last executing test programs: 25.292609584s ago: executing program 3 (id=1553): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) epoll_create1(0x80000) (async) socket$inet_smc(0x2b, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) (async, rerun: 32) ppoll(&(0x7f0000000500)=[{r1, 0x420}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7a}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f00000007c0)=[{{&(0x7f0000000200)={0xa, 0x4e1f, 0x7ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x2ef}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="500000000000000029000000320000007f060000000000000730000000000a0603000900000000000000010000000000000006000000000000000200000000000000070000000000000000000000000024"], 0x78}}], 0x1, 0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000140)={0x0, 'macsec0\x00', {0x2}, 0xf}) (async) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r7}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYRESDEC=r3], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b55385"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0x8}, 0x18) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 25.061258656s ago: executing program 3 (id=1555): r0 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x7, 0x4, 0x3}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x1}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003400128009000100626f6e640000000024000280050001000400000008001e0000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) 24.636445419s ago: executing program 3 (id=1559): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x11}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020702500000000042020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300002a0b0000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r7, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r6) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), r5) sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x48, r9, 0x152, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netdevsim0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20}, 0x400c880) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) 23.167888308s ago: executing program 4 (id=1578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) close(0x3) socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x8}, {r0, 0x2000}, {r3, 0x4300}], 0x3, &(0x7f0000000180), &(0x7f00000001c0)={[0x4]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0x200448c1}, 0x40) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r6, &(0x7f00000000c0), 0x9) sendfile(r6, r5, 0x0, 0x10000) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 22.259416188s ago: executing program 0 (id=1582): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="07000000010003", 0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000001000000010000001938c76522aa3cfc537ad946db61b1e0d41ff57b98f83323fa1a84dfabbc5e351ee6957afce371209b", @ANYRES32=r0, @ANYRES32=r0], 0x18, 0x8000}}], 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="feffffffffffaaaaaaaaaa1808060102080506044554aaaaaaaaaa29620362b3aaaaaaaaaabbe261028b"], 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x0, 0x0, 0x98, 0xffffffff, 0x1d0, 0x1d0, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'veth0_to_batadv\x00', 'ipvlan1\x00', {}, {0xff}, 0xc, 0x2, 0x54}, 0x0, 0x70, 0x1d0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'veth1_virt_wifi\x00', 'hsr0\x00', {}, {}, 0x0, 0x3}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e23, 0x0, 0x4e22, 0xf8, 0x2, 0x20, 0x20, 0x62, r4, r6}, {0xffffffffffff24cb, 0x5, 0x3, 0xfffffffffffffffd, 0x40, 0x8001, 0xb7, 0x6}, {0x10000, 0x7f, 0x8000}, 0x5, 0x6e6bbe, 0x1, 0x1, 0x1, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0x33}, 0xa, @in=@empty, 0x0, 0x1, 0x0, 0xe, 0xfffffffa, 0x9, 0x200}}, 0xe8) 22.11471838s ago: executing program 4 (id=1584): r0 = socket$kcm(0x2, 0x3, 0x106) ppoll(&(0x7f0000000000)=[{r0}, {r0, 0x4260}, {r0, 0x14}, {r0}, {r0, 0x1000}, {r0, 0x2004}, {r0, 0x1200}], 0x7, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={[0x3]}, 0x8) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8917, &(0x7f0000000040)={r0}) (async) r1 = socket$kcm(0x2, 0x2, 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) (async, rerun: 32) r5 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0xffffffff}, 0x10) (async) listen(r5, 0x0) accept4$unix(r5, 0x0, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000140)=0x1) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r7, 0x0, 0x1000000, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x4886) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r8, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0xe}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040000) 21.911474292s ago: executing program 4 (id=1585): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000240)="800000800000210ee7decd7a000060008100", 0x12, 0x40051, &(0x7f00000001c0)={0x11, 0xf8, r8, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000000001000000000", @ANYRES32=r10, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000010000000200"/27], 0x50) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0) (async) sendmsg$nl_route_sched(r11, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) (async) r13 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r13, 0x0, 0x0, 0xf3d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendmsg$inet(r13, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)}, 0x60) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x48, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x34, 0x11, 0x0, 0x1, [@nested={0x2f, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee", @typed={0x5, 0x4a, 0x0, 0x0, @str='\x00'}]}]}]}, 0x48}], 0x1, 0x0, 0x0, 0x84}, 0x300) 21.539249155s ago: executing program 0 (id=1587): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r3) sendmsg$NFC_CMD_VENDOR(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r4, 0x501, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x8000) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYRES64=r1], 0x34}}, 0x440a0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095", @ANYRES16], &(0x7f0000000580)='syzkaller\x00', 0x2, 0x49c, &(0x7f0000002500)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf8, 0x10, 0x0, 0x34, 0x0, 0x0, 0xfffffffffffffe65}, 0x3f) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$inet6(0xa, 0x1, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@empty, 0x4e21, 0x0, 0xfffd, 0x3, 0x2}, {0x0, 0x200000004, 0x40000000007, 0x20000a0da, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5}, 0x1, 0x0, 0x1, 0x0, 0x6, 0x3}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@empty, 0x3502, 0x1, 0x8, 0x0, 0x9075, 0x800, 0x2}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) sendmsg$inet6(r6, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000430000007300029700000000ec30ba626cacbf3a7e2666286277ecb5fa79432e57"], 0x18}, 0xc4) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="06ac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r10, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) connect$unix(r9, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) connect$unix(r9, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) readv(r9, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/175, 0xaf}], 0x1) (async) readv(r9, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/175, 0xaf}], 0x1) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r11, 0x0) (async) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r11, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000080)={'vxcan1\x00', 0x2000}) 21.151943615s ago: executing program 0 (id=1588): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r1}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf25010000000000000008410000004c001800000800696200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000964e61dcf072e2d7eba05b261d418dabe50ad1caddbf1c6e074319f58b915203700000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x4000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000280000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4308123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dc8aff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798ab20000000bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d2000000000000000819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba84279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5603a9d801300000000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d535556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02221e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba0790ee0d112f99e59ba82e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af268c900a756e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee52303da186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c44500f8ffff970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c1b04e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305977eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f87204311327c18380fedf3d3dad8549f99bf6c5cb060fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce1060f3e6806e774a5f079c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae794286b6c3e1f5a76b85ed6e1f0000c608b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32bf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1951393352bc756f3fcaad2c1c399a3e43eaaeca70db90f2fa395964434476719334482eb5424c81814079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fbdd351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b577243152374d7b367337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2dff78ce9308c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416f80ba17d21d53961471b2d2d459e4bb23230d676ca49633b25e26a322024beb7c3427da59f7daa70a5d44a0eb895f29245df6401295d3da939954e126a3be932f47fe61ef1bfe83086651af7e23c2a8fa702b9aaa65aa3edaaa6b3f5a0c7cdfd008c898d73bb97168ca390ef539800000000000077a5ad1e683aeff92bb0b66b33ed878df1e344b99450086c819bf174578705c049d2fb25a91ba04643cde1a3c391d8646e5249dbf28b13b1c4d5127f685ee0c0576bf74e17cd3b4df4eb7095e504e361689572b0f93ff1dc6f52e8728a03e5a4df80a32c6055df8f4f4152c0bf4d793b20ac2cfa907b5af80716118f82027d3e4cb096fe86de545008b85cb9b637bca30d765b0c3ad489db32955454dcfe000000002830e5e125322d2f5829040a91405bf2fe5bf14833fd7b1e72c775f267bc4511183096eff3188a288c408b10285e7ec75f826e9b08a82cde1f4470545eebc71440623752e87ecc689b7fec2f667e22705b4660b2ef936cce446244bb48f8c7d062ea4a955facf6c2957cfb3c3ee9229efab5b72a5c5266eb493c7c3b08a91971692d9673cb9df620a8240d4f94b9fafd8e2bf0f9cedd1e08f4f10fd8f25f3169ed878624adccb5572cb918e0e3ba7e4ac0967aa65241903509778e63bebf00107524f858d7d48ef9e2c112c75d732344dc0a9bc506172d5a45e3bcb203862307c24c20fe1ffe6b5a43dbc1b20156161b5f59ab9955f2a6fb2469d6cbf857a137b542045d203e43874fe17720a05d3bc42bde811dcf97732108f5cb5943e609856876c2108491e88875ead76331822c8f0151a1cf06e634ac0933487716484f30f17d8f29af19784814192b4677759b781fc1a6726b154bbf3f30c48f0b829397acb9b337a6929d1158492e49bfe9a1158a57b6a422c8d1a3c476487a736a74d01bf48e05ac030092c66a502a8a5c9ef0a29582b6fef6d0dcd6a3a277887134f98291d79a2ed48adb3086b7c1c7340e0998036686b1919d25c3aa9591f4135fdad46003d76b366b81e50fdefeecf3b5d17e946059e2883ca43d61e14e725f0acaff73e0922319b6ea7b09b7b9ea691f5598f014f362e033ba9bc2a64f1c2ed591ef9c6f1a7a08e8e2842c0a592dd82d72e141db440000000000000000"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 21.067477373s ago: executing program 0 (id=1589): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$kcm(0x1e, 0x5, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x9, 0xfffffffffffffffc, 0x1, 0xfffffffffffffffe}, 0x40000120) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x74, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x1800000}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xfffff6d8}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x4}]}}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private0}]}]}, 0x74}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xb4}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000000314010029bd7000ffdbdf2509"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) 20.302689545s ago: executing program 3 (id=1595): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000340)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0x59}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040001}, 0x2400c000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="86feae88000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r10, @ANYBLOB], 0x44}}, 0x0) r11 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xffffffffffffffd5, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r12], 0x5c}}, 0x40) 20.174784755s ago: executing program 0 (id=1596): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e00000027bd70000000000004000900a800000001d78771b90bd8a2b4914783c58777003d5b9538a90000000300060000000000020000ffff000000000000000000000002000100000000000000030d00000000030005000000000002000000ac1414000000000000000000"], 0x70}, 0x1, 0x7}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd63bb7a4e004d110020010000000000000000000000000002fe8000000000000000000000000000aa4e224e22004d907864ebe114f6ff9df4140f23e207e56a28ace6c0b8bec259e8e5f080d1c009000000000000003c513854126120383901cb1a9402e67ce9cafd6b9ed54721cd27bd55e1025c02"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r2], 0x70}, 0x1, 0x0, 0x0, 0x4000041}, 0x840) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000340)=0x2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000001070000c89aab28a54a000000000000", @ANYBLOB="a25e99cb4e93f3bd901326595730c57f13f4526464f78d2efb7c9e568befcdc4f66eb877240d21f7babfa209467230be1a81ca478194a5a0393ba05078c720353b8e58bab576f83bf60a211e515f0f00a4f128520282c3c6faa39f4c798a25486b62ab50dc56c7e195b4e157ec752de246", @ANYRESHEX], 0x0, 0xfffffffd, 0x0, 0x0, 0x61800, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r8}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) 19.477238683s ago: executing program 3 (id=1599): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x29, 0x80000, 0x4) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYBLOB="1491271be7478f9888e0c5438a4fd64ec24a47c1acb3a69d87fec1727e53052405b8b027b7204a6d76d05d9127b5e0a5902b8a8931da25f278148e98f4ae05a0fce33e523b8aee3a30a25a64a5f9715947ccf8fac703edf6b1322903f934f82981d27ac32fefaea56dc48ab4cc78eddbecb2854b801564497b890eb650b6e66c6e10ada187180d3807ba2542cafc3ee5f050daa3e81a3d9574169d04d8d53e33b32e410520", @ANYRESHEX=r2, @ANYRESDEC=r2], 0x28}}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000280)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x8, @local, 0x3}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)='(I', 0x2}], 0x1}}], 0x2, 0x24000045) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x72c2}, 0x8) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000080)={@ipv4={""/10, ""/2, @remote}}, &(0x7f00000001c0)=0x14) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r6, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcd}, 0x8) sendmmsg$inet6(r7, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000240)={0x0, 0xb9, 0x2, [0xa, 0xe8]}, 0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x44}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0xfffc, 0x2, 0x5, 0x5, r8}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000100)={r8, @in6={{0xa, 0x4e23, 0x1, @mcast1, 0x7}}, 0x6, 0x9, 0x1, 0x6, 0x91d3}, &(0x7f0000000040)=0x98) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @local}}}], 0x18}, 0x0) 19.367762073s ago: executing program 2 (id=1600): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xd93, 0x2}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r2, r2, 0x3, 0x8, &(0x7f0000000100)="81839c93f294064c", 0x9, 0xb, 0x6, 0x5508, 0xc336, 0x1, 0xb, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) socket$inet6(0xa, 0x80000, 0x4) 19.367286598s ago: executing program 0 (id=1601): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0xb}, 0x60) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1e, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="8500000089000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1}, 0x94) listen(r0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000000}, @ethernet={0x1, @remote}, @ethernet={0x6, @remote}, 0x3, 0x0, 0x0, 0x0, 0x7fff, &(0x7f0000000040)='veth0_to_hsr\x00', 0x97b3, 0x0, 0xfff}) close(r1) 18.443999779s ago: executing program 2 (id=1608): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="28000000180001000000000000e3ffff011400000003fd05a6c9117708001e00ff0f000004000880"], 0x28}, 0x1, 0x0, 0x0, 0x4d4}, 0x4000050) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1, 0x803, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb080045"], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000020050000000060a0b0400003a3dfa5fef9922b46e313b9a30d5000000020000002400048020000180080001006c6f67001400028008000540000003ff060002407d0000000900010073797a303720b6000000000900020073797a3200000000140000001100010000"], 0x78}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x4000010) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x200401c8}, 0x20004804) (async) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/77, 0x4d}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in=@dev}}}, &(0x7f0000000140)=0xe8) 18.272427067s ago: executing program 2 (id=1610): r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000080), &(0x7f0000000180)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/32], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x403, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x6040, 0x80}, [@IFLA_ADDRESS={0xa}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x2008004) socket$alg(0x26, 0x5, 0x0) 18.029787555s ago: executing program 2 (id=1611): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair(0xb, 0x6, 0x100, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@remote, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x5c, r3}) r4 = getpid() getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f00000007c0)=0xe8) r6 = gettid() r7 = getuid() r8 = getgid() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000800)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@private1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000940)=0xe8) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000980)=0x0) r13 = getgid() sendmsg$netlink(r2, &(0x7f0000000ac0)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)=[{&(0x7f0000000140)={0x44, 0x1c, 0x400, 0x70bd2c, 0x25dfdbfe, "", [@generic="f2cab0e8d415bc44bbff2c9f06261688fa9f5b2b34392342cdd520bc894c01df377a98a8b531c8563919c04aec0494d6dcff93"]}, 0x44}, {&(0x7f00000001c0)={0x200, 0x27, 0x300, 0x70bd25, 0x25dfdbfd, "", [@typed={0xac, 0x114, 0x0, 0x0, @binary="010c76d10fc05ab341841f7ead9bc691e309a7001a805a40f5ebf6a990f2cd9a84c8cc5a6760d0ace70ad2bcaacfb86d49a9ac5fb8c38f3afad2758c7569dfd10a2767a19da10b5608d20f94e1187314fd85ff6de6d7970900c0616462d1fa937b559f43031e5c7d1ece6414af176e3e172bda49a6ff95a8ad04f637b9390f8b0eaffe00816fe1758bf6be8cf76137bc94c8fdd25084e1d14eadd4406a0ef123c7b04bf09e8ddda8"}, @generic="c033e7242194da8cc36f157df0a9166e87023f57ffde531f8e963501d4190fa8fd63ea7ef9649bae5cb3803cbb580e747a9a14b0ed4997e75d7518c7166c", @nested={0x102, 0x58, 0x0, 0x1, [@generic="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"]}]}, 0x200}, {&(0x7f00000003c0)={0x13c, 0x41, 0x1, 0x70bd2c, 0x25dfdbff, "", [@nested={0x30, 0x92, 0x0, 0x1, [@nested={0x4, 0xcc}, @nested={0x4, 0xef}, @nested={0x4, 0x128}, @nested={0x4, 0x37}, @typed={0x4, 0xbb}, @typed={0x4, 0x34}, @typed={0x14, 0x2a, 0x0, 0x0, @ipv6=@local}]}, @generic="62613ff4716a70015cd4929dee042688ded5d2c60bda370fe97e5ea80acc374fafdc2203290e27dff07cdd8d28975b1de03e04f5834ce6a7cfc52adf218412b1ec2321b6de2b9f8f8d934b67461754c2212eb5542e944b25e61f8ce29f1686e8b4e32f52808eb8ae4df4e6b7fafab538f3db8b572678ff826ed8667542059a796975a3966e9dbb1f9dbe7512a5acc75f38415b560cb6398b5d28a5f003b946a7f9d5f23d14439303b5f622e5d7e03c68849798bb4c544057f80bfbdf58c3431246265e5bad8b11e20441c529fdb6a5bdddd632581d84f0895fe1dfdd7f0ebe4c4ab3e6ff4ea248d6ef70a568011205ee0a4a620e", @typed={0x8, 0x14e, 0x0, 0x0, @u32}]}, 0x13c}, {&(0x7f0000000500)={0x38, 0x3b, 0x4, 0x0, 0x25dfdbfe, "", [@typed={0x8, 0x120, 0x0, 0x0, @fd=r2}, @typed={0xd, 0xde, 0x0, 0x0, @str='/!+.]+\\]\x00'}, @nested={0x8, 0x14a, 0x0, 0x1, [@nested={0x4, 0x83}]}, @typed={0x8, 0x91, 0x0, 0x0, @uid=0xffffffffffffffff}]}, 0x38}, {&(0x7f0000000540)={0xec, 0x31, 0x20, 0x70bd2a, 0x6, "", [@nested={0x60, 0x10a, 0x0, 0x1, [@typed={0x45, 0x25, 0x0, 0x0, @binary="04089ba16fc6ce680902b8f75f6edd238cdfc41399d249107af5a9acd8f4384e4393a7d1f400b3d9789231a39193c98ff9a1b9ae97500cf8eb4223ddac99edbc90"}, @generic="88280c2b82076129c2383e74d3b95162", @nested={0x4, 0xd8}]}, @nested={0x7c, 0x30, 0x0, 0x1, [@generic="716e75ba7ccebed65dda09b7bce97648c5088deff28b33bc8dd16a9447e173061ee355aad209a1515f431d88a8bd116cffaa274e9f057866bd4cea802b86238e76813fc95d9587dc39425babcaa6d6e02b5442ab9325baa737c7a3d188dad25f46540ed15960474b66ce8432156b7aaffda13690", @nested={0x4, 0x17}]}]}, 0xec}], 0x5, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r1, r2, r11, r2, r1, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xffffffffffffffff, r13}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xc8, 0x40004}, 0x80) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000b00)=0x60, 0x2) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x400, 0x0) ioctl$TUNSETGROUP(r14, 0x400454ce, r13) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000b80), 0x4) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), r1) r16 = syz_open_procfs$namespace(r6, &(0x7f0000000c40)='ns/time\x00') sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, r15, 0xe4bdf2b0318baf22, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r16}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d40), 0xffffffffffffffff) socket$kcm(0x29, 0x2, 0x0) r17 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), r17) r18 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$sock_timeval(r18, 0x1, 0x14, &(0x7f0000000dc0), 0x10) syz_emit_ethernet(0x8a, &(0x7f0000000e00)={@multicast, @empty, @void, {@llc={0x4, {@llc={0xd4, 0xf4, "4a9f", "1e7db631143cb6b0590381954671c81838e857afed0c3a0bb292e9c2f437d0ee4ff957d0623d3df681742a2cc9c1e9cb1f2b059351eaf64cca0c47bd633849da8bf1a57edf4108d47cfc19c932f991e0201ca87b192f285366d6d77fbea61a559ffae155ad9977f04f010568e966c05cff13203b0090fc2e"}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000f00)=@filter={'filter\x00', 0xe, 0x4, 0x418, 0xffffffff, 0x258, 0x0, 0x258, 0xffffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x4, &(0x7f0000000ec0), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'lo\x00', 'veth1_to_bond\x00', {}, {}, 0x3c, 0x2, 0x6, 0xa}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0xe, 0x0, [0x100, 0x0, 0x8, 0x9, 0x0, 0x8, 0x9, 0x6, 0x8001, 0x8, 0x4, 0x1, 0x100, 0x6, 0x8dea, 0x8], 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x54, 0x4, 0x0, [0x22, 0xc, 0x1, 0x2b, 0x4, 0x8, 0x4, 0x2, 0x0, 0x7ff, 0x2, 0x800, 0xb, 0x0, 0x7, 0x2], 0x9}}, @common=@ipv6header={{0x28}, {0x4, 0x13, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x200, {0x100}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) 17.806873063s ago: executing program 2 (id=1614): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) accept4$inet(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000540)={0x0, 0x80, "d48d74fdc771b90d38c61ef7b182e95414e24bfdd1ee4369877d299c7e3677a693fc1899fa25a20047aca98a58795b0fac68a2625172a29c31b77ea6ebd31eee711c1e4b60c2b70e3d1ba8114a1c6fc4fa57fdc9c71a13e9d02ed2e680aca47a9e7e35989fedf0931c96ffea3750b49c6c0ff6d35040cc231f2199c055bddc84"}, &(0x7f0000000280)=0x88) r1 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) syz_emit_ethernet(0x9a, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaabb08004500008c0000000000019078ac1e0001ac1414aa03059078030000004c00000000000000005e0009ac14140007000000445c00010000000000000000ac1414bb00000000ac141400000000000000000000000000e000f1483844203ae015a288c0ce35cca90002000000007f00000100000005b61414aa00000004e000000100000006ffffffff00000008e0"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCAX25DELFWD(r1, 0x618f, 0x0) 17.283602893s ago: executing program 1 (id=1616): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x40000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x27, 0xe, 0x0, &(0x7f0000000380)="f8ad48cc02cb29dcc8007f5b0800", 0x0, 0x3ad9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="821c2145", @ANYRES16=r3, @ANYBLOB="0303020000000200000006000000"], 0x14}}, 0x0) ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff) sendmmsg$inet6(r0, &(0x7f0000005300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x46, @loopback, 0xffff}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1050}}], 0x1, 