][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.803080][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.851410][T16349] lo speed is unknown, defaulting to 1000 [ 252.922925][T16361] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3124'. [ 252.938037][T16358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.013876][T16364] netlink: set zone limit has 8 unknown bytes [ 253.057879][T16369] netlink: 'syz.2.3127': attribute type 21 has an invalid length. [ 253.068178][ T7199] IPVS: starting estimator thread 0... [ 253.072324][T16369] netlink: 'syz.2.3127': attribute type 21 has an invalid length. [ 253.118912][T16349] chnl_net:caif_netlink_parms(): no params data found [ 253.166219][T16370] IPVS: using max 38 ests per chain, 91200 per kthread [ 253.204718][T16379] openvswitch: netlink: Multiple metadata blocks provided [ 253.304254][T16384] geneve2: entered promiscuous mode [ 253.310736][T16384] geneve2: entered allmulticast mode [ 253.323707][T16349] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.334529][T16349] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.342219][T16349] bridge_slave_0: entered allmulticast mode [ 253.349326][T16349] bridge_slave_0: entered promiscuous mode [ 253.367541][ T36] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 253.380571][T16349] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.390440][T16349] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.398414][T16349] bridge_slave_1: entered allmulticast mode [ 253.418582][T16349] bridge_slave_1: entered promiscuous mode [ 253.431824][T12829] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 253.441867][T12829] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 253.453326][T16402] netlink: 'syz.5.3136': attribute type 13 has an invalid length. [ 253.473068][T12829] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 253.499095][T16349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.518418][T16349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.564018][T16408] netlink: 'syz.1.3138': attribute type 1 has an invalid length. [ 253.629336][T16413] hsr0 speed is unknown, defaulting to 1000 [ 253.648179][T16413] hsr0 speed is unknown, defaulting to 1000 [ 253.653729][T16349] team0: Port device team_slave_0 added [ 253.669210][T16413] hsr0 speed is unknown, defaulting to 1000 [ 253.672050][T16349] team0: Port device team_slave_1 added [ 253.701659][T16349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.708910][T16349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.729159][T16413] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 253.735346][T16349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.736652][T16349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.760971][T16349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.801739][T16349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.819153][T16413] hsr0 speed is unknown, defaulting to 1000 [ 253.848292][T16349] hsr_slave_0: entered promiscuous mode [ 253.856591][T16349] hsr_slave_1: entered promiscuous mode [ 253.862550][T16349] debugfs: 'hsr0' already exists in 'hsr' [ 253.869029][T16349] Cannot create hsr debugfs directory [ 253.876425][T16413] hsr0 speed is unknown, defaulting to 1000 [ 253.902377][T16413] hsr0 speed is unknown, defaulting to 1000 [ 253.931040][T16413] hsr0 speed is unknown, defaulting to 1000 [ 253.967549][T16413] hsr0 speed is unknown, defaulting to 1000 [ 253.974353][T16413] hsr0 speed is unknown, defaulting to 1000 [ 254.007041][T16413] hsr0 speed is unknown, defaulting to 1000 [ 254.026580][T16413] hsr0 speed is unknown, defaulting to 1000 [ 254.038833][T16413] hsr0 speed is unknown, defaulting to 1000 [ 254.046311][T16349] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.107960][T16349] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.125525][ T5864] Bluetooth: hci1: command 0x0411 tx timeout [ 254.190348][T16349] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.248079][T16349] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.418903][T16349] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 254.432733][T16349] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 254.468123][T16349] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 254.487051][T16349] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 254.581820][T16349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.604156][T16349] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.616693][T12840] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.623831][T12840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.654453][T12840] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.661632][T12840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.848038][ T5864] Bluetooth: hci4: command tx timeout [ 254.882315][T16349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.118309][T16519] netlink: 'syz.0.3170': attribute type 21 has an invalid length. [ 255.271020][T16539] 8021q: adding VLAN 0 to HW filter on device ` [ 255.280890][T16539] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.300447][T16539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.394627][T16349] veth0_vlan: entered promiscuous mode [ 255.415917][T16349] veth1_vlan: entered promiscuous mode [ 255.490232][T16349] veth0_macvtap: entered promiscuous mode [ 255.509569][T16349] veth1_macvtap: entered promiscuous mode [ 255.544643][T16550] tipc: Started in network mode [ 255.556145][T16550] tipc: Node identity ee547102a5fe, cluster identity 4711 [ 255.565652][T16550] tipc: Enabled bearer , priority 0 [ 255.581743][T16552] netlink: 'syz.1.3179': attribute type 8 has an invalid length. [ 255.590652][T16550] syzkaller0: entered promiscuous mode [ 255.597674][T16550] syzkaller0: entered allmulticast mode [ 255.614142][T16349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.649849][T16550] tipc: Resetting bearer [ 255.662559][T16349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.686987][T16549] tipc: Resetting bearer [ 255.701177][T16549] tipc: Disabling bearer [ 255.785218][T15425] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.800156][T15425] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.841503][T15425] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.859916][T15425] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.983971][T12850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.006791][T12850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.086428][T16584] openvswitch: netlink: Key type 29 is not supported [ 256.100994][T15425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.131621][T15425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.205053][ T5864] Bluetooth: hci1: command 0x0411 tx timeout [ 256.233671][T16590] __nla_validate_parse: 15 callbacks suppressed [ 256.233690][T16590] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3190'. [ 256.251060][T16591] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3189'. [ 256.284279][T16591] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3189'. [ 256.298673][T16591] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3189'. [ 256.321733][T16591] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3189'. [ 256.514355][T16615] syzkaller0: entered promiscuous mode [ 256.523929][T16615] syzkaller0: entered allmulticast mode [ 256.532690][T16618] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3197'. [ 256.548302][T16618] netlink: 'syz.5.3197': attribute type 23 has an invalid length. [ 256.576883][T16622] GUP no longer grows the stack in syz.2.3198 (16622): 200000003000-20000000a000 (200000001000) [ 256.607147][T16622] CPU: 1 UID: 0 PID: 16622 Comm: syz.2.3198 Not tainted syzkaller #0 PREEMPT(full) [ 256.607175][T16622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 256.607197][T16622] Call Trace: [ 256.607204][T16622] [ 256.607211][T16622] dump_stack_lvl+0x189/0x250 [ 256.607238][T16622] ? kernel_text_address+0xa5/0xe0 [ 256.607261][T16622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.607281][T16622] ? __pfx__printk+0x10/0x10 [ 256.607302][T16622] ? find_vma+0xe7/0x160 [ 256.607328][T16622] __get_user_pages+0x24d0/0x2ce0 [ 256.607352][T16622] ? __gup_longterm_locked+0xc68/0x1660 [ 256.607380][T16622] ? __gup_longterm_locked+0xc68/0x1660 [ 256.607401][T16622] __gup_longterm_locked+0xde9/0x1660 [ 256.607427][T16622] ? sanity_check_pinned_pages+0x123a/0x1300 [ 256.607449][T16622] gup_fast_fallback+0x1e6a/0x2010 [ 256.607482][T16622] ? __pfx_gup_fast_fallback+0x10/0x10 [ 256.607500][T16622] ? stack_trace_save+0x9c/0xe0 [ 256.607518][T16622] ? __pfx_stack_trace_save+0x10/0x10 [ 256.607538][T16622] ? do_raw_spin_lock+0x41/0x290 [ 256.607566][T16622] ? pin_user_pages_fast+0x4d/0xb0 [ 256.607587][T16622] iov_iter_extract_pages+0x35a/0x5e0 [ 256.607608][T16622] extract_iter_to_sg+0xe46/0x24e0 [ 256.607638][T16622] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 256.607669][T16622] ? __asan_memset+0x22/0x50 [ 256.607689][T16622] af_alg_get_rsgl+0x436/0x810 [ 256.607718][T16622] aead_recvmsg+0x4cc/0x13f0 [ 256.607745][T16622] ? rcu_is_watching+0x15/0xb0 [ 256.607766][T16622] ? __pfx_aead_recvmsg+0x10/0x10 [ 256.607789][T16622] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 256.607807][T16622] ? security_socket_recvmsg+0x7e/0x2e0 [ 256.607826][T16622] ? __pfx_aead_recvmsg+0x10/0x10 [ 256.607848][T16622] sock_recvmsg_nosec+0x183/0x1c0 [ 256.607873][T16622] ____sys_recvmsg+0x3aa/0x460 [ 256.607894][T16622] ? __pfx_____sys_recvmsg+0x10/0x10 [ 256.607920][T16622] ? import_iovec+0x74/0xa0 [ 256.607940][T16622] ___sys_recvmsg+0x1b5/0x510 [ 256.607960][T16622] ? __pfx____sys_recvmsg+0x10/0x10 [ 256.607977][T16622] ? futex_private_hash_get+0x43/0x290 [ 256.607998][T16622] ? __fget_files+0x2a/0x420 [ 256.608029][T16622] ? rcu_is_watching+0x15/0xb0 [ 256.608046][T16622] ? lock_release+0x4b/0x3e0 [ 256.608068][T16622] ? __might_fault+0xcc/0x130 [ 256.608091][T16622] do_recvmmsg+0x307/0x770 [ 256.608111][T16622] ? __pfx_do_recvmmsg+0x10/0x10 [ 256.608137][T16622] ? __pfx_do_futex+0x10/0x10 [ 256.608156][T16622] ? __local_bh_enable_ip+0x12d/0x1c0 [ 256.608181][T16622] __x64_sys_recvmmsg+0x190/0x240 [ 256.608200][T16622] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 256.608217][T16622] ? rcu_is_watching+0x15/0xb0 [ 256.608236][T16622] ? rcu_is_watching+0x15/0xb0 [ 256.608254][T16622] do_syscall_64+0xfa/0x3b0 [ 256.608284][T16622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.608301][T16622] ? clear_bhb_loop+0x60/0xb0 [ 256.608318][T16622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.608335][T16622] RIP: 0033:0x7fa8ca58ebe9 [ 256.608352][T16622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.608367][T16622] RSP: 002b:00007fa8cb351038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 256.608388][T16622] RAX: ffffffffffffffda RBX: 00007fa8ca7b6090 RCX: 00007fa8ca58ebe9 [ 256.608402][T16622] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000009 [ 256.608413][T16622] RBP: 00007fa8ca611e19 R08: 0000000000000000 R09: 0000000000000000 [ 256.608424][T16622] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 256.608435][T16622] R13: 00007fa8ca7b6128 R14: 00007fa8ca7b6090 R15: 00007ffe45e651e8 [ 256.608456][T16622] [ 256.999871][ T5864] Bluetooth: hci4: command tx timeout [ 257.121782][T16639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.179747][T16637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3202'. [ 257.200950][T16643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3205'. [ 257.553465][T16680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3212'. [ 257.576127][T16684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3214'. [ 257.586560][T16683] veth0: entered promiscuous mode [ 257.747767][T16687] netem: change failed [ 258.314797][T16753] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 258.386747][T16755] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 258.403355][T16682] veth0: left promiscuous mode [ 258.526961][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888055a4a000: rx timeout, send abort [ 258.536003][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888055a4a000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 258.891110][T16809] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 259.012167][T16827] netlink: 'syz.0.3257': attribute type 8 has an invalid length. [ 259.020794][T16826] netlink: 'syz.0.3257': attribute type 8 has an invalid length. [ 259.085973][ T5864] Bluetooth: hci4: command tx timeout [ 259.178737][T16839] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 259.223993][T16846] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20004 [ 260.002253][T16893] netlink: 'syz.2.3277': attribute type 1 has an invalid length. [ 260.060752][T16893] bond2: entered promiscuous mode [ 260.065878][T16893] bond2: entered allmulticast mode [ 260.071384][T16893] 8021q: adding VLAN 0 to HW filter on device bond2 [ 260.364437][T16902] netlink: 'syz.1.3279': attribute type 1 has an invalid length. [ 260.387379][T16904] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 260.400764][T16904] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 260.435241][T16904] tipc: Enabled bearer , priority 0 [ 260.510318][T16900] tipc: Resetting bearer [ 260.573928][T16900] tipc: Disabling bearer [ 261.180582][ T5864] Bluetooth: hci4: command tx timeout [ 261.333992][T16954] netlink: 'syz.0.3295': attribute type 4 has an invalid length. [ 261.502681][T16965] openvswitch: netlink: Missing key (keys=40, expected=100) [ 261.601348][T16971] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 261.789623][T16987] tipc: Started in network mode [ 261.794542][T16987] tipc: Node identity e0000002, cluster identity 4711 [ 261.802068][T16987] tipc: Enabling of bearer rejected, failed to enable media [ 262.029272][T17009] __nla_validate_parse: 23 callbacks suppressed [ 262.029290][T17009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3309'. [ 262.050168][T17012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3309'. [ 262.074217][T17009] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 262.119235][T17009] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 262.128769][T17009] gretap2: entered promiscuous mode [ 262.134073][T17009] gretap2: entered allmulticast mode [ 262.448593][T17026] dvmrp0: entered allmulticast mode [ 262.476569][T15428] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 262.497090][T15428] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.513334][T15428] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 262.523793][T15428] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 262.537464][T15428] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.550272][T15428] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 262.563114][T17029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3314'. [ 262.573272][T15428] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 262.588697][T15428] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.598325][T15428] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 262.611428][T15428] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 262.638823][T15428] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.648459][T15428] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 262.918202][T16883] Set syz1 is full, maxelem 65536 reached [ 262.971865][T17066] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3323'. [ 263.001856][T17069] netlink: 'syz.1.3324': attribute type 13 has an invalid length. [ 263.021860][T17069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3324'. [ 263.051980][T17069] netlink: 'syz.1.3324': attribute type 13 has an invalid length. [ 263.060465][T17069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3324'. [ 263.071123][T17069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3324'. [ 263.240537][T17089] netlink: 'syz.1.3331': attribute type 28 has an invalid length. [ 263.249593][ T5864] Bluetooth: hci4: command tx timeout [ 263.265585][T17089] netlink: 'syz.1.3331': attribute type 3 has an invalid length. [ 263.277104][T17089] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3331'. [ 263.318981][T17032] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 263.340119][T17098] netlink: 'syz.4.3335': attribute type 11 has an invalid length. [ 263.348775][T17098] netlink: 'syz.4.3335': attribute type 11 has an invalid length. [ 263.357649][T17098] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3335'. [ 263.411525][T17102] syzkaller1: entered promiscuous mode [ 263.420445][T17102] syzkaller1: entered allmulticast mode [ 263.463795][T17104] netlink: 'syz.0.3336': attribute type 2 has an invalid length. [ 263.480835][T17106] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3337'. [ 263.519727][T17106] pim6reg1: entered promiscuous mode [ 263.536006][T17106] pim6reg1: entered allmulticast mode [ 263.580522][T17115] vlan2: entered allmulticast mode [ 263.586386][T17115] bond0: entered allmulticast mode [ 263.591606][T17115] bond_slave_0: entered allmulticast mode [ 263.600042][T17115] bond_slave_1: entered allmulticast mode [ 