0x2000bf40) unshare(0x8000000) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x40000000}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x27, 0xe, 0x0, &(0x7f0000000380)="f8ad48cc02cb29dcc8007f5b0800", 0x0, 0x3ad9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="821c2145", @ANYRES16=r3, @ANYBLOB="0303020000000200000006000000"], 0x14}}, 0x0) (async) ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff) (async) sendmmsg$inet6(r0, &(0x7f0000005300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x46, @loopback, 0xffff}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1050}}], 0x1, 0x2000bf40) (async) unshare(0x8000000) (async) 17.208220099s ago: executing program 1 (id=1617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010100000000000000000000fffc05000400000000000900020073797a30000000000500010007000000050005000a0000000c000780080012000000ffff12000300686173683a6e65742c706f7274"], 0x58}}, 0x20000000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x6, 0xfff1}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @broadcast}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "c1d1a1d6b8d93b12202bd5dbecc88ebe"}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) pread64(r6, &(0x7f0000002200)=""/89, 0x59, 0x10000) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) 17.055018427s ago: executing program 1 (id=1618): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000020c0)={&(0x7f0000000640)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@mask_cswp={0x58, 0x118, 0x9, {{0x7f, 0x4}, 0x0, 0x0, 0x4, 0x4, 0x3ff, 0x3, 0x6d, 0x7}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xf}], 0x70, 0x20008011}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000, 0x0, 0x4}, 0x20) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="0a000000010000", 0x7) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0x64, 0x30, 0x871a15abc695f91d, 0x0, 0x80000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468802, 0x40, 0x1, 0x3, 0x80000000}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc7}}, 0x4040) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00', 0x0}) sendto$packet(r8, &(0x7f0000000380)='i', 0x1, 0xc190, &(0x7f0000000200)={0x11, 0x8100, r9, 0x1, 0x11, 0x6, @broadcast}, 0x14) recvmmsg(r6, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x2, 0x10022, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6d616e676c650000330000000000000000000000000000000053d5d4ab372fa60defad996543000000"], &(0x7f0000000100)=0x2d) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x240, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x22c, 0x1, [@m_nat={0x228, 0x1f, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x2, 0x7, 0x8, 0xd1a}, @remote, @remote, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x0, 0x7, 0x5}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x6, 0x8, 0xe, 0x9}, @empty, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x4, 0x2, 0x3, 0x8}, @private=0xa010102, @private=0xa010102, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x6, 0x72c67eb9b767cf95, 0xc7, 0xc863}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xfc, 0x8, 0x5, 0xe}, @loopback, @private=0xa010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fffffff, 0x4, 0x9, 0x8000, 0x75f4027b}, @multicast1, @private=0xa010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xb, 0x7, 0x3, 0x7, 0xbcc}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x4, 0x7, 0x9}, @dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010102, 0xffffffff, 0x40000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10000, 0x0, 0x6, 0x4, 0x8001}, @local, @dev={0xac, 0x14, 0x14, 0x35}, 0xff}}]}, {0x6e, 0x6, "980b65ebd8f7ccc2ed6bdfe39ae166fa84373df7ff6055ab65dfa4ed92f158d6e8e28e2c0c212ad537fec2db43556a38c98efbee07f71246b50e5abf04b5c9f7331bdef07f3b72f396edf4029d362ac951123b431b5ed71807710d6edbf9b6f6ab5a29b5add781ad0b14"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0xfe33) 16.404521642s ago: executing program 4 (id=1619): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000000000000000001000000851000000100000095000000000000008510000002000000850000004c000000950000000000000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000006000000045000000700000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000200400000000ff00000000001100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, r0}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r0, 0x6, 0x0, 0x5bb80000, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0]}, 0x40) 16.314384447s ago: executing program 3 (id=1620): bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x7a) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) close(0x4) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r3, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) r4 = socket(0xa, 0x1, 0x0) socketpair(0xa, 0x4, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x150, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0"], 0xffd8}}, 0x4000000) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000180)={'nat\x00', 0x0, [0x0, 0x8, 0x7ff, 0x3, 0x9]}, &(0x7f0000000400)=0x54) unshare(0x26020480) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r8}, 0x8) ioctl$SIOCGETVIFCNT(r5, 0x89e0, &(0x7f0000000040)={0x1}) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f00000010c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x6, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 16.307547558s ago: executing program 4 (id=1621): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a40)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd2d, 0xffff7ffd, {}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) 16.204207212s ago: executing program 4 (id=1622): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_delroute={0x1c, 0x19, 0xc0a, 0x70bd27, 0x25dfdbfc, {0x2, 0x14, 0x0, 0x5, 0x0, 0x4, 0xc8, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004005}, 0x40) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r3, 0x400, 0x0, 0x25dfdbfd, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) 16.092628729s ago: executing program 1 (id=1623): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000000)={'sit0\x00', @ifru_flags=0x800}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x70bd2e, 0x25dfdbfc, {0x2, 0x0, 0x49, 0xff, r1}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, @IFA_FLAGS={0x8, 0x8, 0x700}]}, 0x28}}, 0x0) 16.05844002s ago: executing program 1 (id=1624): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x20, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r4}, 0x18) (async) r5 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x75de0fa8, 0x5, 0x9, 0x81, 0x101, 0x7, 0x2, 0x7fffffff, 0xfffffffd, 0xd, 0xb, 0x3, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140005800800014000008917080002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) (async) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="c6febefa00"/18, @ANYRES32=0x0, @ANYBLOB="24000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e"], 0x40}, 0x1, 0x0, 0x0, 0x20000840}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000000c0)={r11}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xfda8, 0xfffffffffffffe5d, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 15.95867577s ago: executing program 1 (id=1625): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x1, 0x1, 0x1, 0x1}, 0x31, 0x1, 0x0, 0x0, "6dea2d6128d19f0c60dbd729185e27366288ee1a761e5f6d3b33b7b1f61e877e3aaca3836a18d8345758fb999b88f80f798512d9f0fa49f0c00497cb06a56cac"}, 0x48}, 0x1, 0x0, 0x0, 0x20008880}, 0x8001) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, @can={0x1d, 0x0}, @nfc={0x27, r2, 0xffffffffffffffff, 0x7}, @phonet={0x23, 0xd, 0x4, 0x3}, 0x7, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)='veth1_to_batadv\x00', 0x7, 0x1, 0xbce9}) r4 = socket$netlink(0x10, 0x3, 0x13) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x3d0e, 0x7fffffff, 0xad8, 0x10, 0xffffffffffffffff, 0x7, '\x00', r1, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0xa}, 0x50) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000300)=""/252, &(0x7f0000000400)=0xfc) connect(r4, &(0x7f0000000440)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}]}, 0x58}}, 0x800) getsockname(r4, &(0x7f0000000600)=@l2tp6, &(0x7f0000000680)=0x80) syz_emit_ethernet(0x56, &(0x7f00000006c0)={@random="8b7fea84c205", @remote, @void, {@canfd={0xd, {{0x88e, 0x1, 0x1, 0x1}, 0x18, 0x2, 0x0, 0x0, "1db9627f8b21fea2da4204cd444a4b615e17ac799c9a6bdc9500eb9a94ff61f2b66cf55747a7045c3f3a62dbd838f3dce1f0a304431126b6ce0597aa2285c1d8"}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000740)={0x11}) sendmsg$nl_route_sched(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=@gettaction={0x64, 0x32, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x10040}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x27ff}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4801}, 0x4000800) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f00000008c0), &(0x7f0000000900)=0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r7, &(0x7f0000000940)="ef704226e126eeb2449bb39a015ea7878d247137cc4327a70e86df6f23201132424ef9507ade6642ee1b3ad06b7639ad02dfb848b1dc2352289de36b1e06eae2dcae04983718a90960b0c8c3d22e8092f93af1825d684a2d03910eec260b9e409caccd68d2d656744e71a86409340031e92693c3bb7ba36548021b291918c53be0140fd2a31aefdd2bffbe40f36d243c8d7a97fc1b41", 0x96, 0x20000011, &(0x7f0000000a00)={0xa, 0x4e23, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c) r8 = socket$inet(0x2, 0x3, 0x3) r9 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000a40), 0x800) ppoll(&(0x7f0000000a80)=[{r6}, {0xffffffffffffffff, 0x1}, {r7, 0x21c0}, {r6, 0x10}, {r4, 0x2044}, {r8, 0x8008}, {r5, 0x141}, {r4, 0x82}, {r9, 0x10}, {r0, 0xa0}], 0xa, &(0x7f0000000b00)={0x0, 0x3938700}, &(0x7f0000000b40)={[0xde2]}, 0x8) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000000b80)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @remote, 0x7f, 0x9, 0xff, 0x100, 0x5, 0x6240380, r3}) sendmsg$nl_route_sched(r4, &(0x7f00000019c0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001980)={&(0x7f0000000c40)=@delchain={0xd28, 0x65, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0xb}, {0x10, 0xf}, {0x5, 0x34295841c1bc999b}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xbe}}, @TCA_CHAIN={0x8, 0xb, 0xac12}, @filter_kind_options=@f_basic={{0xa}, {0xce8, 0x2, [@TCA_BASIC_POLICE={0x7c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x100, 0xffffffffffffffff, 0x9, 0x12, 0x0, {0x4, 0x2, 0x3, 0xde, 0x8}, {0x2, 0x0, 0x3, 0x0, 0x1, 0xf99}, 0x9, 0x1ff, 0x7}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x89, 0x40, 0x8000, {0x10, 0x2, 0xaae, 0x3, 0xd659, 0xffff}, {0x6, 0x0, 0x17, 0x9, 0x0, 0x7f}, 0x8, 0x3, 0x8}}]}, @TCA_BASIC_POLICE={0xc58, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0xd9f1, 0x10000000, 0x4, 0x9337, 0x3, {0x6, 0x0, 0x5, 0x7, 0x3, 0xf4}, {0x6, 0x1, 0xb2, 0xfc22, 0x400, 0x972c}, 0x0, 0x4, 0xffff}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x1, 0x8001, 0x5, 0x3, 0xffffff5d, 0x6, 0x2, 0xffffffff, 0x0, 0xff, 0x6, 0x8, 0x5, 0x24000, 0x5eb0c229, 0x8001, 0x5, 0x7, 0x199, 0x2, 0x8, 0x8000, 0x7, 0x0, 0xd5b, 0x7123, 0x9365, 0x253e, 0x4, 0x6, 0x7, 0x5, 0x3, 0x588, 0x4, 0xa51, 0x64b87a2, 0x0, 0x3, 0x0, 0x871d, 0x6, 0xfffffff5, 0x4, 0x6, 0x0, 0x6, 0x101, 0x6, 0x5, 0xfffffffa, 0x1, 0xb, 0xff, 0x7ff, 0x7245, 0x80000001, 0x5, 0xa, 0x4fed, 0x653, 0x4, 0x2, 0xed7e, 0x8, 0x100, 0x0, 0x9, 0x3ff, 0x80, 0x1000, 0x5, 0xbd10, 0x6, 0x37, 0xb20, 0x8, 0xc, 0x2, 0x7, 0x8000, 0x4, 0x7f, 0xa, 0x7fffffff, 0xffffffff, 0x6, 0x5, 0x69ff, 0x7ff, 0x8, 0x4, 0x1, 0x1000, 0x0, 0x0, 0x9, 0x10000, 0x7, 0xe47e, 0x400, 0xbfe, 0x1, 0x3, 0x2, 0x2, 0x8, 0x6, 0x3, 0x2, 0x2b35, 0x101, 0x248c451d, 0x0, 0x5, 0x5, 0x80000001, 0x81, 0x4, 0x2, 0x200, 0x6421, 0x0, 0x2a1, 0xd, 0x0, 0x401, 0x80000000, 0x6, 0x4, 0x81, 0x6, 0x2, 0x8001, 0x3, 0xffff, 0x5, 0x1, 0x40, 0x4, 0x8, 0x0, 0x7ff, 0x6, 0xa, 0xffffffff, 0x8000, 0x7, 0x7, 0x80000001, 0x7, 0x401, 0x0, 0xffe6, 0x80000001, 0x46a0f7f7, 0x169, 0x1, 0xfffffff9, 0x6, 0x8, 0x5c, 0x0, 0x7fff, 0x1, 0x1, 0x2, 0x29, 0x0, 0x9, 0x7f, 0x0, 0x4, 0x2, 0x7f, 0x4, 0x3, 0x4, 0x9, 0x5, 0x10, 0xd, 0x1, 0x7, 0x1, 0x7, 0x7, 0x0, 0xff, 0x6, 0x8000, 0x10000, 0x5, 0x0, 0x8, 0x3, 0x0, 0xa, 0x7, 0x4, 0xd1f5, 0x0, 0x2, 0x8, 0x7fffffff, 0x7, 0x9, 0x8, 0x5, 0x1, 0x5, 0x9, 0x8, 0x1c000, 0xfc, 0x2, 0x4, 0xfffffe01, 0x5, 0x8, 0x1000, 0x6, 0x9, 0x7, 0x4, 0xfffffff9, 0x0, 0x47a, 0x3, 0x5, 0x6038, 0x7f, 0x7fa, 0x1, 0x7, 0x6, 0x7, 0x4, 0x3492, 0x8, 0x7, 0x4a, 0xffffffff, 0x7fffffff, 0x326, 0x6, 0xa06f, 0x1, 0x3, 0xfff, 0x4, 0x1ff, 0x7, 0x0, 0x10000]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffe00}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xfffffc01, 0x7, 0x6, 0x3, 0x3780, 0x401, 0x8, 0x5, 0xd, 0x7, 0x7088, 0xff, 0x2, 0x6e, 0x1ff, 0x8, 0x0, 0x8, 0x64, 0x0, 0x2, 0x723, 0x5, 0x1020, 0x7, 0x4, 0x5, 0x9, 0x2, 0x7, 0x80000001, 0x39b, 0x4, 0x3, 0x0, 0x5, 0x3, 0x200, 0x7, 0x0, 0x4, 0x5, 0x4, 0x4, 0x408e, 0x0, 0x200, 0x4, 0x7e5, 0x8001, 0x7ff, 0x4, 0x7fff, 0x70a, 0xad0, 0x0, 0x8, 0xffffffff, 0x8000, 0xfffffff9, 0x1, 0x101, 0x81, 0xffffffff, 0x7, 0x3, 0x8, 0x0, 0x2, 0x31f, 0x0, 0x6, 0xc3e, 0x7fff, 0x1, 0x1ff, 0x8, 0x3, 0x7, 0xf0000000, 0x3, 0x6, 0x9, 0x1, 0x6, 0xb93, 0x0, 0x2, 0x793eddda, 0x74, 0x4408, 0xc, 0xa4, 0xffffffff, 0x80000000, 0x7, 0xffffff00, 0x5, 0x400, 0xf, 0x40, 0x7, 0x5, 0x3, 0x7f, 0x8, 0x6, 0x4, 0x0, 0x0, 0x4, 0x10000, 0xaae, 0x2, 0x5, 0x9, 0x9, 0x7, 0x5, 0x5b94, 0xb, 0xb05, 0x8, 0xfffffffc, 0x8001, 0x6, 0x9, 0x7ff, 0x8, 0x7, 0x5, 0x5, 0x5, 0xfffffffc, 0x71c2, 0x27, 0x8, 0x5, 0x9327, 0x7, 0x8, 0x7fffffff, 0x7, 0xd33b, 0x4, 0x9, 0xc2e4, 0xffffffff, 0xb87, 0xfffffffb, 0x2, 0x6, 0xa, 0x10000, 0xffffff26, 0x9, 0x9, 0x6, 0x3, 0x3ff, 0xfffffffa, 0x7fff, 0x7, 0xf75e0000, 0x7, 0xb429, 0x2, 0x9, 0x41e, 0x80000001, 0x400, 0x5, 0xfffffffc, 0x81, 0x1, 0x40, 0x7, 0x81, 0x1, 0x1, 0x0, 0x6, 0x7, 0xffffffff, 0x7727, 0x1, 0x1c000, 0x98, 0x3, 0x4, 0x7fff, 0x3, 0x7, 0x7ff, 0x9, 0xffffff01, 0x6, 0x4, 0x26, 0x4, 0x1, 0x101, 0x6, 0x1ff, 0x0, 0x6, 0x8, 0x8, 0x80000001, 0x3, 0x1, 0x1, 0x0, 0xf, 0x8, 0xb, 0x6, 0x9e, 0x1, 0x400, 0x9, 0x5, 0x10001, 0x6, 0xff, 0x7, 0x0, 0x9, 0x80000001, 0x8, 0x101, 0x9, 0x200, 0x2, 0x3, 0xfffffb18, 0x9, 0x5, 0x4000, 0x9, 0x8, 0x7, 0x3, 0x1, 0x6454, 0x4, 0x4, 0xffffb0ec, 0xa, 0x27, 0x0, 0x8, 0x7, 0x2f0, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x4, 0x4, 0x10000, 0x1, 0xffff3599, 0x3, 0x7, 0xf7e, 0x7, 0x2, 0xfffffffe, 0x8001, 0x9, 0x10001, 0x8, 0x4, 0x0, 0xe6, 0xd55, 0x6, 0x7, 0xeb, 0x4, 0x0, 0x80000001, 0xe175, 0x5, 0x8, 0x3, 0x1000, 0x5, 0x5, 0x8001, 0x0, 0x10001, 0x4, 0x8, 0x1, 0x3, 0x5, 0x200, 0x2, 0x4, 0xfffffff8, 0x2000000, 0x40, 0x7, 0x6, 0x800, 0x0, 0x2, 0x5, 0x0, 0x7, 0x7, 0x6, 0x3, 0x90, 0xe, 0x3, 0x3, 0xa, 0x9, 0x0, 0x101, 0x7, 0x3, 0xe, 0x5, 0x8001, 0xfffffffb, 0x6, 0x4, 0x4, 0x83a00000, 0x8, 0x5, 0x3, 0x9, 0x10001, 0x10001, 0x0, 0x4, 0xb, 0x3, 0x5, 0x8, 0xffff, 0x200, 0x80000000, 0x3, 0xffff, 0xffff, 0x39, 0x9, 0x1, 0x5, 0x0, 0x4, 0xb80a, 0xffffff7f, 0x3, 0xffffffff, 0x0, 0x3, 0x5, 0x9, 0x82fe, 0x9, 0x3, 0xd6, 0x1, 0x1, 0x9, 0x1a4, 0x0, 0x6, 0x2, 0x100000, 0xc, 0x40, 0xe112, 0x2, 0x2ee, 0x6, 0xffffe363, 0xc33, 0xd8ac, 0xa, 0x0, 0x7, 0x32, 0x200, 0x8, 0x2e99, 0x3, 0x8, 0x8, 0x8, 0xffff0000, 0x7, 0x2, 0xc255, 0x7fffffff, 0x7ff, 0xf, 0x81, 0x4, 0x2e4, 0x6, 0x0, 0x3, 0x1, 0x4fd, 0x200, 0x1, 0x8, 0x1ff, 0x2, 0x5dca, 0x0, 0x8, 0x1, 0x8, 0x80000000, 0x5, 0x5, 0x2, 0x1, 0x1, 0xffffffff, 0x101, 0x101, 0x7fffffff, 0x4, 0x6, 0x9, 0x7, 0xd267, 0x914, 0x0, 0x7, 0x1, 0x3, 0xf5, 0x1c00, 0x800, 0x1, 0xfffeffff, 0x3, 0x22, 0x0, 0x1, 0xe, 0x101, 0xb, 0xffff00, 0x6, 0x4, 0x2000000, 0x4, 0x4, 0x0, 0x6, 0x5, 0x8000, 0x401, 0xd6, 0x1000, 0x9, 0x5, 0x3, 0x3, 0x4, 0x10000, 0x0, 0x1a0e, 0x8b, 0x1ff, 0x80, 0x6, 0x80000000, 0xc, 0x6, 0x6, 0x0, 0x5, 0x5, 0xcb0, 0x7, 0x4, 0x7fff, 0xcc02, 0x7, 0x10, 0x7, 0x2, 0x0, 0x3, 0x8, 0x2c, 0x1, 0x8, 0x8, 0x10001, 0x10000, 0x0, 0x1, 0xd48, 0x6, 0x5, 0x80000001, 0x431, 0x3, 0x10001]}]}, @TCA_BASIC_POLICE={0x10, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}]}]}}]}, 0xd28}, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000001a00), 0x1, 0x0) connect$bt_l2cap(r9, &(0x7f0000001a40)={0x1f, 0xf188, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2206, 0x4}, 0xe) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001ac0), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r10, 0xd8455239d7058510, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8085) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000001bc0)=0x0) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000001c00)=r11) ioctl$BTRFS_IOC_RM_DEV(r8, 0x5000940b, &(0x7f0000001c40)={{r7}, "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"}) 15.880488189s ago: executing program 2 (id=1626): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001940)={0x18, 0x42, 0x107, 0xfffffffe, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x146}]}, 0x18}, 0x1, 0x0, 0x0, 0x20048808}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r8}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r8, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x401}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x3}]}]}]}}]}, 0x5c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x421, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x63, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080) 4.1157108s ago: executing program 32 (id=1601): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0xb}, 0x60) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1e, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="8500000089000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1}, 0x94) listen(r0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000000}, @ethernet={0x1, @remote}, @ethernet={0x6, @remote}, 0x3, 0x0, 0x0, 0x0, 0x7fff, &(0x7f0000000040)='veth0_to_hsr\x00', 0x97b3, 0x0, 0xfff}) close(r1) 1.090781192s ago: executing program 33 (id=1620): bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x7a) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) close(0x4) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r3, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) r4 = socket(0xa, 0x1, 0x0) socketpair(0xa, 0x4, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x150, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0"], 0xffd8}}, 0x4000000) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000180)={'nat\x00', 0x0, [0x0, 0x8, 0x7ff, 0x3, 0x9]}, &(0x7f0000000400)=0x54) unshare(0x26020480) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r8}, 0x8) ioctl$SIOCGETVIFCNT(r5, 0x89e0, &(0x7f0000000040)={0x1}) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f00000010c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x6, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 1.060870705s ago: executing program 34 (id=1622): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_delroute={0x1c, 0x19, 0xc0a, 0x70bd27, 0x25dfdbfc, {0x2, 0x14, 0x0, 0x5, 0x0, 0x4, 0xc8, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004005}, 0x40) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r3, 0x400, 0x0, 0x25dfdbfd, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) 33.569019ms ago: executing program 35 (id=1625): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x1, 0x1, 0x1, 0x1}, 0x31, 0x1, 0x0, 0x0, "6dea2d6128d19f0c60dbd729185e27366288ee1a761e5f6d3b33b7b1f61e877e3aaca3836a18d8345758fb999b88f80f798512d9f0fa49f0c00497cb06a56cac"}, 0x48}, 0x1, 0x0, 0x0, 0x20008880}, 0x8001) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, @can={0x1d, 0x0}, @nfc={0x27, r2, 0xffffffffffffffff, 0x7}, @phonet={0x23, 0xd, 0x4, 0x3}, 0x7, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)='veth1_to_batadv\x00', 0x7, 0x1, 0xbce9}) r4 = socket$netlink(0x10, 0x3, 0x13) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x3d0e, 0x7fffffff, 0xad8, 0x10, 0xffffffffffffffff, 0x7, '\x00', r1, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0xa}, 0x50) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000300)=""/252, &(0x7f0000000400)=0xfc) connect(r4, &(0x7f0000000440)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}]}, 0x58}}, 0x800) getsockname(r4, &(0x7f0000000600)=@l2tp6, &(0x7f0000000680)=0x80) syz_emit_ethernet(0x56, &(0x7f00000006c0)={@random="8b7fea84c205", @remote, @void, {@canfd={0xd, {{0x88e, 0x1, 0x1, 0x1}, 0x18, 0x2, 0x0, 0x0, "1db9627f8b21fea2da4204cd444a4b615e17ac799c9a6bdc9500eb9a94ff61f2b66cf55747a7045c3f3a62dbd838f3dce1f0a304431126b6ce0597aa2285c1d8"}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000740)={0x11}) sendmsg$nl_route_sched(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=@gettaction={0x64, 0x32, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x10040}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x27ff}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4801}, 0x4000800) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f00000008c0), &(0x7f0000000900)=0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r7, &(0x7f0000000940)="ef704226e126eeb2449bb39a015ea7878d247137cc4327a70e86df6f23201132424ef9507ade6642ee1b3ad06b7639ad02dfb848b1dc2352289de36b1e06eae2dcae04983718a90960b0c8c3d22e8092f93af1825d684a2d03910eec260b9e409caccd68d2d656744e71a86409340031e92693c3bb7ba36548021b291918c53be0140fd2a31aefdd2bffbe40f36d243c8d7a97fc1b41", 0x96, 0x20000011, &(0x7f0000000a00)={0xa, 0x4e23, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c) r8 = socket$inet(0x2, 0x3, 0x3) r9 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000a40), 0x800) ppoll(&(0x7f0000000a80)=[{r6}, {0xffffffffffffffff, 0x1}, {r7, 0x21c0}, {r6, 0x10}, {r4, 0x2044}, {r8, 0x8008}, {r5, 0x141}, {r4, 0x82}, {r9, 0x10}, {r0, 0xa0}], 0xa, &(0x7f0000000b00)={0x0, 0x3938700}, &(0x7f0000000b40)={[0xde2]}, 0x8) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000000b80)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @remote, 0x7f, 0x9, 0xff, 0x100, 0x5, 0x6240380, r3}) sendmsg$nl_route_sched(r4, &(0x7f00000019c0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001980)={&(0x7f0000000c40)=@delchain={0xd28, 0x65, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0xb}, {0x10, 0xf}, {0x5, 0x34295841c1bc999b}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xbe}}, @TCA_CHAIN={0x8, 0xb, 0xac12}, @filter_kind_options=@f_basic={{0xa}, {0xce8, 0x2, [@TCA_BASIC_POLICE={0x7c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x100, 0xffffffffffffffff, 0x9, 0x12, 0x0, {0x4, 0x2, 0x3, 0xde, 0x8}, {0x2, 0x0, 0x3, 0x0, 0x1, 0xf99}, 0x9, 0x1ff, 0x7}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x89, 0x40, 0x8000, {0x10, 0x2, 0xaae, 0x3, 0xd659, 0xffff}, {0x6, 0x0, 0x17, 0x9, 0x0, 0x7f}, 0x8, 0x3, 0x8}}]}, @TCA_BASIC_POLICE={0xc58, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0xd9f1, 0x10000000, 0x4, 0x9337, 0x3, {0x6, 0x0, 0x5, 0x7, 0x3, 0xf4}, {0x6, 0x1, 0xb2, 0xfc22, 0x400, 0x972c}, 0x0, 0x4, 0xffff}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x1, 0x8001, 0x5, 0x3, 0xffffff5d, 0x6, 0x2, 0xffffffff, 0x0, 0xff, 0x6, 0x8, 0x5, 0x24000, 0x5eb0c229, 0x8001, 0x5, 0x7, 0x199, 0x2, 0x8, 0x8000, 0x7, 0x0, 0xd5b, 0x7123, 0x9365, 0x253e, 0x4, 0x6, 0x7, 0x5, 0x3, 0x588, 0x4, 0xa51, 0x64b87a2, 0x0, 0x3, 0x0, 0x871d, 0x6, 0xfffffff5, 0x4, 0x6, 0x0, 0x6, 0x101, 0x6, 0x5, 0xfffffffa, 0x1, 0xb, 0xff, 0x7ff, 0x7245, 0x80000001, 0x5, 0xa, 0x4fed, 0x653, 0x4, 0x2, 0xed7e, 0x8, 0x100, 0x0, 0x9, 0x3ff, 0x80, 0x1000, 0x5, 0xbd10, 0x6, 0x37, 0xb20, 0x8, 0xc, 0x2, 0x7, 0x8000, 0x4, 0x7f, 0xa, 0x7fffffff, 0xffffffff, 0x6, 0x5, 0x69ff, 0x7ff, 0x8, 0x4, 0x1, 0x1000, 0x0, 0x0, 0x9, 0x10000, 0x7, 0xe47e, 0x400, 0xbfe, 0x1, 0x3, 0x2, 0x2, 0x8, 0x6, 0x3, 0x2, 0x2b35, 0x101, 0x248c451d, 0x0, 0x5, 0x5, 0x80000001, 0x81, 0x4, 0x2, 0x200, 0x6421, 0x0, 0x2a1, 0xd, 0x0, 0x401, 0x80000000, 0x6, 0x4, 0x81, 0x6, 0x2, 0x8001, 0x3, 0xffff, 0x5, 0x1, 0x40, 0x4, 0x8, 0x0, 0x7ff, 0x6, 0xa, 0xffffffff, 0x8000, 0x7, 0x7, 0x80000001, 0x7, 0x401, 0x0, 0xffe6, 0x80000001, 0x46a0f7f7, 0x169, 0x1, 0xfffffff9, 0x6, 0x8, 0x5c, 0x0, 0x7fff, 0x1, 0x1, 0x2, 0x29, 0x0, 0x9, 0x7f, 0x0, 0x4, 0x2, 0x7f, 0x4, 0x3, 0x4, 0x9, 0x5, 0x10, 0xd, 0x1, 0x7, 0x1, 0x7, 0x7, 0x0, 0xff, 0x6, 0x8000, 0x10000, 0x5, 0x0, 0x8, 0x3, 0x0, 0xa, 0x7, 0x4, 0xd1f5, 0x0, 0x2, 0x8, 0x7fffffff, 0x7, 0x9, 0x8, 0x5, 0x1, 0x5, 0x9, 0x8, 0x1c000, 0xfc, 0x2, 0x4, 0xfffffe01, 0x5, 0x8, 0x1000, 0x6, 0x9, 0x7, 0x4, 0xfffffff9, 0x0, 0x47a, 0x3, 0x5, 0x6038, 0x7f, 0x7fa, 0x1, 0x7, 0x6, 0x7, 0x4, 0x3492, 0x8, 0x7, 0x4a, 0xffffffff, 0x7fffffff, 0x326, 0x6, 0xa06f, 0x1, 0x3, 0xfff, 0x4, 0x1ff, 0x7, 0x0, 0x10000]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffe00}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xfffffc01, 0x7, 0x6, 0x3, 0x3780, 0x401, 0x8, 0x5, 0xd, 0x7, 0x7088, 0xff, 0x2, 0x6e, 0x1ff, 0x8, 0x0, 0x8, 0x64, 0x0, 0x2, 0x723, 0x5, 0x1020, 0x7, 0x4, 0x5, 0x9, 0x2, 0x7, 0x80000001, 0x39b, 0x4, 0x3, 0x0, 0x5, 0x3, 0x200, 0x7, 0x0, 0x4, 0x5, 0x4, 0x4, 0x408e, 0x0, 0x200, 0x4, 0x7e5, 0x8001, 0x7ff, 0x4, 0x7fff, 0x70a, 0xad0, 0x0, 0x8, 0xffffffff, 0x8000, 0xfffffff9, 0x1, 0x101, 0x81, 0xffffffff, 0x7, 0x3, 0x8, 0x0, 0x2, 0x31f, 0x0, 0x6, 0xc3e, 0x7fff, 0x1, 0x1ff, 0x8, 0x3, 0x7, 0xf0000000, 0x3, 0x6, 0x9, 0x1, 0x6, 0xb93, 0x0, 0x2, 0x793eddda, 0x74, 0x4408, 0xc, 0xa4, 0xffffffff, 0x80000000, 0x7, 0xffffff00, 0x5, 0x400, 0xf, 0x40, 0x7, 0x5, 0x3, 0x7f, 0x8, 0x6, 0x4, 0x0, 0x0, 0x4, 0x10000, 0xaae, 0x2, 0x5, 0x9, 0x9, 0x7, 0x5, 0x5b94, 0xb, 0xb05, 0x8, 0xfffffffc, 0x8001, 0x6, 0x9, 0x7ff, 0x8, 0x7, 0x5, 0x5, 0x5, 0xfffffffc, 0x71c2, 0x27, 0x8, 0x5, 0x9327, 0x7, 0x8, 0x7fffffff, 0x7, 0xd33b, 0x4, 0x9, 0xc2e4, 0xffffffff, 0xb87, 0xfffffffb, 0x2, 0x6, 0xa, 0x10000, 0xffffff26, 0x9, 0x9, 0x6, 0x3, 0x3ff, 0xfffffffa, 0x7fff, 0x7, 0xf75e0000, 0x7, 0xb429, 0x2, 0x9, 0x41e, 0x80000001, 0x400, 0x5, 0xfffffffc, 0x81, 0x1, 0x40, 0x7, 0x81, 0x1, 0x1, 0x0, 0x6, 0x7, 0xffffffff, 0x7727, 0x1, 0x1c000, 0x98, 0x3, 0x4, 0x7fff, 0x3, 0x7, 0x7ff, 0x9, 0xffffff01, 0x6, 0x4, 0x26, 0x4, 0x1, 0x101, 0x6, 0x1ff, 0x0, 0x6, 0x8, 0x8, 0x80000001, 0x3, 0x1, 0x1, 0x0, 0xf, 0x8, 0xb, 0x6, 0x9e, 0x1, 0x400, 0x9, 0x5, 0x10001, 0x6, 0xff, 0x7, 0x0, 0x9, 0x80000001, 0x8, 0x101, 0x9, 0x200, 0x2, 0x3, 0xfffffb18, 0x9, 0x5, 0x4000, 0x9, 0x8, 0x7, 0x3, 0x1, 0x6454, 0x4, 0x4, 0xffffb0ec, 0xa, 0x27, 0x0, 0x8, 0x7, 0x2f0, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x4, 0x4, 0x10000, 0x1, 0xffff3599, 0x3, 0x7, 0xf7e, 0x7, 0x2, 0xfffffffe, 0x8001, 0x9, 0x10001, 0x8, 0x4, 0x0, 0xe6, 0xd55, 0x6, 0x7, 0xeb, 0x4, 0x0, 0x80000001, 0xe175, 0x5, 0x8, 0x3, 0x1000, 0x5, 0x5, 0x8001, 0x0, 0x10001, 0x4, 0x8, 0x1, 0x3, 0x5, 0x200, 0x2, 0x4, 0xfffffff8, 0x2000000, 0x40, 0x7, 0x6, 0x800, 0x0, 0x2, 0x5, 0x0, 0x7, 0x7, 0x6, 0x3, 0x90, 0xe, 0x3, 0x3, 0xa, 0x9, 0x0, 0x101, 0x7, 0x3, 0xe, 0x5, 0x8001, 0xfffffffb, 0x6, 0x4, 0x4, 0x83a00000, 0x8, 0x5, 0x3, 0x9, 0x10001, 0x10001, 0x0, 0x4, 0xb, 0x3, 0x5, 0x8, 0xffff, 0x200, 0x80000000, 0x3, 0xffff, 0xffff, 0x39, 0x9, 0x1, 0x5, 0x0, 0x4, 0xb80a, 0xffffff7f, 0x3, 0xffffffff, 0x0, 0x3, 0x5, 0x9, 0x82fe, 0x9, 0x3, 0xd6, 0x1, 0x1, 0x9, 0x1a4, 0x0, 0x6, 0x2, 0x100000, 0xc, 0x40, 0xe112, 0x2, 0x2ee, 0x6, 0xffffe363, 0xc33, 0xd8ac, 0xa, 0x0, 0x7, 0x32, 0x200, 0x8, 0x2e99, 0x3, 0x8, 0x8, 0x8, 0xffff0000, 0x7, 0x2, 0xc255, 0x7fffffff, 0x7ff, 0xf, 0x81, 0x4, 0x2e4, 0x6, 0x0, 0x3, 0x1, 0x4fd, 0x200, 0x1, 0x8, 0x1ff, 0x2, 0x5dca, 0x0, 0x8, 0x1, 0x8, 0x80000000, 0x5, 0x5, 0x2, 0x1, 0x1, 0xffffffff, 0x101, 0x101, 0x7fffffff, 0x4, 0x6, 0x9, 0x7, 0xd267, 0x914, 0x0, 0x7, 0x1, 0x3, 0xf5, 0x1c00, 0x800, 0x1, 0xfffeffff, 0x3, 0x22, 0x0, 0x1, 0xe, 0x101, 0xb, 0xffff00, 0x6, 0x4, 0x2000000, 0x4, 0x4, 0x0, 0x6, 0x5, 0x8000, 0x401, 0xd6, 0x1000, 0x9, 0x5, 0x3, 0x3, 0x4, 0x10000, 0x0, 0x1a0e, 0x8b, 0x1ff, 0x80, 0x6, 0x80000000, 0xc, 0x6, 0x6, 0x0, 0x5, 0x5, 0xcb0, 0x7, 0x4, 0x7fff, 0xcc02, 0x7, 0x10, 0x7, 0x2, 0x0, 0x3, 0x8, 0x2c, 0x1, 0x8, 0x8, 0x10001, 0x10000, 0x0, 0x1, 0xd48, 0x6, 0x5, 0x80000001, 0x431, 0x3, 0x10001]}]}, @TCA_BASIC_POLICE={0x10, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}]}]}}]}, 0xd28}, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000001a00), 0x1, 0x0) connect$bt_l2cap(r9, &(0x7f0000001a40)={0x1f, 0xf188, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2206, 0x4}, 0xe) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001ac0), r4) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r10, 0xd8455239d7058510, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8085) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000001bc0)=0x0) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000001c00)=r11) ioctl$BTRFS_IOC_RM_DEV(r8, 0x5000940b, &(0x7f0000001c40)={{r7}, "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"}) 0s ago: executing program 36 (id=1626): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001940)={0x18, 0x42, 0x107, 0xfffffffe, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x146}]}, 0x18}, 0x1, 0x0, 0x0, 0x20048808}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r8}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r8, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x401}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x3}]}]}]}}]}, 0x5c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x421, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x63, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080) kernel console output (not intermixed with test programs): 3.796769][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.803730][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.829790][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.853411][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.860455][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.886694][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.910816][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.918121][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.944443][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.956506][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.963775][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.989764][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.002129][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.009855][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.036101][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.060822][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.067982][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.094802][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.282347][ T5829] hsr_slave_0: entered promiscuous mode [ 74.289098][ T5829] hsr_slave_1: entered promiscuous mode [ 74.295155][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 74.300961][ T5829] Cannot create hsr debugfs directory [ 74.310332][ T5834] hsr_slave_0: entered promiscuous mode [ 74.317173][ T5834] hsr_slave_1: entered promiscuous mode [ 74.323223][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 74.329043][ T5834] Cannot create hsr debugfs directory [ 74.339439][ T5831] hsr_slave_0: entered promiscuous mode [ 74.345675][ T5831] hsr_slave_1: entered promiscuous mode [ 74.351901][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 74.357844][ T5831] Cannot create hsr debugfs directory [ 74.777128][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.803048][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.830278][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.841150][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.912674][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.923712][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.936431][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.954643][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.050342][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.061960][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.072522][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.082600][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.191276][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.201923][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.212646][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.223114][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.260931][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.328541][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.358521][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.365734][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.389006][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.403031][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.410164][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.421061][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.436240][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.456342][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.476536][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.521121][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.565012][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.572315][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.606146][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.613308][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.620902][ T5838] Bluetooth: hci1: command tx timeout [ 75.662820][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.687593][ T5838] Bluetooth: hci0: command tx timeout [ 75.687770][ T51] Bluetooth: hci4: command tx timeout [ 75.699155][ T5848] Bluetooth: hci3: command tx timeout [ 75.720497][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.750371][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.767276][ T51] Bluetooth: hci2: command tx timeout [ 75.775764][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.782966][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.807366][ T3437] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.814486][ T3437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.902990][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.959646][ T4974] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.966842][ T4974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.990178][ T4974] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.997356][ T4974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.052401][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.122608][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.141974][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.169703][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.176867][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.262665][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.270092][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.373791][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.481524][ T5827] veth0_vlan: entered promiscuous mode [ 76.541507][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.555639][ T5827] veth1_vlan: entered promiscuous mode [ 76.644512][ T5828] veth0_vlan: entered promiscuous mode [ 76.702967][ T5828] veth1_vlan: entered promiscuous mode [ 76.732912][ T5827] veth0_macvtap: entered promiscuous mode [ 76.765096][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.776360][ T5831] veth0_vlan: entered promiscuous mode [ 76.786019][ T5827] veth1_macvtap: entered promiscuous mode [ 76.833974][ T5831] veth1_vlan: entered promiscuous mode [ 76.862491][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.902350][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.912044][ T5828] veth0_macvtap: entered promiscuous mode [ 76.928793][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.947834][ T5828] veth1_macvtap: entered promiscuous mode [ 76.986392][ T1310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.008581][ T1310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.023033][ T1310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.042514][ T1310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.071455][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.100984][ T5831] veth0_macvtap: entered promiscuous mode [ 77.158380][ T5831] veth1_macvtap: entered promiscuous mode [ 77.178873][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.201820][ T5829] veth0_vlan: entered promiscuous mode [ 77.239871][ T4974] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.248752][ T4974] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.264900][ T4974] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.277665][ T5829] veth1_vlan: entered promiscuous mode [ 77.284194][ T4974] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.304112][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.313261][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.322643][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.382465][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.421401][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.433212][ T4974] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.442652][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.462643][ T4974] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.481068][ T3484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.496034][ T3484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.510301][ T4974] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.523119][ T4974] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.543545][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.625049][ T5834] veth0_vlan: entered promiscuous mode [ 77.648981][ T4974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.666062][ T4974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.681292][ T5829] veth0_macvtap: entered promiscuous mode [ 77.687576][ T51] Bluetooth: hci1: command tx timeout [ 77.717182][ T5834] veth1_vlan: entered promiscuous mode [ 77.734284][ T5829] veth1_macvtap: entered promiscuous mode [ 77.769141][ T5848] Bluetooth: hci3: command tx timeout [ 77.769186][ T5838] Bluetooth: hci0: command tx timeout [ 77.774900][ T51] Bluetooth: hci4: command tx timeout [ 77.847568][ T51] Bluetooth: hci2: command tx timeout [ 77.925886][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.972017][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.000272][ T3484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.018996][ T3484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.044476][ T5834] veth0_macvtap: entered promiscuous mode [ 78.063870][ T1310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.078866][ T1310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.130556][ T5959] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 78.153581][ T1310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.180723][ T5834] veth1_macvtap: entered promiscuous mode [ 78.196564][ T1310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.197432][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.247789][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.293594][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.345221][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.390308][ T3518] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.403114][ T3518] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.426029][ T3518] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.456256][ T3518] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.518680][ T5969] netlink: 'syz.2.3': attribute type 58 has an invalid length. [ 78.535814][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.547017][ T5969] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3'. [ 78.562209][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.709919][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.735379][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.770662][ T5975] syz.1.11 uses obsolete (PF_INET,SOCK_PACKET) [ 78.845168][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.876205][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.960062][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.981577][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.137444][ T5987] netlink: 'syz.0.1': attribute type 23 has an invalid length. [ 79.713540][ T5995] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) ! [ 79.750384][ T5993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 79.767253][ T51] Bluetooth: hci1: command tx timeout [ 79.794275][ T6005] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) ! [ 79.838565][ T6005] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) ! [ 79.846803][ T51] Bluetooth: hci4: command tx timeout [ 79.847245][ T5838] Bluetooth: hci3: command tx timeout [ 79.852244][ T5848] Bluetooth: hci0: command tx timeout [ 79.926865][ T5848] Bluetooth: hci2: command tx timeout [ 79.937971][ T6014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17'. [ 79.978051][ T6008] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) ! [ 80.023550][ T5995] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) ! [ 80.079335][ T6008] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) ! [ 80.299703][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'. [ 80.426393][ T6035] warning: `syz.3.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.763769][ T6050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28'. [ 80.818434][ T6050] netlink: 'syz.4.28': attribute type 21 has an invalid length. [ 80.839935][ T6050] netlink: 36 bytes leftover after parsing attributes in process `syz.4.28'. [ 81.080027][ T6066] netlink: 'syz.3.30': attribute type 1 has an invalid length. [ 81.562942][ T6074] netlink: 32 bytes leftover after parsing attributes in process `syz.2.32'. [ 82.114784][ T6058] netlink: 'syz.4.28': attribute type 5 has an invalid length. [ 82.122470][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28'. [ 82.145592][ T6072] batadv1: entered promiscuous mode [ 82.280275][ T6078] Zero length message leads to an empty skb [ 82.330391][ T6081] netlink: 'syz.3.34': attribute type 10 has an invalid length. [ 82.411521][ T6086] netlink: 'syz.3.34': attribute type 12 has an invalid length. [ 82.461855][ T6081] bridge0: port 3(macsec0) entered blocking state [ 82.472075][ T6081] bridge0: port 3(macsec0) entered disabled state [ 82.489710][ T6081] macsec0: entered allmulticast mode [ 82.496998][ T6081] veth1_macvtap: entered allmulticast mode [ 82.526587][ T6081] macsec0: entered promiscuous mode [ 82.545046][ T6081] bridge0: port 3(macsec0) entered blocking state [ 82.551817][ T6081] bridge0: port 3(macsec0) entered forwarding state [ 82.941296][ T6097] tipc: Started in network mode [ 82.946373][ T6097] tipc: Node identity 2e59d5b7d5e5, cluster identity 4711 [ 82.987368][ T6097] tipc: Enabled bearer , priority 0 [ 82.998139][ T6100] syzkaller0: entered promiscuous mode [ 83.003650][ T6100] syzkaller0: entered allmulticast mode [ 83.056894][ T6097] tipc: Resetting bearer [ 83.074198][ T6099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'. [ 83.074791][ T6097] netlink: 52 bytes leftover after parsing attributes in process `syz.2.40'. [ 83.197676][ T6096] tipc: Resetting bearer [ 83.219812][ T6096] tipc: Disabling bearer [ 83.438049][ T6108] ieee802154 phy0 wpan0: encryption failed: -22 [ 83.539838][ T6108] netlink: 'syz.2.43': attribute type 32 has an invalid length. [ 83.558926][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'. [ 83.689992][ T6108] bond1: Setting coupled_control to off (0) [ 83.794435][ T6125] netlink: 'syz.1.45': attribute type 54 has an invalid length. [ 83.877424][ T6131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.49'. [ 84.096485][ T6149] sctp: [Deprecated]: syz.2.52 (pid 6149) Use of struct sctp_assoc_value in delayed_ack socket option. [ 84.096485][ T6149] Use struct sctp_sack_info instead [ 84.122614][ T6149] sctp: [Deprecated]: syz.2.52 (pid 6149) Use of struct sctp_assoc_value in delayed_ack socket option. [ 84.122614][ T6149] Use struct sctp_sack_info instead [ 84.154008][ T6150] tipc: Started in network mode [ 84.159987][ T6150] tipc: Node identity 1ab028cf0e6f, cluster identity 4711 [ 84.171587][ T6150] tipc: Enabled bearer , priority 0 [ 84.218996][ T6145] syzkaller0: entered promiscuous mode [ 84.224513][ T6145] syzkaller0: entered allmulticast mode [ 84.302482][ T6145] tipc: Resetting bearer [ 84.406388][ T6160] bridge0: entered promiscuous mode [ 84.408290][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.53'. [ 84.415583][ T6160] macsec1: entered promiscuous mode [ 84.433141][ T6144] tipc: Resetting bearer [ 84.515275][ T6144] tipc: Disabling bearer [ 84.541937][ T6161] netlink: 48 bytes leftover after parsing attributes in process `syz.2.54'. [ 84.772130][ T6174] netlink: 16 bytes leftover after parsing attributes in process `syz.3.60'. [ 85.083786][ T6183] syzkaller0: entered promiscuous mode [ 85.110091][ T6183] syzkaller0: entered allmulticast mode [ 85.135225][ T3741] syzkaller0: tun_net_xmit 48 [ 85.151025][ T6192] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 85.309562][ T6199] netlink: 36 bytes leftover after parsing attributes in process `syz.4.67'. [ 86.048586][ T6189] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 86.293060][ T6215] netlink: 'syz.0.72': attribute type 3 has an invalid length. [ 86.334673][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.73'. [ 86.483163][ T6235] netlink: 132 bytes leftover after parsing attributes in process `syz.4.76'. [ 86.568490][ T6241] netlink: 'syz.4.76': attribute type 3 has an invalid length. [ 86.677390][ T6245] netlink: 112 bytes leftover after parsing attributes in process `syz.2.77'. [ 86.710117][ T6247] netlink: 9 bytes leftover after parsing attributes in process `syz.1.78'. [ 86.736931][ T6247] .70·: renamed from hsr0 (while UP) [ 86.770862][ T6247] .70·: entered allmulticast mode [ 86.776478][ T6247] hsr_slave_0: entered allmulticast mode [ 86.827959][ T107] cfg80211: failed to load regulatory.db [ 86.834120][ T6247] hsr_slave_1: entered allmulticast mode [ 86.848037][ T6247] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 86.894703][ T6255] veth0: entered promiscuous mode [ 87.040792][ T6266] netlink: 'syz.0.80': attribute type 10 has an invalid length. [ 87.062501][ T6250] netlink: 'syz.3.79': attribute type 16 has an invalid length. [ 87.084035][ T6250] netlink: 'syz.3.79': attribute type 17 has an invalid length. [ 87.141247][ T6266] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 87.266541][ T6250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 87.302907][ T6273] netlink: 'syz.2.84': attribute type 10 has an invalid length. [ 87.398116][ T6273] batman_adv: batadv0: Adding interface: netdevsim0 [ 87.404890][ T6273] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.432012][ T6273] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 87.609069][ T6255] veth0: left promiscuous mode [ 87.936144][ T6294] gre0: entered promiscuous mode [ 88.031586][ T6298] gre0: left promiscuous mode [ 88.212185][ T6303] ip6_vti0 speed is unknown, defaulting to 1000 [ 88.281207][ T6303] ip6_vti0 speed is unknown, defaulting to 1000 [ 88.354573][ T6303] ip6_vti0 speed is unknown, defaulting to 1000 [ 88.571695][ T6339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.601849][ T6318] syz.4.92 (6318) used greatest stack depth: 16680 bytes left [ 88.807845][ T6345] netlink: 'syz.4.99': attribute type 1 has an invalid length. [ 88.947784][ T6351] netlink: 'syz.3.101': attribute type 33 has an invalid length. [ 88.955561][ T6351] __nla_validate_parse: 3 callbacks suppressed [ 88.955576][ T6351] netlink: 152 bytes leftover after parsing attributes in process `syz.3.101'. [ 88.978778][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'. [ 89.028524][ T6351] `: renamed from team0 (while UP) [ 89.066374][ T6303] infiniband syz2: set down [ 89.084405][ T6303] infiniband syz2: added ip6_vti0 [ 89.125682][ T6303] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 89.131214][ T5942] ip6_vti0 speed is unknown, defaulting to 1000 [ 89.149640][ T6303] infiniband syz2: Couldn't open port 1 [ 89.219154][ T6358] netlink: 'syz.0.102': attribute type 4 has an invalid length. [ 89.245861][ T6303] RDS/IB: syz2: added [ 89.255512][ T6303] smc: adding ib device syz2 with port count 1 [ 89.267490][ T6303] smc: ib device syz2 port 1 has no pnetid [ 89.275678][ T5942] ip6_vti0 speed is unknown, defaulting to 1000 [ 89.296916][ T6303] ip6_vti0 speed is unknown, defaulting to 1000 [ 89.347396][ T6363] netlink: 'syz.3.103': attribute type 23 has an invalid length. [ 89.976867][ T6303] ip6_vti0 speed is unknown, defaulting to 1000 [ 90.067213][ T6393] syzkaller1: entered promiscuous mode [ 90.072730][ T6393] syzkaller1: entered allmulticast mode [ 90.222828][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.112'. [ 90.229511][ T6417] af_packet: tpacket_rcv: packet too big, clamped from 3960 to 3942. macoff=106 [ 90.502399][ T6434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.115'. [ 90.526726][ T6434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.115'. [ 90.567456][ T6303] ip6_vti0 speed is unknown, defaulting to 1000 [ 90.958803][ T6445] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 90.966259][ T5839] IPVS: starting estimator thread 0... [ 90.977121][ T6454] netlink: 24 bytes leftover after parsing attributes in process `syz.0.119'. [ 90.994139][ T6454] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 91.076819][ T6455] IPVS: using max 28 ests per chain, 67200 per kthread [ 91.112189][ T6303] ip6_vti0 speed is unknown, defaulting to 1000 [ 91.712567][ T6303] ip6_vti0 speed is unknown, defaulting to 1000 [ 91.865625][ T6476] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.526108][ T6492] gretap1: entered promiscuous mode [ 93.028665][ T6303] ip6_vti0 speed is unknown, defaulting to 1000 [ 93.381573][ T6303] ip6_vti0 speed is unknown, defaulting to 1000 [ 93.644502][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 93.713945][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 