263.847724][T17136] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.855260][T17136] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.933989][T17136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.954464][T17136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.087777][T17143] geneve2: entered promiscuous mode [ 264.093021][T17143] geneve2: entered allmulticast mode [ 264.134148][T15428] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.174379][T15428] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 264.188546][T15428] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.198395][T15428] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 264.221797][T15428] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.233285][T15428] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 264.262991][T15428] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.272752][T15428] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 264.408676][T17186] rdma_rxe: rxe_newlink: failed to add lo [ 264.482745][T17192] netlink: 'syz.4.3365': attribute type 3 has an invalid length. [ 264.512008][T17196] netlink: 'syz.2.3366': attribute type 75 has an invalid length. [ 264.608816][ T5864] Bluetooth: hci0: command 0x0c20 tx timeout [ 264.777065][T17220] netlink: 'syz.0.3377': attribute type 1 has an invalid length. [ 264.874506][T17230] bridge_slave_0: left allmulticast mode [ 264.882005][T17230] bridge_slave_0: left promiscuous mode [ 264.889030][T17230] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.900359][T17230] bridge_slave_1: left allmulticast mode [ 264.907550][T17230] bridge_slave_1: left promiscuous mode [ 264.914668][T17230] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.923795][T17235] netlink: 'syz.5.3380': attribute type 10 has an invalid length. [ 264.941843][T17230] `: (slave bond_slave_0): Releasing backup interface [ 264.954431][T17230] `: (slave bond_slave_1): Releasing backup interface [ 264.966745][T17230] team0: Port device team_slave_0 removed [ 264.977163][T17230] team0: Port device team_slave_1 removed [ 264.984096][T17230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.997558][T17230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.009058][T17230] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 265.027240][T17231] batadv_slave_0: entered promiscuous mode [ 268.113081][ T5232] udevd[5232]: worker [5849] /devices/virtual/block/nbd0 timeout; kill it [ 268.121992][ T5232] udevd[5232]: seq 11284 '/devices/virtual/block/nbd0' killed [ 269.806894][ T94] block nbd2: Possible stuck request ffff888025195080: control (read@0,1024B). Runtime 60 seconds [ 269.818046][ T94] block nbd2: Possible stuck request ffff888025195240: control (read@1024,1024B). Runtime 60 seconds [ 269.829055][ T94] block nbd2: Possible stuck request ffff888025195400: control (read@2048,1024B). Runtime 60 seconds [ 269.840110][ T94] block nbd2: Possible stuck request ffff8880251955c0: control (read@3072,1024B). Runtime 60 seconds [ 271.105868][ T55] block nbd0: Possible stuck request ffff888025105080: control (read@0,1024B). Runtime 210 seconds [ 271.116899][ T55] block nbd0: Possible stuck request ffff888025105240: control (read@1024,1024B). Runtime 210 seconds [ 271.128140][ T55] block nbd0: Possible stuck request ffff888025105400: control (read@2048,1024B). Runtime 210 seconds [ 271.133741][ T5232] udevd[5232]: worker [10482] /devices/virtual/block/nbd2 is taking a long time [ 271.139889][ T55] block nbd0: Possible stuck request ffff8880251055c0: control (read@3072,1024B). Runtime 210 seconds [ 273.646171][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 284.593725][T17254] __nla_validate_parse: 10 callbacks suppressed [ 284.593746][T17254] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3389'. [ 284.699513][T17268] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3392'. [ 284.714167][T17268] xt_policy: neither incoming nor outgoing policy selected [ 284.826123][T17278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3396'. [ 284.866760][T17284] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3398'. [ 284.877960][T17288] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3398'. [ 284.887903][T17285] can: request_module (can-proto-0) failed. [ 285.398899][T17316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3411'. [ 285.432968][T17316] netlink: 'syz.1.3411': attribute type 1 has an invalid length. [ 285.452915][T17316] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3411'. [ 285.490110][T17321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3412'. [ 285.501794][T17323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3413'. [ 285.511582][T17323] netlink: 'syz.2.3413': attribute type 5 has an invalid length. [ 285.552340][T17323] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3413'. [ 285.723027][T17343] IPVS: length: 157 != 24 [ 285.823699][T17355] netlink: 'syz.0.3424': attribute type 4 has an invalid length. [ 285.921307][T17362] bond0: vlans aren't supported yet for dev_uc|mc_add() [ 285.975533][T17371] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 286.079996][T17378] lo speed is unknown, defaulting to 1000 [ 286.272491][T17378] hsr0 speed is unknown, defaulting to 1000 [ 286.312910][T17406] netlink: 'syz.1.3440': attribute type 15 has an invalid length. [ 286.444994][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 286.864402][T17458] tipc: Enabling of bearer rejected, failed to enable media [ 286.924679][T17464] macsec0: entered promiscuous mode [ 286.938264][T17464] macsec0: entered allmulticast mode [ 286.963446][T17464] veth1_macvtap: entered allmulticast mode [ 286.973382][T17464] macsec0: left promiscuous mode [ 286.980011][T17464] macsec0: left allmulticast mode [ 286.995634][T17464] veth1_macvtap: left allmulticast mode [ 287.302347][T17515] netlink: 'syz.5.3469': attribute type 21 has an invalid length. [ 287.331408][ T3161] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.331462][T17515] netlink: 'syz.5.3469': attribute type 21 has an invalid length. [ 287.351486][ T3161] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.370444][ T3161] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.383777][T17518] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 287.393167][T17518] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 287.409630][ T3161] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.707379][T17545] nbd4: detected capacity change from 0 to 127 [ 287.781749][T17555] netlink: 'syz.1.3482': attribute type 1 has an invalid length. [ 287.799287][ T5864] block nbd4: Receive control failed (result -104) [ 287.863323][T17560] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 288.211636][T17593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.344088][T17609] bridge0: port 1(syz_tun) entered blocking state [ 288.355931][T17609] bridge0: port 1(syz_tun) entered disabled state [ 288.372719][T17609] syz_tun: entered allmulticast mode [ 288.392781][T17609] syz_tun: entered promiscuous mode [ 288.412832][T17611] team0: Device gtp0 is of different type [ 288.483548][T17618] tipc: Enabled bearer , priority 0 [ 288.492681][T17622] tipc: Enabling of bearer rejected, already enabled [ 288.522870][T17617] syzkaller0: entered promiscuous mode [ 288.529038][T17617] syzkaller0: entered allmulticast mode [ 288.555267][T17618] tipc: Resetting bearer [ 288.667096][T17643] netlink: 'syz.5.3514': attribute type 22 has an invalid length. [ 288.688880][T17643] netlink: 'syz.5.3514': attribute type 22 has an invalid length. [ 288.708876][T17649] bridge0: port 3(syz_tun) entered blocking state [ 288.716226][T17649] bridge0: port 3(syz_tun) entered disabled state [ 288.723338][T17649] syz_tun: entered allmulticast mode [ 288.735345][T17649] syz_tun: entered promiscuous mode [ 288.839565][T17663] team0: Mode changed to "activebackup" [ 288.857332][T17663] pimreg: left allmulticast mode [ 288.874639][T17667] IPVS: length: 157 != 24 [ 289.010878][T17681] netlink: 'syz.0.3529': attribute type 4 has an invalid length. [ 289.153245][T17697] tipc: Enabling of bearer rejected, media not registered [ 289.272257][T17616] tipc: Resetting bearer [ 289.283499][T17616] tipc: Disabling bearer [ 289.297311][T17716] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 289.360481][T17723] syzkaller1: entered promiscuous mode [ 289.369164][T17723] syzkaller1: entered allmulticast mode [ 289.411037][T17728] bond1: entered allmulticast mode [ 289.420177][T17728] 8021q: adding VLAN 0 to HW filter on device bond1 [ 289.428472][T17728] bridge0: port 1(bond1) entered blocking state [ 289.435876][T17728] bridge0: port 1(bond1) entered disabled state [ 289.443224][T17728] bond1: entered promiscuous mode [ 289.451522][T17728] bridge0: port 1(bond1) entered blocking state [ 289.457884][T17728] bridge0: port 1(bond1) entered forwarding state [ 289.508775][T12847] bridge0: port 1(bond1) entered disabled state [ 289.566833][T17731] lo speed is unknown, defaulting to 1000 [ 289.573735][T17737] tipc: Enabled bearer , priority 0 [ 289.583221][T17737] syzkaller0: entered promiscuous mode [ 289.601570][T17737] syzkaller0: entered allmulticast mode [ 289.630353][T17737] tipc: Resetting bearer [ 289.656297][T17735] tipc: Resetting bearer [ 289.676959][T17735] tipc: Disabling bearer [ 289.699878][T17746] erspan0: entered promiscuous mode [ 289.716007][T17746] erspan0: entered allmulticast mode [ 289.814112][T17752] __nla_validate_parse: 22 callbacks suppressed [ 289.814131][T17752] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3551'. [ 289.835978][T17752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.851730][T17752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.863417][T17752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.871317][T17752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.887879][T17731] hsr0 speed is unknown, defaulting to 1000 [ 289.927312][T17758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3551'. [ 289.928458][T17755] netlink: 45 bytes leftover after parsing attributes in process `syz.4.3552'. [ 290.218841][T17778] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3558'. [ 290.414163][T17804] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3566'. [ 290.430364][T17804] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3566'. [ 290.466744][T17804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3566'. [ 290.491118][T17808] netlink: 'syz.0.3568': attribute type 11 has an invalid length. [ 290.499179][T17808] netlink: 'syz.0.3568': attribute type 11 has an invalid length. [ 290.509584][T17808] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3568'. [ 290.752441][T17833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3578'. [ 290.760857][T17838] validate_nla: 3 callbacks suppressed [ 290.760875][T17838] netlink: 'syz.0.3579': attribute type 1 has an invalid length. [ 290.788753][T17838] netlink: 'syz.0.3579': attribute type 2 has an invalid length. [ 290.934344][T17855] netlink: 'syz.4.3583': attribute type 6 has an invalid length. [ 290.977993][T17860] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3582'. [ 291.433296][T17905] netlink: 'syz.4.3599': attribute type 5 has an invalid length. [ 291.461169][T17898] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 291.471224][ T5927] IPVS: starting estimator thread 0... [ 291.565476][T17908] IPVS: using max 42 ests per chain, 100800 per kthread [ 291.597204][T17925] bridge4: entered promiscuous mode [ 291.629286][T17925] bridge4: entered allmulticast mode [ 292.241134][T17993] lo speed is unknown, defaulting to 1000 [ 292.360554][T17993] hsr0 speed is unknown, defaulting to 1000 [ 292.558834][T18016] 8021q: adding VLAN 0 to HW filter on device bond3 [ 292.795723][T18026] nbd5: detected capacity change from 0 to 17592186044543 [ 292.806706][ T5864] block nbd5: Receive control failed (result -104) [ 292.939491][T18040] netlink: 'syz.4.3635': attribute type 8 has an invalid length. [ 293.008025][T18044] netlink: 'syz.2.3636': attribute type 10 has an invalid length. [ 293.082476][T18044] team0: Port device dummy0 added [ 293.107080][T18048] IPv6: sit1: Disabled Multicast RS [ 293.124660][T18048] sit1: entered allmulticast mode [ 293.141533][T18060] netlink: 'syz.0.3641': attribute type 6 has an invalid length. [ 293.229615][ T5232] udevd[5232]: worker [5876] terminated by signal 33 (Unknown signal 33) [ 293.278375][ T5232] udevd[5232]: worker [5876] failed while handling '/devices/virtual/block/loop4' [ 293.350394][T18079] vlan2: entered promiscuous mode [ 293.361877][T18082] syzkaller1: entered promiscuous mode [ 293.367637][T18082] syzkaller1: entered allmulticast mode [ 293.466770][T18094] mac80211_hwsim hwsim39 : renamed from wlan1 (while UP) [ 293.668214][T18110] sctp: [Deprecated]: syz.5.3655 (pid 18110) Use of int in maxseg socket option. [ 293.668214][T18110] Use struct sctp_assoc_value instead [ 293.773703][T18124] netlink: 'syz.2.3661': attribute type 12 has an invalid length. [ 293.790289][T18124] netlink: 'syz.2.3661': attribute type 12 has an invalid length. [ 293.809473][T18127] IPv6: sit1: Disabled Multicast RS [ 293.960536][T18143] netlink: 'syz.2.3667': attribute type 1 has an invalid length. [ 293.998876][T18143] gretap1: entered promiscuous mode [ 294.029480][T18143] bond4: (slave gretap1): making interface the new active one [ 294.037944][T18143] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 294.956573][T18215] __nla_validate_parse: 37 callbacks suppressed [ 294.956594][T18215] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3690'. [ 294.998645][T18219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.193599][T18228] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3694'. [ 295.299638][T18239] openvswitch: netlink: IPv6 tunnel dst address is zero [ 295.307285][T18240] openvswitch: netlink: IPv6 tunnel dst address is zero [ 295.444020][T18257] lo speed is unknown, defaulting to 1000 [ 295.506535][T18265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3705'. [ 295.520872][T18265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3705'. [ 295.552469][T18270] syz.2.3705: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 295.570684][T18270] CPU: 1 UID: 0 PID: 18270 Comm: syz.2.3705 Not tainted syzkaller #0 PREEMPT(full) [ 295.570710][T18270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 295.570721][T18270] Call Trace: [ 295.570728][T18270] [ 295.570735][T18270] dump_stack_lvl+0x189/0x250 [ 295.570762][T18270] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.570781][T18270] ? __pfx__printk+0x10/0x10 [ 295.570802][T18270] ? lock_release+0x4b/0x3e0 [ 295.570826][T18270] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 295.570847][T18270] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 295.570867][T18270] warn_alloc+0x214/0x310 [ 295.570892][T18270] ? stack_depot_save_flags+0x40/0x860 [ 295.570915][T18270] ? __pfx_warn_alloc+0x10/0x10 [ 295.570939][T18270] ? kasan_save_track+0x4f/0x80 [ 295.570960][T18270] ? xskq_create+0x56/0x170 [ 295.570980][T18270] ? xsk_init_queue+0xb0/0x110 [ 295.571000][T18270] ? xsk_setsockopt+0x4dc/0x8d0 [ 295.571018][T18270] ? do_sock_setsockopt+0x17c/0x1b0 [ 295.571035][T18270] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 295.571050][T18270] ? do_syscall_64+0xfa/0x3b0 [ 295.571071][T18270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.571091][T18270] __vmalloc_node_range_noprof+0x125/0x12f0 [ 295.571127][T18270] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 295.571151][T18270] ? xsk_setsockopt+0x462/0x8d0 [ 295.571172][T18270] ? __kasan_kmalloc+0x93/0xb0 [ 295.571194][T18270] vmalloc_user_noprof+0xad/0xf0 [ 295.571216][T18270] ? xskq_create+0xbf/0x170 [ 295.571237][T18270] xskq_create+0xbf/0x170 [ 295.571259][T18270] xsk_init_queue+0xb0/0x110 [ 295.571281][T18270] xsk_setsockopt+0x4dc/0x8d0 [ 295.571302][T18270] ? __pfx_xsk_setsockopt+0x10/0x10 [ 295.571322][T18270] ? __pfx_aa_sk_perm+0x10/0x10 [ 295.571344][T18270] ? lock_release+0x4b/0x3e0 [ 295.571367][T18270] ? aa_sock_opt_perm+0xff/0x1b0 [ 295.571383][T18270] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 295.571402][T18270] ? __pfx_xsk_setsockopt+0x10/0x10 [ 295.571440][T18270] do_sock_setsockopt+0x17c/0x1b0 [ 295.571458][T18270] __x64_sys_setsockopt+0x13f/0x1b0 [ 295.571478][T18270] do_syscall_64+0xfa/0x3b0 [ 295.571501][T18270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.571517][T18270] ? clear_bhb_loop+0x60/0xb0 [ 295.571536][T18270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.571552][T18270] RIP: 0033:0x7fa8ca58ebe9 [ 295.571568][T18270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.571582][T18270] RSP: 002b:00007fa8cb330038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 295.571602][T18270] RAX: ffffffffffffffda RBX: 00007fa8ca7b6180 RCX: 00007fa8ca58ebe9 [ 295.571621][T18270] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 295.571632][T18270] RBP: 00007fa8ca611e19 R08: 0000000000000004 R09: 0000000000000000 [ 295.571642][T18270] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.571653][T18270] R13: 00007fa8ca7b6218 R14: 00007fa8ca7b6180 R15: 00007ffe45e651e8 [ 295.571674][T18270] [ 295.571729][T18270] Mem-Info: [ 295.587564][T18257] hsr0 speed is unknown, defaulting to 1000 [ 295.598184][T18270] active_anon:11831 