93.731045][ T6303] ip6_vti0 speed is unknown, defaulting to 1000 [ 93.838512][ T6523] syzkaller0: entered promiscuous mode [ 93.844025][ T6523] syzkaller0: entered allmulticast mode [ 94.049850][ T6303] ip6_vti0 speed is unknown, defaulting to 1000 [ 94.523293][ T6540] netlink: 44 bytes leftover after parsing attributes in process `syz.3.135'. [ 94.557834][ T6540] netlink: 35 bytes leftover after parsing attributes in process `syz.3.135'. [ 94.568194][ T6540] netlink: 'syz.3.135': attribute type 5 has an invalid length. [ 94.576027][ T6540] netlink: 'syz.3.135': attribute type 6 has an invalid length. [ 94.584578][ T6540] netlink: 35 bytes leftover after parsing attributes in process `syz.3.135'. [ 94.704809][ T6545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.137'. [ 94.921354][ T6550] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 94.938768][ T6550] bond1 (unregistering): Released all slaves [ 95.617513][ T6559] pim6reg: entered allmulticast mode [ 95.737925][ T6567] tipc: Enabled bearer , priority 0 [ 95.772449][ T6571] syzkaller0: entered promiscuous mode [ 95.786835][ T6571] syzkaller0: entered allmulticast mode [ 95.909558][ T6571] tipc: Resetting bearer [ 96.039760][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.147'. [ 96.108753][ T6585] vlan2: entered promiscuous mode [ 96.126221][ T6585] erspan0: entered promiscuous mode [ 96.407593][ T6595] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.573595][ T6566] tipc: Resetting bearer [ 98.617767][ T6566] tipc: Disabling bearer [ 98.635424][ T6600] netlink: 'syz.3.151': attribute type 8 has an invalid length. [ 98.666896][ T24] tipc: Node number set to 4223456695 [ 98.686571][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.152'. [ 98.743509][ T6599] netlink: 'syz.3.151': attribute type 11 has an invalid length. [ 98.779279][ T6603] netlink: 132 bytes leftover after parsing attributes in process `syz.0.152'. [ 98.796831][ T6606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.153'. [ 99.149310][ T6630] netlink: 28 bytes leftover after parsing attributes in process `syz.2.158'. [ 99.255909][ T6636] openvswitch: netlink: Tunnel attr 152 out of range max 16 [ 99.312017][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.158'. [ 99.594539][ T6662] netlink: 'syz.4.164': attribute type 11 has an invalid length. [ 99.642359][ T6662] netlink: 'syz.4.164': attribute type 23 has an invalid length. [ 99.684177][ T6662] __nla_validate_parse: 2 callbacks suppressed [ 99.684194][ T6662] netlink: 224 bytes leftover after parsing attributes in process `syz.4.164'. [ 100.060508][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'. [ 100.071311][ T5943] IPVS: starting estimator thread 0... [ 100.083234][ T6680] netlink: 'syz.0.169': attribute type 1 has an invalid length. [ 100.108390][ T6680] netlink: 'syz.0.169': attribute type 2 has an invalid length. [ 100.166825][ T6684] IPVS: using max 34 ests per chain, 81600 per kthread [ 100.203026][ T6681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.242488][ T6681] bond0: (slave rose0): Enslaving as an active interface with an up link [ 100.449280][ T6704] tipc: Started in network mode [ 100.463534][ T6704] tipc: Node identity 1a3bf5637e92, cluster identity 4711 [ 100.481051][ T6704] tipc: Enabled bearer , priority 0 [ 100.503447][ T6700] syzkaller0: entered promiscuous mode [ 100.561474][ T6700] syzkaller0: entered allmulticast mode [ 100.585319][ T6696] ip6_vti0 speed is unknown, defaulting to 1000 [ 100.681416][ T6704] tipc: Resetting bearer [ 100.831713][ T6710] netlink: 200 bytes leftover after parsing attributes in process `syz.0.174'. [ 100.875240][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.174'. [ 100.998374][ T6733] tipc: Started in network mode [ 101.003293][ T6733] tipc: Node identity ea38f808284f, cluster identity 4711 [ 101.016915][ T6733] tipc: Enabled bearer , priority 0 [ 101.068344][ T6735] syzkaller0: entered promiscuous mode [ 101.080745][ T6735] syzkaller0: entered allmulticast mode [ 101.106851][ T6732] tipc: Resetting bearer [ 101.136031][ T6732] tipc: Disabling bearer [ 101.189858][ T6698] tipc: Resetting bearer [ 101.250372][ T6698] tipc: Disabling bearer [ 101.269691][ T6704] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 101.505859][ T6748] netlink: 32 bytes leftover after parsing attributes in process `syz.2.181'. [ 101.531586][ T6749] IPVS: length: 4096 != 8 [ 101.621244][ T6752] macvtap1: entered promiscuous mode [ 101.659345][ T6752] macvtap1: entered allmulticast mode [ 101.664784][ T6752] veth1_vlan: entered allmulticast mode [ 101.862655][ T6760] macvtap2: entered promiscuous mode [ 101.881202][ T6760] macvtap2: entered allmulticast mode [ 101.994030][ T6759] ip6_vti0 speed is unknown, defaulting to 1000 [ 102.513288][ T6776] raw_sendmsg: syz.0.185 forgot to set AF_INET. Fix it! [ 102.552831][ T6776] netlink: 36 bytes leftover after parsing attributes in process `syz.0.185'. [ 102.931361][ T6795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.188'. [ 103.067837][ T6803] netlink: 5 bytes leftover after parsing attributes in process `syz.3.189'. [ 103.090641][ T6803] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 103.120704][ T6803] 0ªî{X¹¦: entered allmulticast mode [ 103.148197][ T6803] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 103.237235][ T6808] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 103.243912][ T6808] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 103.894871][ T6843] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 104.265521][ T6859] vxcan2: entered allmulticast mode [ 104.770496][ T6883] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.952159][ T6887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.967435][ T6888] veth0: entered promiscuous mode [ 105.043330][ T6892] netlink: 48 bytes leftover after parsing attributes in process `syz.1.208'. [ 105.060235][ T6888] netlink: 'syz.2.207': attribute type 16 has an invalid length. [ 105.068802][ T6888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.207'. [ 105.151567][ T6888] veth0: left promiscuous mode [ 105.173002][ T6895] Driver unsupported XDP return value 0 on prog (id 86) dev N/A, expect packet loss! [ 105.219140][ T6898] netlink: 40 bytes leftover after parsing attributes in process `syz.1.211'. [ 105.392377][ T6903] netlink: 'syz.2.212': attribute type 1 has an invalid length. [ 105.779142][ T5839] IPVS: starting estimator thread 0... [ 105.879536][ T6932] netlink: 158648 bytes leftover after parsing attributes in process `syz.3.216'. [ 105.897862][ T6926] IPVS: using max 32 ests per chain, 76800 per kthread [ 106.408805][ T6951] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.510357][ T6955] ieee802154 phy0 wpan0: encryption failed: -22 [ 106.717445][ T6960] netlink: 20 bytes leftover after parsing attributes in process `syz.1.226'. [ 106.821221][ T6966] netlink: 'syz.3.227': attribute type 12 has an invalid length. [ 106.832526][ T6966] netlink: 'syz.3.227': attribute type 4 has an invalid length. [ 106.845512][ T6965] netlink: 68 bytes leftover after parsing attributes in process `syz.1.228'. [ 106.854933][ T6965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.228'. [ 106.873858][ T6965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.228'. [ 107.019035][ T6967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.228'. [ 107.073493][ T6972] ip6_vti0 speed is unknown, defaulting to 1000 [ 107.299559][ T6979] netlink: 'syz.2.231': attribute type 3 has an invalid length. [ 107.324868][ T6979] netlink: 36 bytes leftover after parsing attributes in process `syz.2.231'. [ 107.559185][ T6975] ip6_vti0 speed is unknown, defaulting to 1000 [ 108.469491][ T6995] ip6_vti0 speed is unknown, defaulting to 1000 [ 108.785805][ T7000] ip6_vti0 speed is unknown, defaulting to 1000 [ 109.194373][ T7012] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 109.994034][ T7036] ip6_vti0 speed is unknown, defaulting to 1000 [ 110.256130][ T7045] __nla_validate_parse: 1 callbacks suppressed [ 110.256150][ T7045] netlink: 56 bytes leftover after parsing attributes in process `syz.1.245'. [ 110.469182][ T9] IPVS: starting estimator thread 0... [ 110.476445][ T7052] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20003 [ 110.530337][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.248'. [ 110.566801][ T7053] IPVS: using max 32 ests per chain, 76800 per kthread [ 110.743147][ T7065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'. [ 110.927488][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 111.429818][ T7078] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.251'. [ 111.453644][ T7078] netlink: 'syz.1.251': attribute type 29 has an invalid length. [ 111.466319][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'. [ 111.692282][ T7083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.253'. [ 111.786139][ T7085] bridge0: entered promiscuous mode [ 111.811299][ T7085] bridge0: port 3(macvtap1) entered blocking state [ 111.819737][ T7085] bridge0: port 3(macvtap1) entered disabled state [ 111.829065][ T7085] macvtap1: entered allmulticast mode [ 111.844138][ T7085] bridge0: entered allmulticast mode [ 111.855371][ T7085] macvtap1: left allmulticast mode [ 111.863837][ T7085] bridge0: left allmulticast mode [ 111.873541][ T7085] bridge0: left promiscuous mode [ 111.902253][ T7094] netlink: 'syz.1.255': attribute type 1 has an invalid length. [ 111.912363][ T7094] netlink: 244 bytes leftover after parsing attributes in process `syz.1.255'. [ 111.922179][ T7094] NCSI netlink: No device for ifindex 0 [ 112.145725][ T7104] netem: change failed [ 112.225912][ T7113] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000 [ 112.248950][ T7111] netlink: 'syz.0.260': attribute type 1 has an invalid length. [ 112.325873][ T7111] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.439485][ T7121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.262'. [ 112.484901][ T7120] netlink: 32 bytes leftover after parsing attributes in process `syz.4.262'. [ 112.734662][ T7129] tipc: Started in network mode [ 112.746241][ T7129] tipc: Node identity 4246, cluster identity 4711 [ 112.760206][ T7129] tipc: Node number set to 16966 [ 112.771482][ T7129] tipc: Cannot configure node identity twice [ 112.853289][ T7131] syzkaller0: entered promiscuous mode [ 112.858857][ T7131] syzkaller0: entered allmulticast mode [ 113.110496][ T7135] netlink: 'syz.2.269': attribute type 6 has an invalid length. [ 113.176299][ T7135] team0: Cannot enslave team device to itself [ 113.274970][ T7151] x_tables: duplicate underflow at hook 2 [ 113.899805][ T7167] syz.0.275 (7167) used obsolete PPPIOCDETACH ioctl [ 113.936208][ T7155] delete_channel: no stack [ 114.159965][ T7174] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.313413][ T7180] netlink: 'syz.1.281': attribute type 1 has an invalid length. [ 114.437403][ T7181] veth3: entered promiscuous mode [ 114.475989][ T6425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.502345][ T6425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.659463][ T7258] netlink: 'syz.0.299': attribute type 1 has an invalid length. [ 116.070510][ T7271] __nla_validate_parse: 8 callbacks suppressed [ 116.070525][ T7271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'. [ 116.707435][ T7245] syzkaller1: entered promiscuous mode [ 116.715826][ T7245] syzkaller1: entered allmulticast mode [ 116.911990][ T7282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.303'. [ 117.509139][ T7322] netlink: 32 bytes leftover after parsing attributes in process `syz.0.311'. [ 118.546325][ T7314] tipc: Enabling of bearer rejected, failed to enable media [ 118.584782][ T7298] ip6_vti0 speed is unknown, defaulting to 1000 [ 118.880130][ T7346] syzkaller0: entered promiscuous mode [ 118.888201][ T7346] syzkaller0: entered allmulticast mode [ 119.084998][ T7350] bond1: option arp_validate: invalid value (18446744073491447809) [ 119.113738][ T7350] bond1 (unregistering): Released all slaves [ 119.247965][ T7347] netlink: 'syz.1.316': attribute type 10 has an invalid length. [ 119.301427][ T7347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.341406][ T7347] team0: Port device bond0 added [ 119.456237][ T7369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.322'. [ 119.699049][ T7375] netlink: 20 bytes leftover after parsing attributes in process `syz.4.320'. [ 119.751264][ T7371] bridge1: port 1(ip6gretap1) entered blocking state [ 119.770515][ T7371] bridge1: port 1(ip6gretap1) entered disabled state [ 119.780835][ T7371] ip6gretap1: entered allmulticast mode [ 119.810357][ T7371] ip6gretap1: entered promiscuous mode [ 119.865944][ T7374] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 119.956526][ T7373] bridge1: port 2(veth3) entered blocking state [ 119.971494][ T7373] bridge1: port 2(veth3) entered disabled state [ 119.984428][ T7373] veth3: entered allmulticast mode [ 119.992272][ T7373] veth3: entered promiscuous mode [ 120.005207][ T7373] bridge1: port 2(veth3) entered blocking state [ 120.011830][ T7373] bridge1: port 2(veth3) entered forwarding state [ 120.261942][ T7384] ip6_vti0 speed is unknown, defaulting to 1000 [ 120.427235][ T7395] netlink: 20 bytes leftover after parsing attributes in process `syz.4.328'. [ 120.564759][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.331'. [ 120.591379][ T7401] Bluetooth: MGMT ver 1.23 [ 120.667708][ T60] bridge1: port 2(veth3) entered disabled state [ 120.815447][ T7401] ip6_vti0 speed is unknown, defaulting to 1000 [ 121.601904][ T7426] unsupported nla_type 29699 [ 121.706447][ T7430] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 121.939688][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.342'. [ 122.030863][ T7443] netlink: 'syz.1.344': attribute type 1 has an invalid length. [ 122.051219][ T7443] netlink: 24 bytes leftover after parsing attributes in process `syz.1.344'. [ 122.086393][ T7404] ip6_vti0 speed is unknown, defaulting to 1000 [ 122.553061][ T7454] ip6_vti0 speed is unknown, defaulting to 1000 [ 122.647326][ T5848] Bluetooth: hci0: command tx timeout [ 123.068557][ T7447] ip6_vti0 speed is unknown, defaulting to 1000 [ 123.541237][ T7472] ip6_vti0 speed is unknown, defaulting to 1000 [ 124.235456][ T7486] xt_nat: multiple ranges no longer supported [ 124.361649][ T7486] tipc: Enabling of bearer rejected, failed to enable media [ 124.465800][ T7479] syzkaller0: entered promiscuous mode [ 124.474892][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.356'. [ 124.497206][ T7479] syzkaller0: entered allmulticast mode [ 124.680867][ T7495] netlink: 28 bytes leftover after parsing attributes in process `syz.3.357'. [ 124.690465][ T7495] netlink: 28 bytes leftover after parsing attributes in process `syz.3.357'. [ 125.078805][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 125.132085][ T7505] netlink: 52 bytes leftover after parsing attributes in process `syz.3.360'. [ 125.226994][ T5848] Bluetooth: hci4: link tx timeout [ 125.232454][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 126.206402][ T7504] netlink: 'syz.4.359': attribute type 10 has an invalid length. [ 126.216142][ T7507] lo: entered allmulticast mode [ 126.221682][ T7507] lo: left allmulticast mode [ 126.508135][ T7521] netlink: 'syz.4.362': attribute type 39 has an invalid length. [ 126.665032][ T7529] netlink: 'syz.3.365': attribute type 1 has an invalid length. [ 126.721321][ T7533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.365'. [ 126.842156][ T7534] bond1: (slave geneve2): making interface the new active one [ 126.852772][ T7534] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 126.877935][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.364'. [ 127.041207][ T7522] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.050440][ T7522] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.219552][ T7522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.245117][ T7522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.287473][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 127.294460][ T7549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.368'. [ 127.362310][ T7522] .70·: left allmulticast mode [ 127.398474][ T7522] hsr_slave_0: left allmulticast mode [ 127.404230][ T7522] hsr_slave_1: left allmulticast mode [ 127.655189][ T7522] gretap1: left promiscuous mode [ 127.675417][ T6426] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 127.761827][ T6426] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 127.792852][ T6426] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 127.819809][ T6426] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 127.832922][ T6426] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.852307][ T6426] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.862182][ T7547] ip6_vti0 speed is unknown, defaulting to 1000 [ 127.885227][ T6426] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.956154][ T6426] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.050932][ T7570] tipc: Enabling of bearer rejected, failed to enable media [ 128.539635][ T7600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.377'. [ 128.693978][ T7608] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.803679][ T7614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.380'. [ 128.813464][ T7614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.380'. [ 129.057266][ T7616] tipc: Enabled bearer , priority 0 [ 129.069019][ T7616] syzkaller0: entered promiscuous mode [ 129.077214][ T7616] syzkaller0: entered allmulticast mode [ 129.200099][ T7617] tipc: Resetting bearer [ 129.258892][ T7615] tipc: Resetting bearer [ 129.282244][ T7615] tipc: Disabling bearer [ 129.536312][ T7634] syzkaller0: entered promiscuous mode [ 129.567460][ T7634] syzkaller0: entered allmulticast mode [ 129.568513][ T7636] netlink: 'syz.0.386': attribute type 13 has an invalid length. [ 129.614735][ T7636] netlink: 'syz.0.386': attribute type 17 has an invalid length. [ 129.747136][ T7649] netlink: 'syz.0.386': attribute type 1 has an invalid length. [ 129.755273][ T7642] netlink: 'syz.3.388': attribute type 10 has an invalid length. [ 129.791596][ T7642] netlink: 40 bytes leftover after parsing attributes in process `syz.3.388'. [ 129.895131][ T7636] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.953253][ T7659] trusted_key: syz.2.392 sent an empty control message without MSG_MORE. [ 130.060134][ T7642] dummy0: entered promiscuous mode [ 130.070904][ T7642] bridge0: port 4(dummy0) entered blocking state [ 130.075740][ T7663] netlink: 56 bytes leftover after parsing attributes in process `syz.2.393'. [ 130.094807][ T7642] bridge0: port 4(dummy0) entered disabled state [ 130.106981][ T7642] dummy0: entered allmulticast mode [ 130.126426][ T7642] bridge0: port 4(dummy0) entered blocking state [ 130.133173][ T7642] bridge0: port 4(dummy0) entered forwarding state [ 130.362979][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.397'. [ 130.410723][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 130.464488][ T7685] netlink: 28 bytes leftover after parsing attributes in process `syz.0.398'. [ 130.545021][ T7678] veth0: entered promiscuous mode [ 130.567220][ T7692] batadv_slave_0: entered promiscuous mode [ 130.662779][ T7677] batadv_slave_0: left promiscuous mode [ 130.670470][ T7677] veth0: left promiscuous mode [ 131.095121][ T7723] sctp: [Deprecated]: syz.1.407 (pid 7723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.095121][ T7723] Use struct sctp_sack_info instead [ 131.210387][ T7719] netlink: zone id is out of range [ 131.215751][ T7719] netlink: zone id is out of range [ 131.230485][ T7719] netlink: zone id is out of range [ 131.235658][ T7719] netlink: zone id is out of range [ 131.249616][ T7719] netlink: zone id is out of range [ 131.284986][ T7719] netlink: zone id is out of range [ 131.298166][ T7731] openvswitch: netlink: Multiple metadata blocks provided [ 131.301377][ T7719] netlink: zone id is out of range [ 131.341382][ T7729] ip6_vti0 speed is unknown, defaulting to 1000 [ 131.621325][ T7740] netlink: 'syz.3.411': attribute type 2 has an invalid length. [ 132.194282][ T7769] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.274922][ T7760] syzkaller1: entered promiscuous mode [ 132.295520][ T7760] syzkaller1: entered allmulticast mode [ 132.535441][ T7781] x_tables: duplicate underflow at hook 3 [ 132.583808][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'. [ 132.607457][ T7780] netlink: 20 bytes leftover after parsing attributes in process `syz.3.418'. [ 132.730470][ T7784] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 132.738322][ T7776] ip6_vti0 speed is unknown, defaulting to 1000 [ 132.915420][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.922952][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.991801][ T7791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.421'. [ 133.045336][ T7791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.421'. [ 133.070441][ T7791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.421'. [ 133.185506][ T7800] veth1_macvtap: left allmulticast mode [ 133.280826][ T7800] veth1_macvtap: left promiscuous mode [ 133.291544][ T7800] bridge0: port 3(macsec0) entered disabled state [ 133.321178][ T7803] veth1_macvtap: entered promiscuous mode [ 133.343373][ T7803] veth1_macvtap: entered allmulticast mode [ 133.360007][ T7803] bridge0: port 3(macsec0) entered blocking state [ 133.366606][ T7803] bridge0: port 3(macsec0) entered forwarding state [ 133.427895][ T7795] netlink: 'syz.3.422': attribute type 10 has an invalid length. [ 133.851065][ T7795] veth1_macvtap (unregistering): left allmulticast mode [ 133.897036][ T7820] netlink: 'syz.0.426': attribute type 1 has an invalid length. [ 133.910491][ T7820] netlink: 228 bytes leftover after parsing attributes in process `syz.0.426'. [ 133.916729][ T7795] bridge0: port 3(macsec0) entered disabled state [ 133.993826][ T7795] macsec0 (unregistering): left allmulticast mode [ 134.026308][ T7795] macsec0 (unregistering): left promiscuous mode [ 134.043458][ T7795] bridge0: port 3(macsec0) entered disabled state [ 134.577178][ T7848] netlink: 428 bytes leftover after parsing attributes in process `syz.3.430'. [ 134.611287][ T7848] netlink: 32 bytes leftover after parsing attributes in process `syz.3.430'. [ 135.018618][ T7856] block nbd0: server does not support multiple connections per device. [ 135.185555][ T7856] block nbd0: shutting down sockets [ 135.603087][ T7858] ip6_vti0 speed is unknown, defaulting to 1000 [ 136.156532][ T7899] ip6_vti0 speed is unknown, defaulting to 1000 [ 136.697477][ T7924] net_ratelimit: 10 callbacks suppressed [ 136.697496][ T7924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.700054][ T7927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.743227][ T7925] x_tables: duplicate underflow at hook 1 [ 137.115228][ T7940] syzkaller1: entered promiscuous mode [ 137.152236][ T7940] syzkaller1: entered allmulticast mode [ 137.439254][ T7947] netlink: 52 bytes leftover after parsing attributes in process `syz.1.443'. [ 137.465288][ T7953] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 137.957360][ T7961] tap0: tun_chr_ioctl cmd 1074025677 [ 137.962890][ T7961] tap0: linktype set to 0 [ 137.978435][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 138.026793][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 138.062932][ T7965] netlink: 'syz.3.446': attribute type 4 has an invalid length. [ 138.401288][ T7980] sctp: [Deprecated]: syz.0.449 (pid 7980) Use of int in maxseg socket option. [ 138.401288][ T7980] Use struct sctp_assoc_value instead [ 138.947207][ T8005] ip6gretap2: entered promiscuous mode [ 139.175376][ T8018] block nbd3: not configured, cannot reconfigure [ 139.202572][ T8018] syzkaller0: entered promiscuous mode [ 139.224497][ T8018] syzkaller0: entered allmulticast mode [ 139.266847][ T8018] SET target dimension over the limit! [ 139.791320][ T8048] netlink: 'syz.4.463': attribute type 12 has an invalid length. [ 139.941538][ T8055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.465'. [ 139.958670][ T8055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.465'. [ 139.967833][ T8055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.465'. [ 140.266138][ T8076] netlink: 'syz.4.468': attribute type 10 has an invalid length. [ 140.279010][ T8076] hsr0: entered promiscuous mode [ 140.289855][ T8076] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 140.300975][ T8076] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 140.314379][ T8076] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 141.175400][ T8111] ip6_vti0 speed is unknown, defaulting to 1000 [ 141.437361][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.481'. [ 141.913657][ T8157] tipc: Enabled bearer , priority 0 [ 141.955473][ T8161] tipc: Disabling bearer [ 142.034380][ T8122] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 142.830676][ T8187] netlink: 96 bytes leftover after parsing attributes in process `syz.1.494'. [ 142.868776][ T8189] netlink: 40 bytes leftover after parsing attributes in process `syz.0.495'. [ 143.210027][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 143.318868][ T8214] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.500'. [ 143.350531][ T8216] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.500'. [ 143.470612][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.501'. [ 143.985868][ T8238] ip6gre1: entered promiscuous mode [ 144.006196][ T8238] ip6gre1: entered allmulticast mode [ 144.298009][ T8258] openvswitch: netlink: Flow key attr not present in new flow. [ 144.302279][ T8254] ip6_vti0 speed is unknown, defaulting to 1000 [ 144.307317][ T8259] netlink: 32 bytes leftover after parsing attributes in process `syz.2.509'. [ 144.366929][ T8252] geneve2: entered promiscuous mode [ 144.406203][ T3484] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 144.419374][ T3484] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 144.429509][ T3484] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 144.443528][ T3484] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 144.495981][ T8264] syzkaller0: entered promiscuous mode [ 144.502635][ T8264] syzkaller0: entered allmulticast mode [ 144.526783][ T8264] syzkaller1: entered allmulticast mode [ 145.002635][ T8283] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 145.215851][ T8299] netlink: 28 bytes leftover after parsing attributes in process `syz.1.520'. [ 145.397601][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.521'. [ 145.421002][ T8306] netlink: del zone limit has 4 unknown bytes [ 145.677609][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.526'. [ 145.690774][ T8321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.526'. [ 145.798982][ T8325] netlink: 'syz.0.527': attribute type 1 has an invalid length. [ 145.820924][ T8325] netlink: 'syz.0.527': attribute type 1 has an invalid length. [ 145.831238][ T8330] openvswitch: netlink: IP tunnel dst address not specified [ 145.834219][ T8327] netlink: 20 bytes leftover after parsing attributes in process `syz.3.528'. [ 145.908918][ T8327] nbd: socks must be embedded in a SOCK_ITEM attr [ 145.917890][ T8329] netlink: 20 bytes leftover after parsing attributes in process `syz.3.528'. [ 145.927872][ T8329] nbd: device at index 64 is going down [ 145.984863][ T8299] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 146.049304][ T8339] netlink: 'syz.0.530': attribute type 1 has an invalid length. [ 146.107804][ T7698] udevd[7698]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 146.126483][ T5833] udevd[5833]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 146.195821][ T8356] netlink: 'syz.2.533': attribute type 32 has an invalid length. [ 146.267896][ T8356] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 146.344021][ T8356] netlink: 'syz.2.533': attribute type 1 has an invalid length. [ 146.386091][ T8356] gretap1: entered allmulticast mode [ 146.674803][ T8375] hsr_slave_1 (unregistering): left promiscuous mode [ 146.711308][ T8379] ip6_vti0 speed is unknown, defaulting to 1000 [ 146.831839][ T8386] netlink: 'syz.0.542': attribute type 1 has an invalid length. [ 146.873953][ T8386] bond3: entered promiscuous mode [ 146.879164][ T8386] bond3: entered allmulticast mode [ 146.914963][ T8386] bond3: (slave ip6gretap1): making interface the new active one [ 146.937490][ T8386] ip6gretap1: entered promiscuous mode [ 146.943178][ T8386] ip6gretap1: entered allmulticast mode [ 146.971660][ T8386] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 147.286802][ T5848] Bluetooth: hci0: command 0x0401 tx timeout [ 147.832807][ T8410] netlink: 'syz.1.549': attribute type 1 has an invalid length. [ 148.054878][ T8410] syzkaller0: entered promiscuous mode [ 148.072307][ T8410] syzkaller0: entered allmulticast mode [ 148.391843][ T8450] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 148.535585][ T8460] __nla_validate_parse: 7 callbacks suppressed [ 148.535602][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.557'. [ 148.567733][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.559'. [ 148.578597][ T8463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.559'. [ 148.618201][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 149.713509][ T8463] tipc: Enabled bearer , priority 0 [ 149.725104][ T8465] syzkaller0: entered promiscuous mode [ 149.730773][ T8465] syzkaller0: entered allmulticast mode [ 149.744878][ T8477] veth1_macvtap: mtu greater than device maximum [ 149.772863][ T8454] tipc: Resetting bearer [ 149.805248][ T8454] tipc: Disabling bearer [ 149.842906][ T8482] netlink: 60 bytes leftover after parsing attributes in process `syz.1.562'. [ 150.047232][ T8497] tipc: Can't bind to reserved service type 2 [ 150.058500][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'. [ 150.105217][ T8495] netlink: 'syz.2.566': attribute type 12 has an invalid length. [ 150.306525][ T8516] ip6_vti0 speed is unknown, defaulting to 1000 [ 150.674218][ T8518] sctp: [Deprecated]: syz.1.569 (pid 8518) Use of int in maxseg socket option. [ 150.674218][ T8518] Use struct sctp_assoc_value instead [ 150.731522][ T8533] IPVS: set_ctl: invalid protocol: 33 172.20.20.13:20002 [ 151.513168][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'. [ 151.632271][ T8540] netlink: 44 bytes leftover after parsing attributes in process `syz.0.576'. [ 151.696313][ T8543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.576'. [ 151.923415][ T5908] IPVS: starting estimator thread 0... [ 151.978298][ T8533] ip6_vti0 speed is unknown, defaulting to 1000 [ 152.018386][ T8557] IPVS: using max 28 ests per chain, 67200 per kthread [ 152.311530][ T8561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.579'. [ 152.705499][ T8561] ip6_vti0 speed is unknown, defaulting to 1000 [ 153.357913][ T8585] pim6reg99999999: entered allmulticast mode [ 153.368225][ T8585] x_tables: duplicate underflow at hook 3 [ 153.571917][ T8601] netlink: 'syz.2.590': attribute type 10 has an invalid length. [ 153.597703][ T8601] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.636261][ T8601] bond0: (slave team0): Enslaving as an active interface with an up link [ 153.698648][ T8602] ipvlan2: entered promiscuous mode [ 153.832795][ T8607] __nla_validate_parse: 1 callbacks suppressed [ 153.832813][ T8607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.593'. [ 153.954470][ T8612] ip6_vti0 speed is unknown, defaulting to 1000 [ 154.139259][ T8619] syzkaller0: entered promiscuous mode [ 154.157830][ T8619] syzkaller0: entered allmulticast mode [ 154.235907][ T8625] netlink: 'syz.3.598': attribute type 3 has an invalid length. [ 154.254537][ T8625] netlink: 'syz.3.598': attribute type 1 has an invalid length. [ 154.263035][ T8625] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.598'. [ 154.433362][ T8634] netlink: 16 bytes leftover after parsing attributes in process `syz.0.600'. [ 154.529092][ T8627] ip6_vti0 speed is unknown, defaulting to 1000 [ 154.761969][ T8620] ip6_vti0 speed is unknown, defaulting to 1000 [ 154.932394][ T8642] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 154.934314][ T8640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.601'. [ 154.959546][ T8640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.601'. [ 155.388227][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.608'. [ 155.415257][ T8659] 8021q: VLANs not supported on ip_vti0 [ 155.422064][ T8660] syz_tun: entered allmulticast mode [ 155.435739][ T8659] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20003 [ 155.484997][ T8660] dvmrp8: entered allmulticast mode [ 155.707971][ T8668] veth5: entered promiscuous mode [ 155.748718][ T8676] macvtap1: left promiscuous mode [ 155.755538][ T8676] ip6gre1: left promiscuous mode [ 155.786840][ T8676] bond3: left promiscuous mode [ 155.802528][ T8676] ip6gretap1: left promiscuous mode [ 155.825439][ T8658] syz_tun: left allmulticast mode [ 156.025820][ T8692] netlink: 'syz.0.617': attribute type 4 has an invalid length. [ 156.161991][ T8692] netlink: 152 bytes leftover after parsing attributes in process `syz.0.617'. [ 156.196856][ T8692] block nbd0: not configured, cannot reconfigure [ 156.422478][ T8709] netlink: 28 bytes leftover after parsing attributes in process `syz.3.621'. [ 157.128576][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.631'. [ 157.265833][ T8748] ip6_vti0 speed is unknown, defaulting to 1000 [ 157.593578][ T8757] ip6_vti0 speed is unknown, defaulting to 1000 [ 157.832054][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.634'. [ 158.318258][ T8776] bridge_slave_0: default FDB implementation only supports local addresses [ 158.399449][ T8782] netlink: 'syz.2.643': attribute type 1 has an invalid length. [ 158.421255][ T8787] netlink: 'syz.4.641': attribute type 1 has an invalid length. [ 158.661075][ T8789] bond1: (slave veth7): Enslaving as an active interface with a down link [ 158.676485][ T8802] veth1_to_bond: entered allmulticast mode [ 158.696199][ T8794] bond1 (unregistering): (slave veth7): Releasing active interface [ 158.729733][ T8794] bond1 (unregistering): Released all slaves [ 158.762127][ T8785] ip6_vti0 speed is unknown, defaulting to 1000 [ 158.782376][ T8787] ipvlan1: entered promiscuous mode [ 158.905365][ T8802] bond0: (slave bond_slave_1): Releasing backup interface [ 158.935801][ T8802] veth1_to_bond (unregistering): left allmulticast mode [ 158.960785][ T8807] bridge0: port 4(dummy0) entered disabled state [ 159.133721][ T8811] __nla_validate_parse: 4 callbacks suppressed [ 159.133748][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.651'. [ 159.195712][ T8816] netlink: 52 bytes leftover after parsing attributes in process `syz.2.648'. [ 159.279493][ T8819] netlink: 'syz.0.649': attribute type 13 has an invalid length. [ 159.487351][ T8819] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.494861][ T8819] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.994490][ T8819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.049085][ T8819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.380352][ T8819] veth1_vlan: left allmulticast mode [ 160.467323][ T8837] tipc: Enabled bearer , priority 0 [ 160.475217][ T8835] syzkaller0: entered promiscuous mode [ 160.487067][ T8835] syzkaller0: entered allmulticast mode [ 160.495706][ T8840] syzkaller0: entered promiscuous mode [ 160.503404][ T8840] syzkaller0: entered allmulticast mode [ 160.518260][ T8844] tipc: Resetting bearer [ 160.530502][ T49] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.714931][ T49] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.724240][ T49] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.752493][ T8844] tipc: Resetting bearer [ 160.769219][ T8844] tipc: Disabling bearer [ 160.846296][ T49] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.906190][ T8877] netlink: 'syz.3.660': attribute type 1 has an invalid length. [ 161.020478][ T8877] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.138958][ T8880] bond3: (slave ip6gretap1): making interface the new active one [ 161.148828][ T8889] netlink: 9 bytes leftover after parsing attributes in process `syz.2.664'. [ 161.160554][ T8880] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 161.170981][ T8877] erspan0: entered allmulticast mode [ 161.202035][ T8890] tipc: Enabled bearer , priority 0 [ 161.213252][ T8893] netlink: 28 bytes leftover after parsing attributes in process `syz.2.664'. [ 161.224603][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'. [ 161.237897][ T8889] .70·: renamed from hsr0 (while UP) [ 161.249656][ T8889] .70·: entered allmulticast mode [ 161.254807][ T8889] hsr_slave_0: entered allmulticast mode [ 161.260705][ T8889] hsr_slave_1: entered allmulticast mode [ 161.266963][ T8889] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 161.286010][ T8881] syzkaller0: entered promiscuous mode [ 161.294833][ T8881] syzkaller0: entered allmulticast mode [ 161.347643][ T8881] netlink: 'syz.0.661': attribute type 3 has an invalid length. [ 161.383226][ T8881] netlink: 'syz.0.661': attribute type 1 has an invalid length. [ 161.410399][ T8881] netlink: 224 bytes leftover after parsing attributes in process `syz.0.661'. [ 161.448644][ T8898] ip6_vti0 speed is unknown, defaulting to 1000 [ 161.452964][ T8881] NCSI netlink: No device for ifindex 23016 [ 161.567084][ T8881] tipc: Resetting bearer [ 161.658953][ T8881] tipc: Disabling bearer [ 161.690899][ T8904] Cannot find del_set index 1 as target [ 161.727313][ T8904] netlink: 'syz.4.667': attribute type 11 has an invalid length. [ 161.735537][ T8904] netlink: 244 bytes leftover after parsing attributes in process `syz.4.667'. [ 161.811020][ T8904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.854402][ T8905] ip6_vti0 speed is unknown, defaulting to 1000 [ 161.954498][ T8921] netlink: 'syz.1.672': attribute type 10 has an invalid length. [ 161.967489][ T8921] netlink: 156 bytes leftover after parsing attributes in process `syz.1.672'. [ 162.237534][ T8940] x_tables: duplicate underflow at hook 1 [ 162.259760][ T8941] netlink: 'syz.3.678': attribute type 1 has an invalid length. [ 162.401875][ T8943] bond4: (slave bridge3): making interface the new active one [ 162.414296][ T8943] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 162.502346][ T8943] bond4: (slave bridge4): Enslaving as an active interface with a down link [ 162.667723][ T8943] bond4: (slave bridge5): Enslaving as an active interface with a down link [ 162.703269][ T8943] bond4: (slave bridge6): Enslaving as an active interface with a down link [ 162.736994][ T8943] bond4: (slave bridge7): Enslaving as an active interface with a down link [ 162.759237][ T8943] bond4: (slave bridge8): Enslaving as an active interface with a down link [ 162.781110][ T8943] bond4: (slave bridge9): Enslaving as an active interface with a down link [ 162.843032][ T8943] bond4: (slave bridge10): Enslaving as an active interface with a down link [ 162.905009][ T8943] bond4: (slave bridge11): Enslaving as an active interface with a down link [ 162.979766][ T8943] bond4: (slave bridge12): Enslaving as an active interface with a down link [ 163.065433][ T8943] bond4: (slave bridge13): Enslaving as an active interface with a down link [ 163.152281][ T8961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.683'. [ 163.284847][ T8974] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.470576][ T8987] Cannot find del_set index 2 as target [ 163.477599][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.694'. [ 163.575737][ T8984] ip6_vti0 speed is unknown, defaulting to 1000 [ 163.603393][ T8998] netlink: 'syz.2.695': attribute type 1 has an invalid length. [ 163.613755][ T8998] netlink: 'syz.2.695': attribute type 2 has an invalid length. [ 163.623952][ T8992] netlink: 'syz.0.694': attribute type 1 has an invalid length. [ 163.719776][ T9004] macvtap1: entered promiscuous mode [ 163.725111][ T9004] macvtap1: entered allmulticast mode [ 163.737919][ T9004] dummy0: entered promiscuous mode [ 163.743413][ T9004] dummy0: entered allmulticast mode [ 163.754348][ T9004] team0: Device macvtap1 failed to register rx_handler [ 163.773155][ T9004] dummy0: left allmulticast mode [ 163.781099][ T9004] dummy0: left promiscuous mode [ 163.881607][ T8999] bond5 (unregistering): Released all slaves [ 164.457267][ T9014] ip6_vti0 speed is unknown, defaulting to 1000 [ 165.071693][ T9042] netlink: 'syz.0.704': attribute type 1 has an invalid length. [ 165.079596][ T9024] ip6_vti0 speed is unknown, defaulting to 1000 [ 165.136807][ T9051] __nla_validate_parse: 4 callbacks suppressed [ 165.136823][ T9051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.706'. [ 165.152278][ T9042] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 165.160926][ T9042] bond5: (slave batadv1): making interface the new active one [ 165.170006][ T9042] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 165.182238][ T9042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.704'. [ 165.232496][ T9042] 8021q: adding VLAN 0 to HW filter on device bond5 [ 165.246293][ T9051] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 165.693155][ T9071] netlink: 'syz.2.710': attribute type 1 has an invalid length. [ 165.714535][ T9070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.710'. [ 165.736085][ T9070] bridge0: port 3(vlan2) entered blocking state [ 165.750648][ T9070] bridge0: port 3(vlan2) entered disabled state [ 165.768400][ T9070] vlan2: entered allmulticast mode [ 165.773541][ T9070] bridge0: entered allmulticast mode [ 165.782132][ T9070] vlan2: left allmulticast mode [ 165.787167][ T9070] bridge0: left allmulticast mode [ 167.240759][ T9124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.722'. [ 167.307577][ T9129] dummy0: entered promiscuous mode [ 167.312873][ T9129] macsec2: entered allmulticast mode [ 167.332475][ T9129] dummy0: entered allmulticast mode [ 167.346183][ T9129] dummy0: left allmulticast mode [ 167.356791][ T9129] dummy0: left promiscuous mode [ 167.398021][ T9137] netlink: zone id is out of range [ 167.403989][ T9137] netlink: zone id is out of range [ 167.410316][ T9137] netlink: zone id is out of range [ 167.415429][ T9137] netlink: zone id is out of range [ 167.421488][ T9137] netlink: zone id is out of range [ 167.426801][ T9137] netlink: zone id is out of range [ 167.431927][ T9137] netlink: zone id is out of range [ 167.440181][ T9137] netlink: zone id is out of range [ 167.454843][ T9137] netlink: zone id is out of range [ 167.477184][ T9137] netlink: zone id is out of range [ 167.512215][ T9133] tipc: Enabling of bearer rejected, failed to enable media [ 167.536477][ T9144] netlink: 40 bytes leftover after parsing attributes in process `syz.4.729'. [ 167.551487][ T9143] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 167.562048][ T9143] sctp: [Deprecated]: syz.0.727 (pid 9143) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.562048][ T9143] Use struct sctp_sack_info instead [ 167.563539][ T9144] tipc: Enabling of bearer rejected, failed to enable media [ 167.821201][ T9157] syzkaller0: entered promiscuous mode [ 167.851784][ T9157] syzkaller0: entered allmulticast mode [ 167.896123][ T9157] tipc: Enabled bearer , priority 0 [ 167.944598][ T9162] ip6_vti0 speed is unknown, defaulting to 1000 [ 167.953349][ T9156] tipc: Resetting bearer [ 168.005569][ T9156] tipc: Disabling bearer [ 168.410719][ T9178] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 168.621038][ T9186] netlink: 'syz.0.737': attribute type 10 has an invalid length. [ 168.853919][ T9186] hsr0: entered promiscuous mode [ 168.868552][ T9186] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 168.888218][ T9186] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 168.910530][ T9186] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 169.402436][ T9205] netlink: 6 bytes leftover after parsing attributes in process `syz.1.741'. [ 169.950771][ T9226] netlink: 'syz.0.746': attribute type 1 has an invalid length. [ 170.308558][ T9250] netlink: 'syz.1.754': attribute type 1 has an invalid length. [ 170.326233][ T9252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.755'. [ 170.347361][ T9250] netlink: 'syz.1.754': attribute type 3 has an invalid length. [ 170.355042][ T9250] netlink: 224 bytes leftover after parsing attributes in process `syz.1.754'. [ 170.407873][ T5848] Bluetooth: hci0: command 0x0401 tx timeout [ 170.727018][ T9270] netlink: 'syz.1.758': attribute type 10 has an invalid length. [ 170.735646][ T9270] bond0: (slave wlan1): Opening slave failed [ 171.053588][ T9282] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 171.109901][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.761'. [ 171.149890][ T9287] netlink: 124 bytes leftover after parsing attributes in process `syz.3.764'. [ 171.363187][ T9293] syzkaller1: entered promiscuous mode [ 171.390896][ T9293] syzkaller1: entered allmulticast mode [ 171.392684][ T9298] netlink: 'syz.3.766': attribute type 1 has an invalid length. [ 171.408484][ T9299] netlink: 'syz.1.765': attribute type 10 has an invalid length. [ 171.416501][ T9299] netlink: 40 bytes leftover after parsing attributes in process `syz.1.765'. [ 171.426402][ T9294] netlink: 'syz.2.767': attribute type 10 has an invalid length. [ 171.434732][ T9296] netlink: 'syz.2.767': attribute type 10 has an invalid length. [ 171.442767][ T9296] netlink: 40 bytes leftover after parsing attributes in process `syz.2.767'. [ 171.461609][ T9301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.765'. [ 171.472029][ T9299] dummy0: entered promiscuous mode [ 171.477189][ T9294] netlink: 40 bytes leftover after parsing attributes in process `syz.2.767'. [ 171.486301][ T9301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.765'. [ 171.530870][ T9299] bridge0: port 3(dummy0) entered blocking state [ 171.549130][ T9299] bridge0: port 3(dummy0) entered disabled state [ 171.550137][ T9298] netlink: 28 bytes leftover after parsing attributes in process `syz.3.766'. [ 171.555678][ T9299] dummy0: entered allmulticast mode [ 171.601804][ T9294] batadv0: entered promiscuous mode [ 171.613021][ T9294] batadv0: entered allmulticast mode [ 171.627500][ T9294] bridge0: port 3(batadv0) entered blocking state [ 171.642255][ T9294] bridge0: port 3(batadv0) entered disabled state [ 171.661403][ T9294] bridge0: port 3(batadv0) entered blocking state [ 171.668135][ T9294] bridge0: port 3(batadv0) entered forwarding state [ 172.074568][ T9342] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 172.096929][ T9348] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 172.097139][ T6406] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 172.114928][ T6406] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 172.228282][ T9351] netlink: 'syz.3.781': attribute type 29 has an invalid length. [ 172.239433][ T9351] netlink: 'syz.3.781': attribute type 29 has an invalid length. [ 172.244770][ T9360] netlink: 'syz.2.783': attribute type 1 has an invalid length. [ 172.780109][ T9353] veth3: entered promiscuous mode [ 173.294208][ T30] audit: type=1800 audit(1766851931.069:2): pid=9402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.795" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=906 res=0 errno=0 [ 173.553768][ T9428] syzkaller0: entered promiscuous mode [ 173.559937][ T9428] syzkaller0: entered allmulticast mode [ 173.882877][ T9436] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 173.896543][ T9436] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 173.965835][ T9438] 8021q: adding VLAN 0 to HW filter on device bond5 [ 175.617604][ T9506] geneve3: entered promiscuous mode [ 175.623086][ T9506] geneve3: entered allmulticast mode [ 175.738962][ T9511] validate_nla: 9 callbacks suppressed [ 175.738983][ T9511] netlink: 'syz.2.820': attribute type 7 has an invalid length. [ 175.916533][ T9517] __nla_validate_parse: 82 callbacks suppressed [ 175.916552][ T9517] netlink: 576 bytes leftover after parsing attributes in process `syz.2.824'. [ 175.942577][ T9517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.824'. [ 176.035458][ T9524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.825'. [ 176.139636][ T9528] netlink: 'syz.0.826': attribute type 1 has an invalid length. [ 176.147430][ T9528] netlink: 244 bytes leftover after parsing attributes in process `syz.0.826'. [ 176.423955][ T9533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.827'. [ 176.451067][ T9533] net_ratelimit: 49 callbacks suppressed [ 176.451082][ T9533] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 176.491436][ T9533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.827'. [ 176.643046][ T9544] netlink: 108 bytes leftover after parsing attributes in process `syz.3.830'. [ 176.657890][ T9544] netlink: 72 bytes leftover after parsing attributes in process `syz.3.830'. [ 176.951104][ T9547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.831'. [ 177.119308][ T9547] bond2 (unregistering): Released all slaves [ 177.448410][ T9570] netlink: 88 bytes leftover after parsing attributes in process `syz.2.837'. [ 177.470603][ T9570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.489327][ T9574] syzkaller1: entered promiscuous mode [ 177.495082][ T9574] syzkaller1: entered allmulticast mode [ 177.504441][ T9574] netlink: 'syz.0.836': attribute type 10 has an invalid length. [ 177.516162][ T9574] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 177.653189][ T9580] netlink: 'syz.4.838': attribute type 14 has an invalid length. [ 177.680556][ T9580] netlink: 'syz.4.838': attribute type 12 has an invalid length. [ 177.952010][ T9599] geneve3: entered promiscuous mode [ 177.988766][ T3524] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 