inactive_anon:0 isolated_anon:0 [ 295.598184][T18270] active_file:2756 inactive_file:39907 isolated_file:0 [ 295.598184][T18270] unevictable:768 dirty:46 writeback:0 [ 295.598184][T18270] slab_reclaimable:13356 slab_unreclaimable:132422 [ 295.598184][T18270] mapped:34299 shmem:1367 pagetables:1213 [ 295.598184][T18270] sec_pagetables:0 bounce:0 [ 295.598184][T18270] kernel_misc_reclaimable:0 [ 295.598184][T18270] free:1265927 free_pcp:15224 free_cma:0 [ 295.598235][T18270] Node 0 active_anon:47324kB inactive_anon:0kB active_file:11024kB inactive_file:159424kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137196kB dirty:184kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15788kB pagetables:4712kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 295.747369][T18270] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 296.002080][T18270] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 296.049467][T18270] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 296.055711][T18270] Node 0 DMA32 free:1159916kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47380kB inactive_anon:0kB active_file:11024kB inactive_file:157856kB unevictable:1536kB writepending:228kB present:3129332kB managed:2557456kB mlocked:0kB bounce:0kB free_pcp:38312kB local_pcp:19960kB free_cma:0kB [ 296.090621][T18270] lowmem_reserve[]: 0 0 1 1 1 [ 296.095951][T18270] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 296.128015][T18270] lowmem_reserve[]: 0 0 0 0 0 [ 296.132762][T18270] Node 1 Normal free:3886304kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21632kB local_pcp:7776kB free_cma:0kB [ 296.187934][T18270] lowmem_reserve[]: 0 0 0 0 0 [ 296.195627][T18270] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 296.241131][T18297] veth0_vlan: mtu less than device minimum [ 296.248011][T18270] Node 0 DMA32: 416*4kB (UME) 391*8kB (UME) 141*16kB (UM) 85*32kB (UME) 59*64kB (UME) 35*128kB (UM) 34*256kB (UM) 7*512kB (UM) 3*1024kB (U) 6*2048kB (UME) 272*4096kB (UM) = 1159784kB [ 296.284427][T18270] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 296.337808][T18270] Node 1 Normal: 208*4kB (UE) 46*8kB (UME) 47*16kB (UME) 60*32kB (UME) 27*64kB (UM) 6*128kB (UME) 4*256kB (ME) 6*512kB (UME) 3*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3886304kB [ 296.363972][T18270] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 296.393096][T18270] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 296.402994][T18270] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 296.426175][T18270] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 296.439127][T18270] 44027 total pagecache pages [ 296.443840][T18270] 0 pages in swap cache [ 296.474556][T18270] Free swap = 124996kB [ 296.499539][T18270] Total swap = 124996kB [ 296.503733][T18270] 2097051 pages RAM [ 296.508303][T18270] 0 pages HighMem/MovableOnly [ 296.533288][T18270] 425661 pages reserved [ 296.540037][T18270] 0 pages cma reserved [ 296.690184][T18331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3725'. [ 296.708974][T18334] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:0 [ 296.831614][T18350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3730'. [ 296.856747][T18354] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3731'. [ 296.868548][T18354] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3731'. [ 296.881554][T18354] validate_nla: 1 callbacks suppressed [ 296.881571][T18354] netlink: 'syz.0.3731': attribute type 1 has an invalid length. [ 296.932548][T18360] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3731'. [ 296.965990][T18354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 297.063909][T18371] lo speed is unknown, defaulting to 1000 [ 297.180000][T18371] hsr0 speed is unknown, defaulting to 1000 [ 297.319959][T18371] wlan0: mtu greater than device maximum [ 297.460104][T18389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3740'. [ 297.735485][T18400] bridge4: port 1(veth3) entered blocking state [ 297.742084][T18400] bridge4: port 1(veth3) entered disabled state [ 297.748783][T18400] veth3: entered allmulticast mode [ 297.754637][T18400] veth3: entered promiscuous mode [ 297.762691][T18400] bridge4: port 2(veth0_to_bond) entered blocking state [ 297.771301][T18400] bridge4: port 2(veth0_to_bond) entered disabled state [ 297.780139][T18400] veth0_to_bond: entered allmulticast mode [ 297.787240][T18400] veth0_to_bond: entered promiscuous mode [ 297.807426][T18407] team0 (unregistering): Port device team_slave_0 removed [ 297.820531][T18407] team0 (unregistering): Port device team_slave_1 removed [ 297.829972][T18407] team0 (unregistering): Port device dummy0 removed [ 297.861795][T18413] unknown channel width for channel at 909000KHz? [ 297.924792][T18419] netlink: 'syz.1.3750': attribute type 29 has an invalid length. [ 298.072730][T18448] netlink: 'syz.1.3757': attribute type 1 has an invalid length. [ 298.148912][T18459] netlink: 'syz.2.3759': attribute type 6 has an invalid length. [ 298.722507][T18523] openvswitch: netlink: Flow key attr not present in new flow. [ 298.776048][T18532] openvswitch: netlink: Flow key attr not present in new flow. [ 299.108974][T18577] netlink: 'syz.0.3790': attribute type 1 has an invalid length. [ 299.176645][T18583] netlink: 'syz.1.3793': attribute type 5 has an invalid length. [ 299.838245][T18650] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 299.890020][ T94] block nbd2: Possible stuck request ffff888025195080: control (read@0,1024B). Runtime 90 seconds [ 299.901105][ T94] block nbd2: Possible stuck request ffff888025195240: control (read@1024,1024B). Runtime 90 seconds [ 299.915423][ T94] block nbd2: Possible stuck request ffff888025195400: control (read@2048,1024B). Runtime 90 seconds [ 299.927072][ T94] block nbd2: Possible stuck request ffff8880251955c0: control (read@3072,1024B). Runtime 90 seconds [ 299.939868][T18654] netlink: 'syz.0.3811': attribute type 2 has an invalid length. [ 299.947692][T18654] netlink: 'syz.0.3811': attribute type 1 has an invalid length. [ 299.955954][T18654] netlink: 'syz.0.3811': attribute type 1 has an invalid length. [ 299.962021][T18656] netlink: 'syz.5.3813': attribute type 10 has an invalid length. [ 299.978112][T18656] wlan1: mtu less than device minimum [ 299.986474][T18656] `: (slave wlan1): Error -22 calling dev_set_mtu [ 300.194542][T18684] bridge0: entered promiscuous mode [ 300.200994][T18684] macsec3: entered promiscuous mode [ 300.210067][T18684] bridge0: port 2(macsec3) entered blocking state [ 300.217713][T18687] __nla_validate_parse: 18 callbacks suppressed [ 300.217732][T18687] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3824'. [ 300.218528][T18684] bridge0: port 2(macsec3) entered disabled state [ 300.241485][T18684] macsec3: entered allmulticast mode [ 300.248087][T18684] bridge0: entered allmulticast mode [ 300.254054][T18684] macsec3: left allmulticast mode [ 300.259429][T18684] bridge0: left allmulticast mode [ 300.266773][T18684] bridge0: left promiscuous mode [ 300.274919][T18688] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3821'. [ 300.401417][T18699] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3828'. [ 300.468688][T18706] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 300.693832][T18722] : renamed from vlan0 [ 300.702496][T18721] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3834'. [ 300.722267][T18725] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3835'. [ 300.753478][T18725] netlink: 1044 bytes leftover after parsing attributes in process `syz.2.3835'. [ 300.768736][T18730] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3836'. [ 300.899249][T18746] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3841'. [ 300.910248][T18746] netlink: zone id is out of range [ 300.917685][T18746] netlink: get zone limit has 8 unknown bytes [ 300.971563][T18751] openvswitch: netlink: Message has 4 unknown bytes. [ 300.981999][T18751] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3842'. [ 301.013550][T18754] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3844'. [ 301.034254][T18756] xt_socket: unknown flags 0xe4 [ 301.089548][T18756] bond5: (slave bridge5): making interface the new active one [ 301.098810][T18756] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 301.112876][T18761] 8021q: VLANs not supported on ip6gre0 [ 301.149907][T18767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.175377][ T55] block nbd0: Possible stuck request ffff888025105080: control (read@0,1024B). Runtime 240 seconds [ 301.191456][ T55] block nbd0: Possible stuck request ffff888025105240: control (read@1024,1024B). Runtime 240 seconds [ 301.203300][ T55] block nbd0: Possible stuck request ffff888025105400: control (read@2048,1024B). Runtime 240 seconds [ 301.215545][ T55] block nbd0: Possible stuck request ffff8880251055c0: control (read@3072,1024B). Runtime 240 seconds [ 301.311670][T18787] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 301.387483][T18795] rdma_op ffff8880318cd9f0 conn xmit_rdma 0000000000000000 [ 301.403164][T18798] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 301.488517][T18805] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 301.517458][T18805] dummy0: entered promiscuous mode [ 301.529376][T18805] bridge0: port 2(dummy0) entered blocking state [ 301.536461][T18805] bridge0: port 2(dummy0) entered disabled state [ 301.543061][T18805] dummy0: entered allmulticast mode [ 301.549944][T18805] dummy0: left allmulticast mode [ 301.556243][T18805] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 302.228493][T18840] vlan2: entered allmulticast mode [ 302.233722][T18840] hsr0: entered allmulticast mode [ 302.239588][T18840] hsr_slave_0: entered allmulticast mode [ 302.245806][T18840] hsr_slave_1: entered allmulticast mode [ 302.346399][T18845] tipc: Started in network mode [ 302.351393][T18845] tipc: Node identity 2e3ba4328be9, cluster identity 4711 [ 302.358829][T18845] tipc: Enabled bearer , priority 0 [ 302.368561][T18845] tipc: Resetting bearer [ 302.382371][T18844] tipc: Disabling bearer [ 302.539794][T18854] tipc: Enabled bearer , priority 0 [ 302.554650][T18854] syzkaller0: entered promiscuous mode [ 302.568510][T18854] syzkaller0: entered allmulticast mode [ 302.618465][T18854] tipc: Resetting bearer [ 302.657021][T18853] tipc: Resetting bearer [ 302.675929][T18853] tipc: Disabling bearer [ 302.692816][T18862] lo speed is unknown, defaulting to 1000 [ 302.799111][T18880] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 302.808481][T18879] gre0: entered promiscuous mode [ 302.849469][T18881] : entered promiscuous mode [ 302.868748][T18862] hsr0 speed is unknown, defaulting to 1000 [ 303.104156][T18911] openvswitch: netlink: Actions may not be safe on all matching packets [ 303.437259][T18933] vti0: entered promiscuous mode [ 303.929028][T18991] validate_nla: 14 callbacks suppressed [ 303.929047][T18991] netlink: 'syz.5.3921': attribute type 6 has an invalid length. [ 304.098300][T19015] netlink: 'syz.0.3927': attribute type 1 has an invalid length. [ 304.342427][T19039] netlink: zone id is out of range [ 304.350446][T19039] netlink: get zone limit has 8 unknown bytes [ 304.583325][T19056] syzkaller1: entered promiscuous mode [ 304.594172][T19056] syzkaller1: entered allmulticast mode [ 304.726272][T19085] openvswitch: netlink: Multiple metadata blocks provided [ 304.740902][T19085] netlink: 'syz.2.3953': attribute type 21 has an invalid length. [ 305.352842][T19135] netdevsim netdevsim5: Direct firmware load for failed with error -2 [ 305.373632][T19137] IPv6: sit1: Disabled Multicast RS [ 305.382348][T19135] netdevsim netdevsim5: Falling back to sysfs fallback for: [ 305.393550][T19137] sit1: entered allmulticast mode [ 305.439546][T19141] netlink: 'syz.5.3968': attribute type 6 has an invalid length. [ 305.474072][T19141] netlink: 'syz.5.3968': attribute type 6 has an invalid length. [ 305.509472][T19141] __nla_validate_parse: 29 callbacks suppressed [ 305.509493][T19141] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3968'. [ 305.560926][T19149] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 305.620072][T19156] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3975'. [ 305.647181][T19157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3975'. [ 305.821561][T19182] netlink: 'syz.2.3984': attribute type 1 has an invalid length. [ 305.899783][T19191] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3986'. [ 306.048025][T19209] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 306.057569][ T5927] IPVS: starting estimator thread 0... [ 306.091351][T19213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3993'. [ 306.101543][T19213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3993'. [ 306.172081][T19211] IPVS: using max 51 ests per chain, 122400 per kthread [ 306.212656][T19228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3996'. [ 306.231122][T19228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3996'. [ 306.243241][T19230] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3997'. [ 306.255797][T19230] gretap0: entered promiscuous mode [ 306.262557][T19230] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3997'. [ 306.274012][T19230] 0{X: renamed from gretap0 [ 306.281181][T19230] 0{X: left promiscuous mode [ 306.297488][T19230] 0{X: entered allmulticast mode [ 306.311214][T19230] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 306.370824][T19240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.378709][T19240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.591261][T19255] netlink: 'syz.0.4005': attribute type 83 has an invalid length. [ 306.600712][T19255] vlan0: entered promiscuous mode [ 306.606338][T19255] vlan0: entered allmulticast mode [ 306.611609][T19255] veth0_vlan: entered allmulticast mode [ 306.789460][T19274] digital: digital_start_poll: Unknown protocol [ 306.921365][T19283] macvlan0: entered promiscuous mode [ 306.927577][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 306.940990][T19283] macvlan0: entered allmulticast mode [ 306.989696][T19289] netlink: 'syz.2.4017': attribute type 1 has an invalid length. [ 307.121236][T19300] bridge_slave_0: left allmulticast mode [ 307.127417][T19300] bridge_slave_0: left promiscuous mode [ 307.133075][T19300] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.142726][T19300] bridge_slave_1: left allmulticast mode [ 307.148759][T19300] bridge_slave_1: left promiscuous mode [ 307.154543][T19300] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.164044][T19300] bond0: (slave bond_slave_0): Releasing backup interface [ 307.179485][T19300] bond0: (slave bond_slave_1): Releasing backup interface [ 307.201041][T19300] bond4: (slave gretap1): Releasing active interface [ 307.213464][T19300] bond5: (slave bridge5): Releasing active interface [ 307.371085][T19308] atomic_op ffff88805d16e198 conn xmit_atomic 0000000000000000 [ 307.388632][T19310] veth0_to_bridge: entered promiscuous mode [ 307.395931][T19310] veth0_to_bridge: left promiscuous mode [ 308.073753][T19378] A link change request failed with some changes committed already. Interface bond4 may have been left with an inconsistent configuration, please check. [ 308.228246][T19402] xt_policy: neither incoming nor outgoing policy selected [ 308.253284][ T9] IPVS: starting estimator thread 0... [ 308.357296][T19406] IPVS: using max 45 ests per chain, 108000 per kthread [ 308.481774][T19434] erspan0: left allmulticast mode [ 308.489694][T19434] macvlan0: left allmulticast mode [ 308.708910][T19457] bond0: entered promiscuous mode [ 308.715849][T19457] bond0: left promiscuous mode [ 309.388947][T19489] xt_HMARK: proto mask must be zero with L3 mode [ 309.443973][T19498] dvmrp0: left allmulticast mode [ 309.795601][T19538] tipc: Enabled bearer , priority 0 [ 309.811604][T19538] tipc: Resetting bearer [ 309.828592][T19536] tipc: Disabling bearer [ 309.966757][T19555] netlink: zone id is out of range [ 309.992370][T19555] netlink: get zone limit has 8 unknown bytes [ 310.041595][ T30] audit: type=1800 audit(1756449933.450:4): pid=19552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4091" name="cgroup.controllers" dev="tmpfs" ino=709 res=0 errno=0 [ 310.302875][ T5943] IPVS: starting estimator thread 0... [ 310.310655][T19587] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 310.324152][T19586] ` (unregistering): Released all slaves [ 310.340485][T19591] netlink: 'syz.0.4103': attribute type 13 has an invalid length. [ 310.349048][T19591] lo: entered promiscuous mode [ 310.353896][T19591] lo: entered allmulticast mode [ 310.360381][T19591] tunl0: entered promiscuous mode [ 310.368641][T19591] tunl0: entered allmulticast mode [ 310.379025][T19592] openvswitch: netlink: Flow key attr not present in new flow. [ 310.392280][T19591] gre0: entered promiscuous mode [ 310.397803][T19591] gre0: entered allmulticast mode [ 310.422349][T19591] gretap0: entered promiscuous mode [ 310.428208][T19591] gretap0: entered allmulticast mode [ 310.435721][T19589] IPVS: using max 43 ests per chain, 103200 per kthread [ 310.492943][T19591] gretap0: refused to change device tx_queue_len [ 310.499781][T19591] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 