178.030630][ T3524] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 178.060933][ T3524] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 178.084823][ T3524] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 178.132534][ T9607] nbd: must specify at least one socket [ 178.142361][ T9605] ip6_vti0 speed is unknown, defaulting to 1000 [ 178.293540][ T9615] dummy0: left allmulticast mode [ 178.315119][ T9615] bridge0: port 4(dummy0) entered disabled state [ 178.376436][ T9615] bridge_slave_0: left allmulticast mode [ 178.383182][ T9615] bridge_slave_0: left promiscuous mode [ 178.389291][ T9615] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.403445][ T9615] bridge_slave_1: left allmulticast mode [ 178.410385][ T9615] bridge_slave_1: left promiscuous mode [ 178.418247][ T9615] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.435356][ T9615] bond0: (slave bond_slave_0): Releasing backup interface [ 178.459641][ T9615] bond0: (slave bond_slave_1): Releasing backup interface [ 178.494738][ T9615] `: Port device team_slave_0 removed [ 178.518772][ T9615] `: Port device team_slave_1 removed [ 178.530791][ T9615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.539373][ T9615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.548619][ T9615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.556224][ T9615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.565408][ T9615] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 178.594953][ T9613] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 178.650567][ T9621] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 178.671875][ T9621] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 178.692779][ T9621] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 178.732049][ T9622] veth0: entered promiscuous mode [ 178.732153][ T9609] ip6_vti0 speed is unknown, defaulting to 1000 [ 178.761683][ T9617] veth0: left promiscuous mode [ 179.349172][ T9654] netlink: 'syz.3.860': attribute type 1 has an invalid length. [ 179.500761][ T9652] ip6_vti0 speed is unknown, defaulting to 1000 [ 179.824374][ T9653] ip6_vti0 speed is unknown, defaulting to 1000 [ 180.210159][ T9679] sctp: [Deprecated]: syz.3.865 (pid 9679) Use of int in maxseg socket option. [ 180.210159][ T9679] Use struct sctp_assoc_value instead [ 180.255112][ T9643] ip6_vti0 speed is unknown, defaulting to 1000 [ 180.273099][ T9681] tipc: Enabled bearer , priority 0 [ 180.286522][ T9680] tipc: Disabling bearer [ 180.928719][ T9695] __nla_validate_parse: 14 callbacks suppressed [ 180.928738][ T9695] netlink: 40 bytes leftover after parsing attributes in process `syz.1.870'. [ 181.093250][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.872'. [ 181.250327][ T9703] netlink: 36 bytes leftover after parsing attributes in process `syz.1.873'. [ 181.997007][ T9730] netlink: 44 bytes leftover after parsing attributes in process `syz.4.880'. [ 182.347867][ T9744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.885'. [ 182.435174][ T9739] xt_hashlimit: max too large, truncated to 1048576 [ 182.583501][ T9753] tipc: Enabled bearer , priority 0 [ 182.602520][ T9753] syzkaller0: entered promiscuous mode [ 182.621798][ T9753] syzkaller0: entered allmulticast mode [ 182.689620][ T9753] tipc: Resetting bearer [ 182.713611][ T9752] tipc: Resetting bearer [ 182.788331][ T9752] tipc: Disabling bearer [ 182.927401][ T9767] netlink: 'syz.3.894': attribute type 3 has an invalid length. [ 182.960000][ T9767] netlink: 3 bytes leftover after parsing attributes in process `syz.3.894'. [ 183.038581][ T9779] netlink: 96 bytes leftover after parsing attributes in process `syz.4.897'. [ 183.079294][ T9779] vlan0: entered allmulticast mode [ 183.086786][ T9779] gretap0: entered allmulticast mode [ 183.280249][ T9799] xt_TCPMSS: Only works on TCP SYN packets [ 183.346598][ T9802] netlink: 40 bytes leftover after parsing attributes in process `syz.3.904'. [ 183.387181][ T9803] netlink: 40 bytes leftover after parsing attributes in process `syz.3.904'. [ 183.532128][ T9812] netlink: 32 bytes leftover after parsing attributes in process `syz.3.907'. [ 184.440658][ T9842] netlink: 'syz.2.914': attribute type 1 has an invalid length. [ 184.517279][ T9842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.598676][ T9846] x_tables: duplicate underflow at hook 1 [ 184.638799][ T9850] netlink: 'syz.3.917': attribute type 10 has an invalid length. [ 185.567668][ T9881] macsec1: entered allmulticast mode [ 185.588573][ T9881] macsec0: entered allmulticast mode [ 185.605030][ T9881] veth1_macvtap: entered allmulticast mode [ 186.143698][ T9909] __nla_validate_parse: 2 callbacks suppressed [ 186.143717][ T9909] netlink: 28 bytes leftover after parsing attributes in process `syz.4.931'. [ 186.236874][ T9913] netlink: 'syz.3.933': attribute type 11 has an invalid length. [ 186.244705][ T9913] netlink: 'syz.3.933': attribute type 23 has an invalid length. [ 186.266131][ T9913] netlink: 224 bytes leftover after parsing attributes in process `syz.3.933'. [ 186.779681][ T9943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.942'. [ 186.866386][ T9948] 8021q: VLANs not supported on syzkaller1 [ 186.925911][ T9950] netlink: 'syz.4.944': attribute type 13 has an invalid length. [ 186.948181][ T9950] netlink: 'syz.4.944': attribute type 17 has an invalid length. [ 186.976077][ T9952] tipc: Enabled bearer , priority 0 [ 187.019246][ T9952] syzkaller0: entered promiscuous mode [ 187.021289][ T9931] netlink: 'syz.1.936': attribute type 10 has an invalid length. [ 187.033926][ T9952] syzkaller0: entered allmulticast mode [ 187.053957][ T9931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.067117][ T9952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.945'. [ 187.077080][ T9952] nbd: must specify a size in bytes for the device [ 187.091086][ T9931] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 187.101263][ T9950] ip6_vti0 speed is unknown, defaulting to 1000 [ 187.112922][ T9952] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 187.140433][ T9957] netlink: 76 bytes leftover after parsing attributes in process `syz.3.947'. [ 187.163753][ T9952] tipc: Resetting bearer [ 187.198949][ T9951] tipc: Resetting bearer [ 187.214150][ T9951] tipc: Disabling bearer [ 187.719287][ T9966] netlink: 28 bytes leftover after parsing attributes in process `syz.1.951'. [ 188.148397][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.956'. [ 188.346017][ T9986] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.794455][ T9982] bridge0: port 1(1¾x9ÿ) entered disabled state [ 189.114632][ T9982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.143510][ T9982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.441393][T10010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.466132][ T6410] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.523661][ T6410] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.555967][ T6406] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.569929][ T6406] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.666426][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.969'. [ 189.817139][T10051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.971'. [ 189.831548][T10053] tipc: Enabled bearer , priority 0 [ 189.854548][T10051] netlink: 24 bytes leftover after parsing attributes in process `syz.4.971'. [ 189.873135][T10060] tipc: Enabling of bearer rejected, failed to enable media [ 189.883084][T10053] syzkaller0: entered promiscuous mode [ 189.892655][T10053] syzkaller0: entered allmulticast mode [ 189.924377][T10053] tipc: Resetting bearer [ 189.943045][T10065] ip6erspan0: entered allmulticast mode [ 189.967463][T10052] tipc: Resetting bearer [ 190.020178][T10052] tipc: Disabling bearer [ 190.139952][T10076] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 190.167046][T10083] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 190.669476][T10107] bond2 (unregistering): Released all slaves [ 190.940923][T10128] netlink: 'syz.1.995': attribute type 1 has an invalid length. [ 190.948934][T10128] netlink: 'syz.1.995': attribute type 1 has an invalid length. [ 190.970851][T10126] vxlan0: entered promiscuous mode [ 190.976110][T10126] vxlan0: entered allmulticast mode [ 190.992617][ T6406] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.002531][ T6406] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.018674][ T6406] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.044655][ T6406] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.081392][T10133] netlink: 'syz.1.996': attribute type 11 has an invalid length. [ 191.126360][T10133] netlink: 'syz.1.996': attribute type 11 has an invalid length. [ 191.160825][T10133] __nla_validate_parse: 6 callbacks suppressed [ 191.160842][T10133] netlink: 204 bytes leftover after parsing attributes in process `syz.1.996'. [ 191.458106][T10148] netlink: 'syz.1.1002': attribute type 8 has an invalid length. [ 191.579545][T10160] netlink: 'syz.3.1003': attribute type 4 has an invalid length. [ 191.648740][T10164] No such timeout policy "syz0" [ 191.708888][T10168] xt_l2tp: v2 doesn't support IP mode [ 191.726457][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'. [ 192.062730][T10183] syzkaller0: entered promiscuous mode [ 192.078753][T10183] syzkaller0: entered allmulticast mode [ 192.131838][T10194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1019'. [ 192.340376][T10209] netlink: 'syz.4.1021': attribute type 4 has an invalid length. [ 192.367001][T10209] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1021'. [ 192.484011][T10217] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1025'. [ 192.494273][T10217] netlink: 'syz.3.1025': attribute type 33 has an invalid length. [ 192.506535][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 192.523844][T10217] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1025'. [ 192.546132][T10217] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1025'. [ 192.575513][T10217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1025'. [ 192.585272][T10217] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1025'. [ 192.722623][T10230] bridge_slave_0: entered promiscuous mode [ 192.868348][T10250] tipc: New replicast peer: 255.255.255.255 [ 192.875485][T10250] tipc: Enabled bearer , priority 10 [ 192.883962][T10250] netlink: 'syz.1.1031': attribute type 11 has an invalid length. [ 192.893315][T10250] netlink: 'syz.1.1031': attribute type 11 has an invalid length. [ 192.902543][T10250] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1031'. [ 193.100460][T10250] bridge5: entered promiscuous mode [ 193.119487][T10250] bridge5: entered allmulticast mode [ 193.705671][T10291] ip6_vti0 speed is unknown, defaulting to 1000 [ 193.997213][ T107] tipc: Node number set to 350169295 [ 194.257293][T10333] nbd: socks must be embedded in a SOCK_ITEM attr [ 194.353584][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.638213][T10246] udevd[10246]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 195.355602][T10372] xt_hashlimit: overflow, try lower: 3/0 [ 195.523668][T10371] ip6_vti0 speed is unknown, defaulting to 1000 [ 195.531264][T10379] syzkaller0: entered promiscuous mode [ 195.536913][T10379] syzkaller0: entered allmulticast mode [ 196.260885][T10417] bond6: Unable to set down delay as MII monitoring is disabled [ 196.301206][T10417] bond6 (unregistering): Released all slaves [ 196.411109][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 196.411157][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 196.417720][ T5847] Bluetooth: hci0: command 0x0401 tx timeout [ 196.423412][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 196.505153][T10415] ip6_vti0 speed is unknown, defaulting to 1000 [ 197.397993][T10474] gretap1: entered allmulticast mode [ 197.531818][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 197.627126][T10484] __nla_validate_parse: 7 callbacks suppressed [ 197.627145][T10484] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1075'. [ 197.723072][T10484] nbd: must specify at least one socket [ 198.019689][T10495] ip6_vti0 speed is unknown, defaulting to 1000 [ 198.951654][T10496] ip6_vti0 speed is unknown, defaulting to 1000 [ 199.471487][T10566] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1087'. [ 199.540962][T10571] netlink: 'syz.2.1088': attribute type 20 has an invalid length. [ 199.561457][T10569] macvlan2: entered promiscuous mode [ 199.568224][T10569] batman_adv: batadv0: Adding interface: macvlan2 [ 199.574722][T10569] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.606244][T10569] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 199.751440][T10576] syzkaller0: entered promiscuous mode [ 199.791301][T10576] syzkaller0: entered allmulticast mode [ 199.807464][T10574] tipc: Enabled bearer , priority 0 [ 199.840886][T10588] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 199.869943][T10574] tipc: Resetting bearer [ 199.886405][T10588] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1093'. [ 199.928733][T10574] tipc: Disabling bearer [ 200.109107][T10595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1096'. [ 200.122294][T10595] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 200.175760][T10604] netlink: 'syz.3.1095': attribute type 10 has an invalid length. [ 200.222840][T10604] 8021q: adding VLAN 0 to HW filter on device ` [ 200.252471][T10604] bond0: (slave `): Enslaving as an active interface with an up link [ 200.271395][T10607] netlink: 'syz.0.1098': attribute type 13 has an invalid length. [ 200.357875][T10603] ip6_vti0 speed is unknown, defaulting to 1000 [ 200.771925][T10633] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1106'. [ 200.781743][T10624] tipc: Enabling of bearer rejected, failed to enable media [ 200.782734][T10635] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1106'. [ 200.874238][T10639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1107'. [ 200.900332][T10641] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1108'. [ 200.911072][T10641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1108'. [ 200.936792][T10641] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1108'. [ 201.357939][T10665] netlink: 'syz.1.1114': attribute type 66 has an invalid length. [ 201.379200][T10670] ªªªªªª: renamed from wg2 (while UP) [ 201.817021][T10699] tipc: Enabled bearer , priority 0 [ 201.824425][T10699] syzkaller0: entered promiscuous mode [ 201.830093][T10699] syzkaller0: entered allmulticast mode [ 201.879657][T10699] tipc: Resetting bearer [ 201.919447][T10709] tipc: Resetting bearer [ 201.936266][T10709] tipc: Disabling bearer [ 201.961484][T10705] block nbd0: shutting down sockets [ 201.982171][T10715] veth0_to_bridge: entered promiscuous mode [ 202.097267][T10715] veth0_to_bridge: left promiscuous mode [ 202.154076][T10730] syzkaller0: entered promiscuous mode [ 202.160250][T10730] syzkaller0: entered allmulticast mode [ 202.393285][T10746] ip6_vti0 speed is unknown, defaulting to 1000 [ 202.402308][T10747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.628126][T10762] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 202.865757][T10761] ip6_vti0 speed is unknown, defaulting to 1000 [ 203.073860][T10790] __nla_validate_parse: 9 callbacks suppressed [ 203.073878][T10790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1148'. [ 203.322144][T10800] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1151'. [ 203.331428][T10797] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1150'. [ 203.336506][T10801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.497421][T10807] block nbd0: Unsupported socket: should be TCP or UNIX. [ 203.525875][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1155'. [ 203.582009][T10809] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 203.595957][T10809] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 203.858339][T10816] ip6_vti0 speed is unknown, defaulting to 1000 [ 204.613665][T10851] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1160'. [ 205.599800][T10893] ip6_vti0 speed is unknown, defaulting to 1000 [ 205.662863][T10905] netlink: 'syz.3.1171': attribute type 46 has an invalid length. [ 205.854991][T10909] gre0: entered promiscuous mode [ 205.884398][T10909] gre0: entered allmulticast mode [ 205.998066][T10885] ip6_vti0 speed is unknown, defaulting to 1000 [ 206.046422][T10919] bond0: Caught tx_queue_len zero misconfig [ 206.479312][T10930] tipc: Enabled bearer , priority 0 [ 206.508946][T10930] x_tables: unsorted entry at hook 3 [ 206.557796][T10943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1183'. [ 206.582262][T10943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1183'. [ 206.595104][T10930] tipc: Resetting bearer [ 206.608580][T10934] syz_tun: entered allmulticast mode [ 206.673008][T10948] netlink: 'syz.3.1184': attribute type 13 has an invalid length. [ 206.694196][T10932] syz_tun: left allmulticast mode [ 206.700768][T10948] netlink: 'syz.3.1184': attribute type 17 has an invalid length. [ 206.797870][T10955] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1185'. [ 206.951453][T10957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1185'. [ 207.151131][T10951] ip6_vti0 speed is unknown, defaulting to 1000 [ 207.158717][T10966] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1188'. [ 207.395791][T10974] chnl_net:caif_netlink_parms(): no params data found [ 207.601748][ T5839] tipc: Node number set to 1688860003 [ 208.287296][T10988] ip6_vti0 speed is unknown, defaulting to 1000 [ 208.577033][T11003] netlink: 'syz.3.1199': attribute type 10 has an invalid length. [ 208.586391][T11003] __nla_validate_parse: 2 callbacks suppressed [ 208.596460][T11003] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1199'. [ 208.627523][T11003] batadv_slave_1: entered promiscuous mode [ 208.658598][T11003] bridge0: port 1(batadv_slave_1) entered blocking state [ 208.665772][T11003] bridge0: port 1(batadv_slave_1) entered disabled state [ 208.684254][T11003] batadv_slave_1: entered allmulticast mode [ 208.694601][T11003] bridge0: port 1(batadv_slave_1) entered blocking state [ 208.701856][T11003] bridge0: port 1(batadv_slave_1) entered forwarding state [ 208.707090][T11007] No such timeout policy "syz1" [ 208.795810][T11008] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.889299][ T30] audit: type=1800 audit(1766851966.669:3): pid=11009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1200" name="memory.events" dev="tmpfs" ino=1168 res=0 errno=0 [ 208.992685][T11020] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20000 [ 209.217548][T11017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1202'. [ 209.232147][T11036] syzkaller0: entered promiscuous mode [ 209.250883][T11036] syzkaller0: entered allmulticast mode [ 209.352771][T11041] tipc: Enabled bearer , priority 0 [ 209.375545][T11043] bond0: (slave syz_tun): Releasing backup interface [ 209.413208][T11043] bridge_slave_0: left allmulticast mode [ 209.428839][T11043] bridge_slave_0: left promiscuous mode [ 209.448419][T11043] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.499163][T11043] bridge_slave_1: left allmulticast mode [ 209.515447][T11043] bridge_slave_1: left promiscuous mode [ 209.538845][T11043] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.606193][T11043] bond0: (slave bond_slave_0): Releasing backup interface [ 209.640360][T11043] team0: Port device team_slave_0 removed [ 209.697706][T11043] team0: Port device team_slave_1 removed [ 209.705932][T11043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.779560][T11043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.782026][T11069] netlink: zone id is out of range [ 209.794646][T11043] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 209.795068][T11069] netlink: zone id is out of range [ 209.819290][T11035] tipc: Resetting bearer [ 209.819424][T11069] netlink: zone id is out of range [ 209.838415][T11069] netlink: zone id is out of range [ 209.843706][T11069] netlink: zone id is out of range [ 209.850088][T11069] netlink: zone id is out of range [ 209.855346][T11069] netlink: zone id is out of range [ 209.860863][T11069] netlink: zone id is out of range [ 209.862066][T11035] tipc: Disabling bearer [ 209.866261][T11069] netlink: zone id is out of range [ 209.898256][T11054] tipc: Enabled bearer , priority 0 [ 209.978082][T11054] syzkaller0: entered promiscuous mode [ 209.983611][T11054] syzkaller0: entered allmulticast mode [ 210.022124][T11062] tipc: Enabling of bearer rejected, already enabled [ 210.122368][T11053] tipc: Resetting bearer [ 210.725729][T11100] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1220'. [ 210.754381][T11100] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1220'. [ 212.006606][T11053] tipc: Disabling bearer [ 212.016441][T11101] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1220'. [ 212.177085][T11119] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1224'. [ 212.202806][T11119] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1224'. [ 212.313487][T11127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1228'. [ 212.487641][T11141] netlink: 'syz.2.1231': attribute type 13 has an invalid length. [ 212.495502][T11141] netlink: 'syz.2.1231': attribute type 17 has an invalid length. [ 213.135173][T11154] netlink: 'syz.4.1234': attribute type 39 has an invalid length. [ 213.212264][T11154] hsr_slave_1 (unregistering): left promiscuous mode [ 213.471651][T11182] netlink: 'syz.3.1238': attribute type 4 has an invalid length. [ 213.542320][T11186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1239'. [ 213.708675][T11192] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1244'. [ 213.889678][T11202] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1245'. [ 213.916928][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1245'. [ 214.041579][T11195] netem: change failed [ 214.216380][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1248'. [ 214.227118][T11196] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1244'. [ 214.250076][T11216] netlink: 'syz.2.1249': attribute type 1 has an invalid length. [ 214.264381][T11218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1248'. [ 214.312766][T11216] 8021q: adding VLAN 0 to HW filter on device bond4 [ 214.333068][T11222] netlink: 'syz.1.1250': attribute type 10 has an invalid length. [ 214.354765][T11222] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1250'. [ 214.367421][T11223] bond4: (slave gretap1): making interface the new active one [ 214.379599][T11223] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 214.457774][T11223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1249'. [ 214.474857][T11237] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 3, id = 0 [ 214.669242][T11223] bond4 (unregistering): (slave gretap1): Releasing active interface [ 214.702522][T11223] bond4 (unregistering): Released all slaves [ 214.761552][T11247] tipc: Enabled bearer , priority 0 [ 214.800382][T11247] syzkaller0: entered promiscuous mode [ 214.805896][T11247] syzkaller0: entered allmulticast mode [ 214.970467][T11268] tipc: Resetting bearer [ 215.002376][ T30] audit: type=1107 audit(1766851972.779:4): pid=11269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 215.016946][T11270] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1261'. [ 216.254665][T11246] tipc: Resetting bearer [ 216.327875][T11246] tipc: Disabling bearer [ 216.357348][ T6029] tipc: Node number set to 3262642184 [ 216.476134][T11287] ip6_vti0 speed is unknown, defaulting to 1000 [ 216.569758][T11295] netlink: 'syz.3.1267': attribute type 10 has an invalid length. [ 216.671576][T11292] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1265'. [ 216.997819][T11315] bond0: (slave `): Releasing backup interface [ 217.041526][T11315] batadv_slave_1: left allmulticast mode [ 217.051514][T11324] netlink: 'syz.3.1272': attribute type 10 has an invalid length. [ 217.076826][T11315] bridge0: port 1(batadv_slave_1) entered disabled state [ 217.099949][T11315] net_ratelimit: 48 callbacks suppressed [ 217.099968][T11315] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 217.210408][T11324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.239693][T11324] bond0: (slave wlan1): Opening slave failed [ 217.324145][T11331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.797216][T11344] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 217.876767][T11344] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 217.942842][T11339] bond6: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 217.969179][T11339] bond6 (unregistering): Released all slaves [ 218.357814][T11354] tipc: Failed to remove unknown binding: 66,1,1/1688860003:724455152/724455154 [ 218.383941][T11354] tipc: Failed to remove unknown binding: 66,1,1/1688860003:724455152/724455154 [ 218.415222][T11354] tipc: Failed to remove unknown binding: 66,1,1/1688860003:724455152/724455154 [ 218.571222][T11359] ip6_vti0 speed is unknown, defaulting to 1000 [ 218.856933][T11368] __nla_validate_parse: 5 callbacks suppressed [ 218.856952][T11368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1285'. [ 219.073316][T11373] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1286'. [ 219.439163][T11386] netlink: 'syz.4.1289': attribute type 24 has an invalid length. [ 219.611032][T11388] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 219.630364][T11388] bridge2: entered allmulticast mode [ 219.814156][T11407] batadv_slave_0: entered promiscuous mode [ 219.833843][T11407] batadv_slave_0: entered allmulticast mode [ 220.135203][T11422] netlink: 'syz.0.1301': attribute type 1 has an invalid length. [ 220.170615][T11422] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1301'. [ 220.274957][T11429] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 220.293778][T11429] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 220.304463][T11431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1304'. [ 220.319350][T11431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1304'. [ 220.332176][T11431] netlink: 58 bytes leftover after parsing attributes in process `syz.0.1304'. [ 220.396037][T11440] netlink: 'syz.4.1307': attribute type 1 has an invalid length. [ 220.405837][T11440] netlink: 'syz.4.1307': attribute type 3 has an invalid length. [ 220.417220][T11440] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1307'. [ 220.474402][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1308'. [ 220.618031][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1306'. [ 220.663260][T11461] tipc: Enabled bearer , priority 0 [ 220.684271][T11461] syzkaller0: entered promiscuous mode [ 220.690313][T11461] syzkaller0: entered allmulticast mode [ 220.875269][T11472] syzkaller1: entered promiscuous mode [ 220.881324][T11472] syzkaller1: entered allmulticast mode [ 221.205456][T11477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1318'. [ 221.420536][T11453] tipc: Resetting bearer [ 221.449351][T11453] tipc: Disabling bearer [ 221.459810][T11488] ip6_vti0 speed is unknown, defaulting to 1000 [ 221.599034][T11493] netlink: 'syz.1.1322': attribute type 1 has an invalid length. [ 221.609162][T11493] netlink: 'syz.1.1322': attribute type 12 has an invalid length. [ 222.022369][T11513] x_tables: unsorted entry at hook 2 [ 222.143561][T11522] xt_l2tp: v2 doesn't support IP mode [ 222.208089][T11519] syzkaller0: entered promiscuous mode [ 222.213621][T11519] syzkaller0: entered allmulticast mode [ 222.548269][ T5838] Bluetooth: hci4: link tx timeout [ 222.555624][ T5838] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 222.752537][T11546] netlink: 'syz.2.1335': attribute type 12 has an invalid length. [ 222.820119][T11548] netlink: 'syz.2.1337': attribute type 13 has an invalid length. [ 222.833074][T11548] macvtap0: entered promiscuous mode [ 222.849603][T11548] macvtap0: refused to change device tx_queue_len [ 223.120993][T11560] tipc: Enabling of bearer rejected, already enabled [ 223.149817][T11560] syzkaller0: mtu less than device minimum [ 223.170790][T11562] batadv_slave_0: entered promiscuous mode [ 223.196479][T11561] batadv_slave_0: left promiscuous mode [ 223.493070][T11591] netlink: 'syz.2.1348': attribute type 2 has an invalid length. [ 223.545939][T11591] !: entered promiscuous mode [ 223.561336][T11595] ¾x9ÿ: left allmulticast mode [ 223.567328][T11591] netlink: 'syz.2.1348': attribute type 2 has an invalid length. [ 223.582579][T11595] ¾x9ÿ: left promiscuous mode [ 223.589134][T11595] bridge0: port 1(1¾x9ÿ) entered disabled state [ 223.599569][T11595] bridge_slave_1: left allmulticast mode [ 223.605487][T11595] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.636249][T11595] bond0: (slave bond_slave_0): Releasing backup interface [ 223.649112][T11595] bond0: (slave bond_slave_1): Releasing backup interface [ 223.668703][T11595] team0: Port device team_slave_0 removed [ 223.679887][T11595] team0: Port device team_slave_1 removed [ 223.690551][T11595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.702047][T11595] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 223.719630][T11591] !: left promiscuous mode [ 223.827783][T11610] xt_TCPMSS: Only works on TCP SYN packets [ 223.894072][T11613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.923329][T11616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.971417][T11620] pim6reg: entered allmulticast mode [ 224.010793][T11618] pim6reg: left allmulticast mode [ 224.068396][T11624] __nla_validate_parse: 7 callbacks suppressed [ 224.068415][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1360'. [ 224.074065][T11622] ip6_vti0 speed is unknown, defaulting to 1000 [ 224.107508][T11624] veth7: entered promiscuous mode [ 224.182370][T11631] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1362'. [ 224.232122][T11624] bond4: option mode: invalid value (254) [ 224.254685][T11624] bond4 (unregistering): Released all slaves [ 224.284888][T11631] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1362'. [ 224.570458][T11646] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1364'. [ 224.647563][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 224.806080][T11651] netlink: 'syz.3.1365': attribute type 6 has an invalid length. [ 224.866934][T11636] ip6_vti0 speed is unknown, defaulting to 1000 [ 224.970600][T11658] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 225.026206][T11658] batman_adv: batadv0: Adding interface: gretap2 [ 225.033094][T11658] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.060327][T11658] batman_adv: batadv0: Interface activated: gretap2 [ 225.222181][T11668] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1369'. [ 225.233894][T11668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1369'. [ 225.239778][T11655] ip6_vti0 speed is unknown, defaulting to 1000 [ 225.252723][T11669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1369'. [ 225.408069][T11673] netlink: zone id is out of range [ 225.413233][T11673] netlink: zone id is out of range [ 225.420889][T11669] netlink: zone id is out of range [ 225.434135][T11669] netlink: zone id is out of range [ 225.460566][T11669] netlink: set zone limit has 8 unknown bytes [ 225.467166][T11673] netlink: set zone limit has 8 unknown bytes [ 225.622273][T11682] netlink: 'syz.0.1372': attribute type 1 has an invalid length. [ 225.944572][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.284189][T11697] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1377'. [ 226.415912][T11704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1379'. [ 226.488391][T11704] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1379'. [ 226.624754][T11717] netlink: 'syz.3.1382': attribute type 10 has an invalid length. [ 226.700585][T11724] netlink: 'syz.3.1382': attribute type 10 has an invalid length. [ 226.754512][T11718] syzkaller0: entered promiscuous mode [ 226.765774][T11718] syzkaller0: entered allmulticast mode [ 226.774667][T11717] batadv0: entered allmulticast mode [ 226.791017][T11724] batadv0: entered promiscuous mode [ 226.799997][T11724] bridge0: port 1(batadv0) entered blocking state [ 226.810546][T11724] bridge0: port 1(batadv0) entered disabled state [ 227.055015][T11738] bond6: option fail_over_mac: invalid value (127) [ 227.073654][T11738] bond6 (unregistering): Released all slaves [ 227.189483][T11745] ip6_vti0 speed is unknown, defaulting to 1000 [ 228.983680][T11755] ip6_vti0 speed is unknown, defaulting to 1000 [ 229.157560][T11776] netlink: 'syz.1.1396': attribute type 83 has an invalid length. [ 229.375614][T11787] __nla_validate_parse: 6 callbacks suppressed [ 229.375631][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1399'. [ 229.401408][T11786] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1399'. [ 229.479865][T11784] syzkaller0: entered promiscuous mode [ 229.486143][T11784] syzkaller0: entered allmulticast mode [ 229.560630][T11792] : entered promiscuous mode [ 230.064228][T11812] ip6gretap3: entered allmulticast mode [ 230.107463][T11828] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1407'. [ 230.303261][T11844] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1413'. [ 230.443825][T11854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1414'. [ 230.466395][T11857] tipc: Enabling of bearer rejected, failed to enable media [ 230.512910][T11861] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1414'. [ 231.042730][T11880] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1421'. [ 231.161673][T11887] tipc: Enabled bearer , priority 0 [ 231.188045][T11887] syzkaller0: entered promiscuous mode [ 231.212640][T11887] syzkaller0: entered allmulticast mode [ 231.255948][T11887] tipc: Resetting bearer [ 231.273259][T11897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1425'. [ 231.350321][T11885] tipc: Resetting bearer [ 231.430225][T11885] tipc: Disabling bearer [ 231.736395][T11926] pim6reg1: entered promiscuous mode [ 231.741935][T11926] pim6reg1: entered allmulticast mode [ 231.831798][T11928] netlink: 'syz.2.1432': attribute type 83 has an invalid length. [ 231.857863][T11928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 231.895752][T11930] ip6_vti0 speed is unknown, defaulting to 1000 [ 232.079521][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1435'. [ 232.204546][T11931] ip6_vti0 speed is unknown, defaulting to 1000 [ 232.369698][T11947] syzkaller0: entered promiscuous mode [ 232.396935][T11947] syzkaller0: entered allmulticast mode [ 232.490003][T11947] netlink: 'syz.2.1437': attribute type 1 has an invalid length. [ 232.618559][T11947] 8021q: adding VLAN 0 to HW filter on device bond4 [ 233.093491][T11965] netlink: 'syz.2.1443': attribute type 27 has an invalid length. [ 233.122777][T11965] netlink: 'syz.2.1443': attribute type 4 has an invalid length. [ 233.553735][T11980] ip6_vti0 speed is unknown, defaulting to 1000 [ 233.575472][T11987] nft_compat: unsupported protocol 0 [ 233.690089][T11992] netlink: 'syz.1.1448': attribute type 10 has an invalid length. [ 234.064333][T11983] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 234.077781][T11992] team0: Port device syz_tun added [ 234.292633][T12003] net_ratelimit: 1 callbacks suppressed [ 234.292652][T12003] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 234.342561][T12005] ip6_vti0 speed is unknown, defaulting to 1000 [ 234.381505][T12012] tipc: Enabled bearer , priority 0 [ 234.404930][T12003] __nla_validate_parse: 1 callbacks suppressed [ 234.404947][T12003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1454'. [ 234.424821][T12011] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1455'. [ 234.427712][T12012] syzkaller0: entered promiscuous mode [ 234.436962][T12003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1454'. [ 234.465776][T12012] syzkaller0: entered allmulticast mode [ 234.642466][T12020] tipc: Resetting bearer [ 234.670316][T12010] tipc: Resetting bearer [ 234.838828][T12010] tipc: Disabling bearer [ 235.026833][T12043] netlink: 'syz.3.1462': attribute type 21 has an invalid length. [ 235.053486][T12045] netlink: 'syz.0.1464': attribute type 13 has an invalid length. [ 235.077895][T12043] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1462'. [ 235.459604][T12073] netlink: 'syz.4.1472': attribute type 4 has an invalid length. [ 235.495156][T12073] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1472'. [ 235.580593][T12082] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1473'. [ 235.605515][T12086] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1475'. [ 236.348482][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1482'. [ 236.392617][T12113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1482'. [ 236.407601][T12113] netlink: 'syz.1.1482': attribute type 15 has an invalid length. [ 236.532999][T12119] netlink: 'syz.0.1483': attribute type 13 has an invalid length. [ 236.774363][T12125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1484'. [ 238.680724][T12172] netlink: 'syz.1.1495': attribute type 4 has an invalid length. [ 238.919571][T12200] tipc: Enabled bearer , priority 10 [ 238.931132][T12190] ip6_vti0 speed is unknown, defaulting to 1000 [ 238.977771][T12200] netlink: 'syz.4.1503': attribute type 72 has an invalid length. [ 240.594339][T12298] netlink: 'syz.2.1535': attribute type 1 has an invalid length. [ 240.652466][T12307] netlink: 'syz.0.1538': attribute type 13 has an invalid length. [ 240.658731][T12298] 8021q: adding VLAN 0 to HW filter on device bond5 [ 240.677830][T12307] netlink: 'syz.0.1538': attribute type 17 has an invalid length. [ 240.707871][T12311] bond5: (slave geneve3): making interface the new active one [ 240.736983][T12311] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 240.758113][T12317] netlink: 'syz.4.1539': attribute type 1 has an invalid length. [ 240.772663][T12317] __nla_validate_parse: 5 callbacks suppressed [ 240.772679][T12317] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1539'. [ 240.792337][T12318] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1540'. [ 240.846233][T12322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1541'. [ 240.943484][ T6423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.952711][ T6423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.962025][T12329] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1543'. [ 240.998528][T12315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1540'. [ 241.251191][T12340] syzkaller0: entered promiscuous mode [ 241.256933][T12340] syzkaller0: entered allmulticast mode [ 241.338235][T12350] batadv1: entered promiscuous mode [ 241.424566][T12352] netlink: 'syz.4.1551': attribute type 30 has an invalid length. [ 241.433022][T12352] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1551'. [ 241.470302][T12352] bond1: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 241.482612][T12352] bond1 (unregistering): Released all slaves [ 241.626082][T12353] ip6_vti0 speed is unknown, defaulting to 1000 [ 241.672471][T12370] netlink: 'syz.3.1555': attribute type 30 has an invalid length. [ 241.680702][T12370] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1555'. [ 241.765404][T12370] bond6: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 241.792373][T12370] bond6 (unregistering): Released all slaves [ 242.084563][T12387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1559'. [ 242.319603][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1562'. [ 242.487989][T12406] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 242.501215][T12406] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 242.566254][T12416] netlink: 'syz.2.1566': attribute type 9 has an invalid length. [ 242.599059][T12416] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1566'. [ 242.805922][T12427] veth0_to_bridge: entered promiscuous mode [ 242.842448][T12425] veth0_to_bridge: left promiscuous mode [ 243.070457][T12387] infiniband !yz!: set down [ 243.083606][T12387] infiniband !yz!: added team_slave_0 [ 243.094954][T12387] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 243.097639][T12387] infiniband !yz!: Couldn't open port 1 [ 243.201519][T12387] RDS/IB: !yz!: added [ 243.215798][T12387] smc: adding ib device !yz! with port count 1 [ 243.224746][T12387] smc: ib device !yz! port 1 has no pnetid [ 243.642082][T12461] netlink: 'syz.4.1578': attribute type 1 has an invalid length. [ 246.237038][T12522] batadv0: mtu less than device minimum [ 246.316069][T12524] __nla_validate_parse: 2 callbacks suppressed [ 246.316088][T12524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1593'. [ 246.422991][T12528] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1593'. [ 246.450267][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1594'. [ 246.468058][T12524] dummy0: left allmulticast mode [ 246.481989][T12532] netlink: 'syz.3.1595': attribute type 1 has an invalid length. [ 246.505106][T12524] bridge0: port 3(dummy0) entered disabled state [ 246.534762][T12524] bridge_slave_1: left allmulticast mode [ 246.556880][T12524] bridge_slave_1: left promiscuous mode [ 246.584211][T12524] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.631008][T12524] bridge_slave_0: left allmulticast mode [ 246.638151][T12524] bridge_slave_0: left promiscuous mode [ 246.644044][T12524] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.837211][T11656] udevd[11656]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 246.901355][T12531] [†’Ì: entered promiscuous mode [ 246.965475][T12532] 8021q: adding VLAN 0 to HW filter on device bond6 [ 246.998768][T12537] vlan3: entered allmulticast mode [ 247.003938][T12537] bond6: entered allmulticast mode [ 247.072586][T12539] bond6: (slave gretap0): making interface the new active one [ 247.100655][T12539] gretap0: entered allmulticast mode [ 247.119185][T12539] bond6: (slave gretap0): Enslaving as an active interface with an up link [ 247.177144][T12545] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 247.199562][T12545] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 247.361058][T12563] ip6_vti0 speed is unknown, defaulting to 1000 [ 247.410099][T12569] syzkaller0: entered promiscuous mode [ 247.417147][T12569] syzkaller0: entered allmulticast mode [ 247.452646][ T3524] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 248.132928][T12573] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 248.159896][T12573] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 248.390638][T12601] netlink: 'syz.1.1609': attribute type 10 has an invalid length. [ 249.098743][T12619] ip6_vti0 speed is unknown, defaulting to 1000 [ 249.502987][T12631] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1617'. [ 250.411755][T12644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.924347][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1626'. [ 255.770421][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.210194][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.650474][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 395.287136][ T31] INFO: task kworker/1:3:5839 blocked for more than 143 seconds. [ 395.294913][ T31] Not tainted syzkaller #0 [ 395.300541][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 395.309394][ T31] task:kworker/1:3 state:D stack:22752 pid:5839 tgid:5839 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 395.321593][ T31] Workqueue: events rfkill_sync_work [ 395.327064][ T31] Call Trace: [ 395.330443][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 395.333389][ T31] __schedule+0x14bc/0x5000 [ 395.338032][ T31] ? __pfx___schedule+0x10/0x10 [ 395.343345][ T31] ? schedule+0x91/0x360 [ 395.347779][ T31] schedule+0x165/0x360 [ 395.351958][ T31] schedule_preempt_disabled+0x13/0x30 [ 395.357712][ T31] __mutex_lock+0x7e6/0x1350 [ 395.362324][ T31] ? __mutex_lock+0x5bb/0x1350 [ 395.367901][ T31] ? nfc_dev_down+0x3b/0x290 [ 395.376916][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 395.381992][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 395.424346][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 395.436763][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 395.442978][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 395.449925][ T31] nfc_dev_down+0x3b/0x290 [ 395.454346][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 395.460308][ T31] nfc_rfkill_set_block+0x2d/0x100 [ 395.465440][ T31] rfkill_set_block+0x1d2/0x440 [ 395.470474][ T31] rfkill_sync_work+0x114/0x200 [ 395.475352][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 395.481190][ T31] process_scheduled_works+0xad1/0x1770 [ 395.486893][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 395.492879][ T31] worker_thread+0x8a0/0xda0 [ 395.497569][ T31] kthread+0x711/0x8a0 [ 395.501650][ T31] ? __pfx_worker_thread+0x10/0x10 [ 395.506879][ T31] ? __pfx_kthread+0x10/0x10 [ 395.511481][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 395.517016][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 395.522238][ T31] ? __pfx_kthread+0x10/0x10 [ 395.526969][ T31] ret_from_fork+0x599/0xb30 [ 395.531573][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 395.536767][ T31] ? __switch_to_asm+0x39/0x70 [ 395.541979][ T31] ? __switch_to_asm+0x33/0x70 [ 395.546869][ T31] ? __pfx_kthread+0x10/0x10 [ 395.551577][ T31] ret_from_fork_asm+0x1a/0x30 [ 395.556356][ T31] [ 395.560605][ T31] INFO: task kworker/1:7:5943 blocked for more than 143 seconds. [ 395.568448][ T31] Not tainted syzkaller #0 [ 395.573381][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 395.582284][ T31] task:kworker/1:7 state:D stack:22712 pid:5943 tgid:5943 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 395.594755][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 395.601614][ T31] Call Trace: [ 395.604902][ T31] [ 395.607980][ T31] __schedule+0x14bc/0x5000 [ 395.612515][ T31] ? __pfx___schedule+0x10/0x10 [ 395.617441][ T31] ? schedule+0x91/0x360 [ 395.621702][ T31] schedule+0x165/0x360 [ 395.625849][ T31] schedule_preempt_disabled+0x13/0x30 [ 395.631536][ T31] __mutex_lock+0x7e6/0x1350 [ 395.636155][ T31] ? __mutex_lock+0x5bb/0x1350 [ 395.641075][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 395.647399][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 395.652434][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 395.658228][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 395.664046][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 395.670207][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 395.675938][ T31] process_scheduled_works+0xad1/0x1770 [ 395.681617][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 395.687750][ T31] worker_thread+0x8a0/0xda0 [ 395.692336][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 395.698869][ T31] ? __kthread_parkme+0x7b/0x200 [ 395.703832][ T31] kthread+0x711/0x8a0 [ 395.708005][ T31] ? __pfx_worker_thread+0x10/0x10 [ 395.713138][ T31] ? __pfx_kthread+0x10/0x10 [ 395.717843][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 395.723057][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 395.728318][ T31] ? __pfx_kthread+0x10/0x10 [ 395.732930][ T31] ret_from_fork+0x599/0xb30 [ 395.737765][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 395.742902][ T31] ? __switch_to_asm+0x39/0x70 [ 395.747723][ T31] ? __switch_to_asm+0x33/0x70 [ 395.752500][ T31] ? __pfx_kthread+0x10/0x10 [ 395.757177][ T31] ret_from_fork_asm+0x1a/0x30 [ 395.762052][ T31] [ 395.765102][ T31] INFO: task syz.0.1601:12565 blocked for more than 143 seconds. [ 395.772966][ T31] Not tainted syzkaller #0 [ 395.777952][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 395.786705][ T31] task:syz.0.1601 state:D stack:25920 pid:12565 tgid:12564 ppid:5829 task_flags:0x400140 flags:0x00080002 [ 395.798862][ T31] Call Trace: [ 395.802147][ T31] [ 395.805065][ T31] __schedule+0x14bc/0x5000 [ 395.809648][ T31] ? lockdep_unlock+0x89/0x120 [ 395.814422][ T31] ? __pfx___schedule+0x10/0x10 [ 395.819337][ T31] ? schedule+0x91/0x360 [ 395.823590][ T31] schedule+0x165/0x360 [ 395.827835][ T31] schedule_timeout+0x9a/0x270 [ 395.832678][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 395.838205][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 395.843433][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 395.848997][ T31] ? wait_for_completion+0x267/0x5d0 [ 395.854328][ T31] wait_for_completion+0x2bf/0x5d0 [ 395.859557][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 395.865292][ T31] ? __flush_work+0xd2/0xbc0 [ 395.869933][ T31] ? __flush_work+0xd2/0xbc0 [ 395.874533][ T31] __flush_work+0x9b9/0xbc0 [ 395.879142][ T31] ? __flush_work+0xd2/0xbc0 [ 395.883746][ T31] ? __pfx___flush_work+0x10/0x10 [ 395.888839][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 395.894136][ T31] ? __pfx___cancel_work+0x10/0x10 [ 395.899320][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 395.905048][ T31] ? __cancel_work_sync+0x5c/0x110 [ 395.910230][ T31] __cancel_work_sync+0xbe/0x110 [ 395.915177][ T31] rfkill_unregister+0x92/0x220 [ 395.920167][ T31] nfc_unregister_device+0x96/0x300 [ 395.925378][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 395.931768][ T31] virtual_ncidev_close+0x56/0x90 [ 395.936881][ T31] __fput+0x44c/0xa70 [ 395.940883][ T31] fput_close_sync+0x113/0x220 [ 395.945649][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 395.951181][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 395.956393][ T31] __x64_sys_close+0x7f/0x110 [ 395.961355][ T31] do_syscall_64+0xfa/0xf80 [ 395.965949][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.972225][ T31] ? clear_bhb_loop+0x60/0xb0 [ 395.976992][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.982912][ T31] RIP: 0033:0x7f5307b8f749 [ 395.987380][ T31] RSP: 002b:00007f5305df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 395.995842][ T31] RAX: ffffffffffffffda RBX: 00007f5307de5fa0 