310.547050][T19602] __nla_validate_parse: 28 callbacks suppressed [ 310.547069][T19602] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.4106'. [ 310.589797][T19612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4108'. [ 310.599017][T19612] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4108'. [ 310.663286][T19614] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 310.719930][T19620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4112'. [ 310.846914][T19631] tap0: tun_chr_ioctl cmd 1074025677 [ 310.852409][T19631] tap0: linktype set to 65534 [ 310.925060][T12839] wlan1: Trigger new scan to find an IBSS to join [ 310.933138][T19636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4117'. [ 311.063698][T19650] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 311.097992][T19652] netlink: 'syz.0.4121': attribute type 29 has an invalid length. [ 311.106820][T19652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4121'. [ 311.160269][T19659] macsec1: entered promiscuous mode [ 311.166915][T19659] macsec1: entered allmulticast mode [ 311.320402][T19666] syzkaller0: entered allmulticast mode [ 311.332562][T19666] tipc: Enabled bearer , priority 0 [ 311.342070][T19665] tipc: Resetting bearer [ 311.387945][T19665] tipc: Disabling bearer [ 311.602499][T19684] netlink: 'syz.0.4132': attribute type 33 has an invalid length. [ 311.611371][T19684] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4132'. [ 311.637721][T19684] IPv6: sit1: Disabled Multicast RS [ 311.992487][T19717] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4139'. [ 312.084523][T19726] netlink: 'syz.2.4144': attribute type 4 has an invalid length. [ 312.285018][T19748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4150'. [ 312.300186][T19748] IPv6: sit1: Disabled Multicast RS [ 312.307316][T19748] sit1: entered allmulticast mode [ 312.346508][T19755] team0: Device gtp0 is up. Set it down before adding it as a team port [ 312.463032][T19764] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.478376][T19764] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.527848][T19763] netlink: 'syz.4.4155': attribute type 1 has an invalid length. [ 312.532522][T19766] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4157'. [ 312.538496][T19763] netlink: 'syz.4.4155': attribute type 2 has an invalid length. [ 312.583430][T19764] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.620525][T19764] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.671265][T19764] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.681838][T19764] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.728698][T19764] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.738401][T19764] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.797083][T12837] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.805807][T12837] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.819914][T19776] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.829879][T19776] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.839359][T19776] bond0 (unregistering): Released all slaves [ 312.852569][T12837] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.862044][T12837] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.875518][T12852] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.884361][T12852] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.896022][T12852] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.910403][T12852] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.486989][T19797] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 313.729178][T19827] netlink: 'syz.4.4177': attribute type 12 has an invalid length. [ 313.876643][T19782] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 313.883668][T19834] netlink: 'syz.4.4180': attribute type 8 has an invalid length. [ 313.893480][T12837] wlan1: Trigger new scan to find an IBSS to join [ 313.977583][T12844] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 314.862723][T19870] batadv0: entered allmulticast mode [ 314.914433][T19874] smc: removing ib device syz0 [ 315.514781][T19917] tipc: Enabled bearer , priority 0 [ 315.533902][T19917] syzkaller0: entered promiscuous mode [ 315.542575][T19917] syzkaller0: entered allmulticast mode [ 315.558162][T19917] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.617821][T19917] tipc: Resetting bearer [ 315.650319][T19917] __nla_validate_parse: 12 callbacks suppressed [ 315.650340][T19917] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4204'. [ 315.673209][T19922] IPv6: sit1: Disabled Multicast RS [ 315.681880][T19922] sit1: entered allmulticast mode [ 315.740071][T19916] tipc: Resetting bearer [ 315.764323][T19916] tipc: Disabling bearer [ 316.130455][T19942] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.137950][T19942] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.453137][T19942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.470840][T19942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.566904][T19950] geneve2: entered promiscuous mode [ 316.572147][T19950] geneve2: entered allmulticast mode [ 316.834727][T19988] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4220'. [ 316.972121][T20006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4226'. [ 316.987014][T20006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4226'. [ 317.042395][T20008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4229'. [ 317.053086][T20008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4229'. [ 317.054758][T20006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4226'. [ 317.074011][T20008] bond1: left promiscuous mode [ 317.080080][T20006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4226'. [ 317.091828][T20006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4226'. [ 317.101871][T20006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4226'. [ 317.126828][T20010] netlink: 'syz.0.4230': attribute type 3 has an invalid length. [ 317.167614][ C1] ------------[ cut here ]------------ [ 317.173132][ C1] ODEBUG: free active (active state 0) object: ffff888058209c90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 317.186676][ C1] WARNING: CPU: 1 PID: 20021 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 317.196293][ C1] Modules linked in: [ 317.200205][ C1] CPU: 1 UID: 0 PID: 20021 Comm: syz.2.4232 Not tainted syzkaller #0 PREEMPT(full) [ 317.209633][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 317.219725][ C1] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 317.225581][ C1] Code: 4c 89 ff e8 97 e8 52 fd 4d 8b 0f 48 c7 c7 20 40 e3 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 2a 1e b3 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 67 8a d3 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 317.245234][ C1] RSP: 0000:ffffc90000a08a10 EFLAGS: 00010292 [ 317.251325][ C1] RAX: 63e9acf6823eb800 RBX: dffffc0000000000 RCX: ffff88804479da00 [ 317.259356][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 317.267364][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 317.275369][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffffffff8a6c9770 [ 317.283351][ C1] R13: ffffffff8be341a0 R14: ffff888058209c90 R15: ffffffff8b8cdfa0 [ 317.291370][ C1] FS: 00007fa8cb3516c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 317.300344][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.306976][ C1] CR2: 00007fa8cb350f98 CR3: 000000007d64c000 CR4: 00000000003526f0 [ 317.314995][ C1] Call Trace: [ 317.318282][ C1] [ 317.321132][ C1] debug_check_no_obj_freed+0x3a2/0x470 [ 317.326752][ C1] ? do_raw_spin_lock+0x121/0x290 [ 317.331791][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 317.336938][ C1] kfree+0x112/0x440 [ 317.340862][ C1] rose_timer_expiry+0x4cb/0x600 [ 317.345832][ C1] ? call_timer_fn+0x155/0x5f0 [ 317.350583][ C1] call_timer_fn+0x17e/0x5f0 [ 317.355179][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 317.360621][ C1] ? call_timer_fn+0xbe/0x5f0 [ 317.365301][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 317.370397][ C1] ? rcu_is_watching+0x15/0xb0 [ 317.375159][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 317.380600][ C1] __run_timer_base+0x61a/0x860 [ 317.385453][ C1] ? ktime_get+0x3e/0x1f0 [ 317.389766][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 317.395139][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 317.401378][ C1] run_timer_softirq+0xb7/0x180 [ 317.406252][ C1] handle_softirqs+0x283/0x870 [ 317.411019][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 317.415802][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 317.421090][ C1] __irq_exit_rcu+0xca/0x1f0 [ 317.425679][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 317.430861][ C1] irq_exit_rcu+0x9/0x30 [ 317.435102][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 317.440721][ C1] [ 317.443631][ C1] [ 317.446561][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 317.452522][ C1] RIP: 0010:__sanitizer_cov_trace_cmp8+0x37/0x90 [ 317.458853][ C1] Code: 08 50 a0 92 65 8b 15 88 a2 e0 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 3c 16 00 00 00 74 4e 8b 91 18 16 00 00 <83> fa 03 75 43 48 8b 91 20 16 00 00 44 8b 89 1c 16 00 00 49 c1 e1 [ 317.478475][ C1] RSP: 0000:ffffc90016237c38 EFLAGS: 00000246 [ 317.484536][ C1] RAX: ffffffff8b716ccc RBX: 0000000000000003 RCX: ffff88804479da00 [ 317.492524][ C1] RDX: 0000000000000000 RSI: ffff88801a474b00 RDI: ffff888032434e00 [ 317.500514][ C1] RBP: dffffc0000000000 R08: ffff88804479da00 R09: 0000000000000004 [ 317.508499][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: 00007fa8cb332000 [ 317.516490][ C1] R13: ffffffffffffffff R14: ffff88801a474b00 R15: ffff888032434e00 [ 317.524456][ C1] ? mtree_range_walk+0x57c/0x840 [ 317.529514][ C1] mtree_range_walk+0x57c/0x840 [ 317.534362][ C1] mas_walk+0xc6/0x2e0 [ 317.538466][ C1] ? lock_vma_under_rcu+0x12f/0x3d0 [ 317.543683][ C1] lock_vma_under_rcu+0x18f/0x3d0 [ 317.548722][ C1] ? rcu_is_watching+0x15/0xb0 [ 317.553503][ C1] ? lock_vma_under_rcu+0xdf/0x3d0 [ 317.558622][ C1] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 317.564168][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 317.569405][ C1] ? __se_sys_rt_sigprocmask+0x22d/0x290 [ 317.575078][ C1] ? rcu_is_watching+0x15/0xb0 [ 317.579845][ C1] do_user_addr_fault+0x2d9/0x1390 [ 317.584994][ C1] ? rcu_is_watching+0x15/0xb0 [ 317.589737][ C1] ? trace_page_fault_user+0x84/0x1e0 [ 317.595137][ C1] exc_page_fault+0x76/0xf0 [ 317.599656][ C1] asm_exc_page_fault+0x26/0x30 [ 317.604490][ C1] RIP: 0033:0x7fa8ca44e1ee [ 317.608908][ C1] Code: f6 31 c0 e8 b4 f2 13 00 48 81 c4 90 00 00 00 48 98 5b c3 66 0f 1f 84 00 00 00 00 00 41 54 55 53 48 89 fb 48 81 ec d0 00 00 00 <48> 89 74 24 28 48 89 54 24 30 48 89 4c 24 38 4c 89 44 24 40 4c 89 [ 317.628525][ C1] RSP: 002b:00007fa8cb350f70 EFLAGS: 00010202 [ 317.634576][ C1] RAX: 0000000000000000 RBX: 00007fa8ca613167 RCX: 00007fa8ca60fdd8 [ 317.642571][ C1] RDX: 00000000000130a6 RSI: 0000000000000001 RDI: 00007fa8ca613167 [ 317.650553][ C1] RBP: 00007fa8ca7b6090 R08: 0000000007bfa0b3 R09: 7fffffffffffffff [ 317.658555][ C1] R10: 3fffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 317.666538][ C1] R13: 00007fa8ca7b6128 R14: 00007fa8ca7b6090 R15: 00007ffe45e651e8 [ 317.674515][ C1] [ 317.677540][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 317.684809][ C1] CPU: 1 UID: 0 PID: 20021 Comm: syz.2.4232 Not tainted syzkaller #0 PREEMPT(full) [ 317.694171][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 317.704210][ C1] Call Trace: [ 317.707474][ C1] [ 317.710299][ C1] dump_stack_lvl+0x99/0x250 [ 317.714879][ C1] ? __asan_memcpy+0x40/0x70 [ 317.719461][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.724645][ C1] ? __pfx__printk+0x10/0x10 [ 317.729228][ C1] vpanic+0x281/0x750 [ 317.733200][ C1] ? __pfx__printk+0x10/0x10 [ 317.737791][ C1] ? __pfx_vpanic+0x10/0x10 [ 317.742284][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 317.747562][ C1] panic+0xb9/0xc0 [ 317.751267][ C1] ? __pfx_panic+0x10/0x10 [ 317.755671][ C1] __warn+0x31b/0x4b0 [ 317.759636][ C1] ? debug_print_object+0x16b/0x1e0 [ 317.764821][ C1] ? debug_print_object+0x16b/0x1e0 [ 317.770003][ C1] report_bug+0x2be/0x4f0 [ 317.774319][ C1] ? debug_print_object+0x16b/0x1e0 [ 317.779538][ C1] ? debug_print_object+0x16b/0x1e0 [ 317.784719][ C1] ? debug_print_object+0x16d/0x1e0 [ 317.789909][ C1] handle_bug+0x84/0x160 [ 317.794140][ C1] exc_invalid_op+0x1a/0x50 [ 317.798627][ C1] asm_exc_invalid_op+0x1a/0x20 [ 317.803459][ C1] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 317.809254][ C1] Code: 4c 89 ff e8 97 e8 52 fd 4d 8b 0f 48 c7 c7 20 40 e3 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 2a 1e b3 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 67 8a d3 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 317.828849][ C1] RSP: 0000:ffffc90000a08a10 EFLAGS: 00010292 [ 317.834907][ C1] RAX: 63e9acf6823eb800 RBX: dffffc0000000000 RCX: ffff88804479da00 [ 317.842879][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 317.850841][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 317.858795][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffffffff8a6c9770 [ 317.866748][ C1] R13: ffffffff8be341a0 R14: ffff888058209c90 R15: ffffffff8b8cdfa0 [ 317.874708][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 317.880338][ C1] debug_check_no_obj_freed+0x3a2/0x470 [ 317.885875][ C1] ? do_raw_spin_lock+0x121/0x290 [ 317.890899][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 317.895997][ C1] kfree+0x112/0x440 [ 317.899890][ C1] rose_timer_expiry+0x4cb/0x600 [ 317.904818][ C1] ? call_timer_fn+0x155/0x5f0 [ 317.909572][ C1] call_timer_fn+0x17e/0x5f0 [ 317.914154][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 317.919603][ C1] ? call_timer_fn+0xbe/0x5f0 [ 317.924274][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 317.929377][ C1] ? rcu_is_watching+0x15/0xb0 [ 317.934125][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 317.939575][ C1] __run_timer_base+0x61a/0x860 [ 317.944417][ C1] ? ktime_get+0x3e/0x1f0 [ 317.948747][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 317.954106][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 317.960339][ C1] run_timer_softirq+0xb7/0x180 [ 317.965177][ C1] handle_softirqs+0x283/0x870 [ 317.969928][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 317.974677][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 317.979946][ C1] __irq_exit_rcu+0xca/0x1f0 [ 317.984517][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 317.989700][ C1] irq_exit_rcu+0x9/0x30 [ 317.993926][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 317.999548][ C1] [ 318.002462][ C1] [ 318.005374][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 318.011340][ C1] RIP: 0010:__sanitizer_cov_trace_cmp8+0x37/0x90 [ 318.017660][ C1] Code: 08 50 a0 92 65 8b 15 88 a2 e0 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 3c 16 00 00 00 74 4e 8b 91 18 16 00 00 <83> fa 03 75 43 48 8b 91 20 16 00 00 44 8b 89 1c 16 00 00 49 c1 e1 [ 318.037260][ C1] RSP: 0000:ffffc90016237c38 EFLAGS: 00000246 [ 318.043416][ C1] RAX: ffffffff8b716ccc RBX: 0000000000000003 RCX: ffff88804479da00 [ 318.051382][ C1] RDX: 0000000000000000 RSI: ffff88801a474b00 RDI: ffff888032434e00 [ 318.059347][ C1] RBP: dffffc0000000000 R08: ffff88804479da00 R09: 0000000000000004 [ 318.067303][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: 00007fa8cb332000 [ 318.075256][ C1] R13: ffffffffffffffff R14: ffff88801a474b00 R15: ffff888032434e00 [ 318.083217][ C1] ? mtree_range_walk+0x57c/0x840 [ 318.088242][ C1] mtree_range_walk+0x57c/0x840 [ 318.093103][ C1] mas_walk+0xc6/0x2e0 [ 318.097177][ C1] ? lock_vma_under_rcu+0x12f/0x3d0 [ 318.102371][ C1] lock_vma_under_rcu+0x18f/0x3d0 [ 318.107390][ C1] ? rcu_is_watching+0x15/0xb0 [ 318.112142][ C1] ? lock_vma_under_rcu+0xdf/0x3d0 [ 318.117245][ C1] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 318.122783][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 318.127971][ C1] ? __se_sys_rt_sigprocmask+0x22d/0x290 [ 318.133587][ C1] ? rcu_is_watching+0x15/0xb0 [ 318.138349][ C1] do_user_addr_fault+0x2d9/0x1390 [ 318.143458][ C1] ? rcu_is_watching+0x15/0xb0 [ 318.148206][ C1] ? trace_page_fault_user+0x84/0x1e0 [ 318.153568][ C1] exc_page_fault+0x76/0xf0 [ 318.158062][ C1] asm_exc_page_fault+0x26/0x30 [ 318.162895][ C1] RIP: 0033:0x7fa8ca44e1ee [ 318.167293][ C1] Code: f6 31 c0 e8 b4 f2 13 00 48 81 c4 90 00 00 00 48 98 5b c3 66 0f 1f 84 00 00 00 00 00 41 54 55 53 48 89 fb 48 81 ec d0 00 00 00 <48> 89 74 24 28 48 89 54 24 30 48 89 4c 24 38 4c 89 44 24 40 4c 89 [ 318.186885][ C1] RSP: 002b:00007fa8cb350f70 EFLAGS: 00010202 [ 318.192940][ C1] RAX: 0000000000000000 RBX: 00007fa8ca613167 RCX: 00007fa8ca60fdd8 [ 318.200892][ C1] RDX: 00000000000130a6 RSI: 0000000000000001 RDI: 00007fa8ca613167 [ 318.208842][ C1] RBP: 00007fa8ca7b6090 R08: 0000000007bfa0b3 R09: 7fffffffffffffff [ 318.216798][ C1] R10: 3fffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 318.224753][ C1] R13: 00007fa8ca7b6128 R14: 00007fa8ca7b6090 R15: 00007ffe45e651e8 [ 318.232715][ C1] [ 318.235972][ C1] Kernel Offset: disabled [ 318.240276][ C1] Rebooting in 86400 seconds..