RCX: 00007f5307b8f749 [ 396.003948][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 396.012038][ T31] RBP: 00007f5307c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 396.020080][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.028099][ T31] R13: 00007f5307de6038 R14: 00007f5307de5fa0 R15: 00007ffc8381b968 [ 396.036166][ T31] [ 396.039306][ T31] INFO: task syz.3.1620:12642 blocked for more than 144 seconds. [ 396.049528][ T31] Not tainted syzkaller #0 [ 396.054459][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 396.063277][ T31] task:syz.3.1620 state:D stack:22824 pid:12642 tgid:12641 ppid:5828 task_flags:0x400140 flags:0x00080002 [ 396.075462][ T31] Call Trace: [ 396.078826][ T31] [ 396.081765][ T31] __schedule+0x14bc/0x5000 [ 396.086272][ T31] ? __pfx___schedule+0x10/0x10 [ 396.094223][ T31] ? schedule+0x91/0x360 [ 396.098569][ T31] schedule+0x165/0x360 [ 396.102734][ T31] schedule_preempt_disabled+0x13/0x30 [ 396.108304][ T31] __mutex_lock+0x7e6/0x1350 [ 396.112915][ T31] ? rcu_is_watching+0x15/0xb0 [ 396.117874][ T31] ? __mutex_lock+0x5bb/0x1350 [ 396.122657][ T31] ? rfkill_register+0x37/0x8e0 [ 396.127630][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 396.132667][ T31] ? netdev_run_todo+0xe1b/0xea0 [ 396.137680][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 396.142888][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 396.148264][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 396.153923][ T31] rfkill_register+0x37/0x8e0 [ 396.158763][ T31] wiphy_register+0x246a/0x2d20 [ 396.163638][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 396.169152][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 396.174618][ T31] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 396.179966][ T31] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 396.186053][ T31] ieee80211_register_hw+0x34a7/0x4110 [ 396.191592][ T31] ? ieee80211_register_hw+0x13f1/0x4110 [ 396.197354][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 396.203256][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 396.209228][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 396.215145][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 396.221581][ T31] ? __hrtimer_setup+0x181/0x200 [ 396.226536][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 396.232393][ T31] mac80211_hwsim_new_radio+0x2f76/0x5320 [ 396.238209][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 396.244275][ T31] ? __nla_validate_parse+0x2400/0x2d40 [ 396.249936][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 396.255073][ T31] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 396.260279][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 396.266023][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 396.271654][ T31] ? rcu_is_watching+0x15/0xb0 [ 396.276545][ T31] ? __nla_parse+0x40/0x60 [ 396.281043][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 396.287546][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 396.293178][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 396.299304][ T31] ? bpf_lsm_capable+0x9/0x20 [ 396.304509][ T31] ? security_capable+0x7e/0x2e0 [ 396.309521][ T31] genl_rcv_msg+0x60e/0x790 [ 396.314135][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 396.319249][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 396.324815][ T31] netlink_rcv_skb+0x208/0x470 [ 396.329719][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 396.334750][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 396.340146][ T31] ? down_read+0x274/0x2e0 [ 396.344575][ T31] ? genl_rcv+0xd/0x40 [ 396.348714][ T31] genl_rcv+0x28/0x40 [ 396.352697][ T31] netlink_unicast+0x82f/0x9e0 [ 396.357536][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 396.362834][ T31] ? netlink_sendmsg+0x642/0xb30 [ 396.367830][ T31] ? skb_put+0x11b/0x210 [ 396.372079][ T31] netlink_sendmsg+0x805/0xb30 [ 396.377027][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.382332][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 396.387353][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 396.392655][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.398438][ T31] __sock_sendmsg+0x21c/0x270 [ 396.403118][ T31] ____sys_sendmsg+0x505/0x820 [ 396.407946][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 396.413241][ T31] ? import_iovec+0x74/0xa0 [ 396.417802][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 396.422489][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 396.427768][ T31] ? futex_wake+0x4b2/0x560 [ 396.432295][ T31] ? __fget_files+0x2a/0x420 [ 396.436951][ T31] ? __fget_files+0x3a0/0x420 [ 396.441641][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 396.446571][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 396.452110][ T31] ? do_syscall_64+0xbe/0xf80 [ 396.456861][ T31] do_syscall_64+0xfa/0xf80 [ 396.461359][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.467455][ T31] ? clear_bhb_loop+0x60/0xb0 [ 396.472147][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.478129][ T31] RIP: 0033:0x7f197db8f749 [ 396.482657][ T31] RSP: 002b:00007f197ea59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.491289][ T31] RAX: ffffffffffffffda RBX: 00007f197dde5fa0 RCX: 00007f197db8f749 [ 396.499322][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 396.507574][ T31] RBP: 00007f197dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 396.515555][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.523613][ T31] R13: 00007f197dde6038 R14: 00007f197dde5fa0 R15: 00007ffc0face528 [ 396.531661][ T31] [ 396.534709][ T31] INFO: task syz.3.1620:12647 blocked for more than 144 seconds. [ 396.542528][ T31] Not tainted syzkaller #0 [ 396.547523][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 396.556188][ T31] task:syz.3.1620 state:D stack:28216 pid:12647 tgid:12641 ppid:5828 task_flags:0x400040 flags:0x00080002 [ 396.568239][ T31] Call Trace: [ 396.571525][ T31] [ 396.574444][ T31] __schedule+0x14bc/0x5000 [ 396.579044][ T31] ? __pfx___schedule+0x10/0x10 [ 396.584084][ T31] ? schedule+0x91/0x360 [ 396.588384][ T31] schedule+0x165/0x360 [ 396.592544][ T31] schedule_preempt_disabled+0x13/0x30 [ 396.598089][ T31] __mutex_lock+0x7e6/0x1350 [ 396.602699][ T31] ? __mutex_lock+0x5bb/0x1350 [ 396.607542][ T31] ? genl_rcv_msg+0x10d/0x790 [ 396.612225][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 396.617510][ T31] ? radix_tree_lookup+0x240/0x290 [ 396.622624][ T31] genl_rcv_msg+0x10d/0x790 [ 396.627206][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 396.632236][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 396.637243][ T31] netlink_rcv_skb+0x208/0x470 [ 396.642020][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 396.647095][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 396.652397][ T31] ? down_read+0x274/0x2e0 [ 396.656911][ T31] ? genl_rcv+0xd/0x40 [ 396.660994][ T31] genl_rcv+0x28/0x40 [ 396.664982][ T31] netlink_unicast+0x82f/0x9e0 [ 396.670433][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 396.675743][ T31] ? netlink_sendmsg+0x642/0xb30 [ 396.680914][ T31] ? skb_put+0x11b/0x210 [ 396.685182][ T31] netlink_sendmsg+0x805/0xb30 [ 396.690080][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.695381][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 396.700372][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 396.705673][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.711087][ T31] __sock_sendmsg+0x21c/0x270 [ 396.715784][ T31] __sys_sendto+0x3bd/0x520 [ 396.720536][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 396.725586][ T31] ? exc_page_fault+0x82/0x100 [ 396.731277][ T31] __x64_sys_sendto+0xde/0x100 [ 396.736112][ T31] do_syscall_64+0xfa/0xf80 [ 396.740840][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.746979][ T31] ? clear_bhb_loop+0x60/0xb0 [ 396.751666][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.757687][ T31] RIP: 0033:0x7f197db915dc [ 396.762142][ T31] RSP: 002b:00007f197ea36ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 396.770733][ T31] RAX: ffffffffffffffda RBX: 00007f197ea36fc0 RCX: 00007f197db915dc [ 396.778932][ T31] RDX: 0000000000000020 RSI: 00007f197ea37010 RDI: 0000000000000005 [ 396.787015][ T31] RBP: 0000000000000000 R08: 00007f197ea36f14 R09: 000000000000000c [ 396.795026][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 396.803159][ T31] R13: 00007f197ea36f68 R14: 00007f197ea37010 R15: 0000000000000000 [ 396.811601][ T31] [ 396.814642][ T31] INFO: task syz.4.1622:12650 blocked for more than 144 seconds. [ 396.822911][ T31] Not tainted syzkaller #0 [ 396.827917][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 396.836587][ T31] task:syz.4.1622 state:D stack:28552 pid:12650 tgid:12648 ppid:5834 task_flags:0x400140 flags:0x00080002 [ 396.848686][ T31] Call Trace: [ 396.851957][ T31] [ 396.854897][ T31] __schedule+0x14bc/0x5000 [ 396.859473][ T31] ? __pfx___schedule+0x10/0x10 [ 396.864332][ T31] ? schedule+0x91/0x360 [ 396.868646][ T31] schedule+0x165/0x360 [ 396.872825][ T31] schedule_preempt_disabled+0x13/0x30 [ 396.878401][ T31] __mutex_lock+0x7e6/0x1350 [ 396.883009][ T31] ? __mutex_lock+0x5bb/0x1350 [ 396.887913][ T31] ? genl_rcv_msg+0x10d/0x790 [ 396.892603][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 396.897672][ T31] ? stack_trace_save+0x9c/0xe0 [ 396.902538][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 396.907504][ T31] ? radix_tree_lookup+0x240/0x290 [ 396.912622][ T31] genl_rcv_msg+0x10d/0x790 [ 396.917226][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 396.922259][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 396.927334][ T31] netlink_rcv_skb+0x208/0x470 [ 396.932128][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 396.937236][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 396.942544][ T31] ? down_read+0x274/0x2e0 [ 396.947015][ T31] ? genl_rcv+0xd/0x40 [ 396.951092][ T31] genl_rcv+0x28/0x40 [ 396.955067][ T31] netlink_unicast+0x82f/0x9e0 [ 396.959936][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 396.965231][ T31] ? netlink_sendmsg+0x642/0xb30 [ 396.970436][ T31] ? skb_put+0x11b/0x210 [ 396.974698][ T31] netlink_sendmsg+0x805/0xb30 [ 396.979501][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.984801][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 396.989795][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 396.995095][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.000485][ T31] __sock_sendmsg+0x21c/0x270 [ 397.005182][ T31] __sys_sendto+0x3bd/0x520 [ 397.009778][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 397.014827][ T31] ? exc_page_fault+0x82/0x100 [ 397.019637][ T31] __x64_sys_sendto+0xde/0x100 [ 397.024411][ T31] do_syscall_64+0xfa/0xf80 [ 397.028981][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.035054][ T31] ? clear_bhb_loop+0x60/0xb0 [ 397.039818][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.045718][ T31] RIP: 0033:0x7f11a2d915dc [ 397.050335][ T31] RSP: 002b:00007f11a3c37ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 397.058821][ T31] RAX: ffffffffffffffda RBX: 00007f11a3c37fc0 RCX: 00007f11a2d915dc [ 397.066856][ T31] RDX: 0000000000000020 RSI: 00007f11a3c38010 RDI: 0000000000000006 [ 397.074840][ T31] RBP: 0000000000000000 R08: 00007f11a3c37f14 R09: 000000000000000c [ 397.082915][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 397.090986][ T31] R13: 00007f11a3c37f68 R14: 00007f11a3c38010 R15: 0000000000000000 [ 397.099038][ T31] [ 397.102075][ T31] INFO: task syz.1.1625:12666 blocked for more than 145 seconds. [ 397.109910][ T31] Not tainted syzkaller #0 [ 397.114845][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 397.123621][ T31] task:syz.1.1625 state:D stack:28192 pid:12666 tgid:12662 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 397.135641][ T31] Call Trace: [ 397.138987][ T31] [ 397.141927][ T31] __schedule+0x14bc/0x5000 [ 397.146455][ T31] ? __pfx___schedule+0x10/0x10 [ 397.151406][ T31] ? schedule+0x91/0x360 [ 397.155666][ T31] schedule+0x165/0x360 [ 397.159910][ T31] schedule_preempt_disabled+0x13/0x30 [ 397.165382][ T31] __mutex_lock+0x7e6/0x1350 [ 397.170032][ T31] ? __mutex_lock+0x5bb/0x1350 [ 397.174808][ T31] ? genl_rcv_msg+0x10d/0x790 [ 397.179567][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 397.184604][ T31] ? stack_trace_save+0x9c/0xe0 [ 397.189543][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 397.194497][ T31] ? radix_tree_lookup+0x240/0x290 [ 397.199702][ T31] genl_rcv_msg+0x10d/0x790 [ 397.204223][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 397.209606][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 397.214667][ T31] netlink_rcv_skb+0x208/0x470 [ 397.219470][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 397.224509][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 397.229877][ T31] ? down_read+0x274/0x2e0 [ 397.234302][ T31] ? genl_rcv+0xd/0x40 [ 397.238467][ T31] genl_rcv+0x28/0x40 [ 397.242477][ T31] netlink_unicast+0x82f/0x9e0 [ 397.247338][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 397.252819][ T31] ? netlink_sendmsg+0x642/0xb30 [ 397.257830][ T31] ? skb_put+0x11b/0x210 [ 397.262096][ T31] netlink_sendmsg+0x805/0xb30 [ 397.266933][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.272235][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 397.277255][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 397.282545][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.287921][ T31] __sock_sendmsg+0x21c/0x270 [ 397.292617][ T31] __sys_sendto+0x3bd/0x520 [ 397.297183][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 397.302347][ T31] ? rcu_is_watching+0x15/0xb0 [ 397.307162][ T31] __x64_sys_sendto+0xde/0x100 [ 397.311941][ T31] do_syscall_64+0xfa/0xf80 [ 397.316454][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.322606][ T31] ? clear_bhb_loop+0x60/0xb0 [ 397.327329][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.333220][ T31] RIP: 0033:0x7f47faf915dc [ 397.337685][ T31] RSP: 002b:00007f47fbe38ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 397.346103][ T31] RAX: ffffffffffffffda RBX: 00007f47fbe38fc0 RCX: 00007f47faf915dc [ 397.354137][ T31] RDX: 0000000000000020 RSI: 00007f47fbe39010 RDI: 0000000000000007 [ 397.362174][ T31] RBP: 0000000000000000 R08: 00007f47fbe38f14 R09: 000000000000000c [ 397.370317][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 397.378330][ T31] R13: 00007f47fbe38f68 R14: 00007f47fbe39010 R15: 0000000000000000 [ 397.386318][ T31] [ 397.389412][ T31] INFO: task syz.2.1626:12667 blocked for more than 145 seconds. [ 397.397507][ T31] Not tainted syzkaller #0 [ 397.402609][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 397.411346][ T31] task:syz.2.1626 state:D stack:27144 pid:12667 tgid:12665 ppid:5831 task_flags:0x400140 flags:0x00080002 [ 397.423334][ T31] Call Trace: [ 397.426663][ T31] [ 397.429603][ T31] __schedule+0x14bc/0x5000 [ 397.434228][ T31] ? __pfx___schedule+0x10/0x10 [ 397.439139][ T31] ? schedule+0x91/0x360 [ 397.443375][ T31] schedule+0x165/0x360 [ 397.447610][ T31] schedule_preempt_disabled+0x13/0x30 [ 397.453077][ T31] __mutex_lock+0x7e6/0x1350 [ 397.457750][ T31] ? __mutex_lock+0x5bb/0x1350 [ 397.462523][ T31] ? genl_rcv_msg+0x10d/0x790 [ 397.467291][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 397.472328][ T31] ? radix_tree_lookup+0x240/0x290 [ 397.477550][ T31] genl_rcv_msg+0x10d/0x790 [ 397.482068][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 397.487162][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 397.492203][ T31] netlink_rcv_skb+0x208/0x470 [ 397.497023][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 397.502052][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 397.507420][ T31] ? down_read+0x274/0x2e0 [ 397.511878][ T31] ? genl_rcv+0xd/0x40 [ 397.515936][ T31] genl_rcv+0x28/0x40 [ 397.519999][ T31] netlink_unicast+0x82f/0x9e0 [ 397.524779][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 397.530197][ T31] ? netlink_sendmsg+0x642/0xb30 [ 397.535147][ T31] ? skb_put+0x11b/0x210 [ 397.539475][ T31] netlink_sendmsg+0x805/0xb30 [ 397.544263][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.549712][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 397.554750][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 397.560108][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.565478][ T31] __sock_sendmsg+0x21c/0x270 [ 397.570263][ T31] __sys_sendto+0x3bd/0x520 [ 397.574782][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 397.579870][ T31] ? rcu_is_watching+0x15/0xb0 [ 397.584653][ T31] __x64_sys_sendto+0xde/0x100 [ 397.589519][ T31] do_syscall_64+0xfa/0xf80 [ 397.594038][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.600204][ T31] ? clear_bhb_loop+0x60/0xb0 [ 397.604895][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.610969][ T31] RIP: 0033:0x7f42e15915dc [ 397.615395][ T31] RSP: 002b:00007f42e24f3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 397.623865][ T31] RAX: ffffffffffffffda RBX: 00007f42e24f3fc0 RCX: 00007f42e15915dc [ 397.631893][ T31] RDX: 0000000000000020 RSI: 00007f42e24f4010 RDI: 0000000000000006 [ 397.639961][ T31] RBP: 0000000000000000 R08: 00007f42e24f3f14 R09: 000000000000000c [ 397.648004][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 397.655971][ T31] R13: 00007f42e24f3f68 R14: 00007f42e24f4010 R15: 0000000000000000 [ 397.664178][ T31] [ 397.667269][ T31] [ 397.667269][ T31] Showing all locks held in the system: [ 397.674984][ T31] 1 lock held by khungtaskd/31: [ 397.679997][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 397.690000][ T31] 2 locks held by getty/5590: [ 397.694684][ T31] #0: ffff8880305220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 397.704512][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 397.714692][ T31] 4 locks held by kworker/1:3/5839: [ 397.719962][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 397.731177][ T31] #1: ffffc90004147b80 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 397.743648][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 397.753734][ T31] #3: ffff88807a2b7100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x3b/0x290 [ 397.762784][ T31] 3 locks held by kworker/1:7/5943: [ 397.768435][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 397.779581][ T31] #1: ffffc900046f7b80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 397.793255][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 397.804760][ T31] 1 lock held by syz.0.1601/12565: [ 397.809945][ T31] #0: ffff88807a2b7100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x300 [ 397.819808][ T31] 3 locks held by syz.3.1620/12642: [ 397.825052][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 397.833366][ T31] #1: ffffffff8f379708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 397.842408][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 397.852444][ T31] 2 locks held by syz.3.1620/12647: [ 397.857686][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 397.865853][ T31] #1: ffffffff8f379708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 397.874870][ T31] 2 locks held by syz.4.1622/12650: [ 397.880097][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 397.888326][ T31] #1: ffffffff8f379708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 397.897385][ T31] 2 locks held by syz.1.1625/12666: [ 397.902601][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 397.910861][ T31] #1: ffffffff8f379708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 397.919880][ T31] 2 locks held by syz.2.1626/12667: [ 397.925063][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 397.933434][ T31] #1: ffffffff8f379708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 397.942507][ T31] 2 locks held by syz-executor/12670: [ 397.947957][ T31] #0: ffff88801e3bb918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 397.958138][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 397.968183][ T31] 2 locks held by syz-executor/12674: [ 397.973556][ T31] #0: ffff88807af53918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 397.983631][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 397.993614][ T31] 2 locks held by syz-executor/12676: [ 397.999020][ T31] #0: ffff88802574d918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 398.009108][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 398.019100][ T31] 2 locks held by syz-executor/12679: [ 398.024474][ T31] #0: ffff88801e2a9918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 398.034546][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 398.044557][ T31] 2 locks held by syz-executor/12680: [ 398.049967][ T31] #0: ffff88807726d918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 398.060053][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 398.070137][ T31] 2 locks held by syz-executor/12685: [ 398.075506][ T31] #0: ffff8880576d4118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 398.085590][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 398.095664][ T31] 2 locks held by syz-executor/12689: [ 398.101084][ T31] #0: ffff8880536ea918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 398.111197][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 398.121203][ T31] 2 locks held by syz-executor/12691: [ 398.126584][ T31] #0: ffff8880536e9118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 398.136811][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 398.146829][ T31] 2 locks held by syz-executor/12694: [ 398.152418][ T31] #0: ffff88801cb91918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 398.162582][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 398.172630][ T31] 2 locks held by syz-executor/12695: [ 398.178069][ T31] #0: ffff8880781a1918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 398.188151][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 398.198164][ T31] 2 locks held by syz-executor/12700: [ 398.203558][ T31] #0: ffff888051407918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 398.213640][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 398.223628][ T31] 2 locks held by syz-executor/12704: [ 398.229034][ T31] #0: ffff88802856c918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 398.239172][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 398.249394][ T31] 2 locks held by syz-executor/12705: [ 398.254769][ T31] #0: ffff88801cb96118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 398.264826][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 398.274803][ T31] 2 locks held by syz-executor/12710: [ 398.280278][ T31] #0: ffff88805816c918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 398.290359][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 398.300353][ T31] 2 locks held by syz-executor/12711: [ 398.305721][ T31] #0: ffff8880784e7918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 398.315787][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 398.325857][ T31] [ 398.328298][ T31] ============================================= [ 398.328298][ T31] [ 398.336790][ T31] NMI backtrace for cpu 0 [ 398.336814][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 398.336832][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 398.336843][ T31] Call Trace: [ 398.336850][ T31] [ 398.336857][ T31] dump_stack_lvl+0x189/0x250 [ 398.336882][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.336901][ T31] ? __pfx__printk+0x10/0x10 [ 398.336932][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 398.336957][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 398.336980][ T31] ? __pfx__printk+0x10/0x10 [ 398.337005][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 398.337030][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 398.337048][ T31] sys_info+0x135/0x170 [ 398.337059][ T31] watchdog+0xf95/0xfe0 [ 398.337075][ T31] ? watchdog+0x20a/0xfe0 [ 398.337090][ T31] kthread+0x711/0x8a0 [ 398.337104][ T31] ? __pfx_watchdog+0x10/0x10 [ 398.337116][ T31] ? __pfx_kthread+0x10/0x10 [ 398.337128][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 398.337142][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 398.337151][ T31] ? __pfx_kthread+0x10/0x10 [ 398.337163][ T31] ret_from_fork+0x599/0xb30 [ 398.337174][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 398.337194][ T31] ? __switch_to_asm+0x39/0x70 [ 398.337206][ T31] ? __switch_to_asm+0x33/0x70 [ 398.337216][ T31] ? __pfx_kthread+0x10/0x10 [ 398.337228][ T31] ret_from_fork_asm+0x1a/0x30 [ 398.337247][ T31] [ 398.337252][ T31] Sending NMI from CPU 0 to CPUs 1: [ 398.486812][ C1] NMI backtrace for cpu 1 [ 398.486829][ C1] CPU: 1 UID: 0 PID: 6684 Comm: ipvs-e:3:0 Not tainted syzkaller #0 PREEMPT(full) [ 398.486846][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 398.486855][ C1] RIP: 0010:__lock_acquire+0xa55/0x2cf0 [ 398.486876][ C1] Code: c7 c6 17 29 87 8d 67 48 0f b9 3a 90 31 c0 48 83 78 40 00 0f 84 5f 1d 00 00 41 8b 45 20 25 ff 1f 00 00 48 0f a3 05 2b e0 e7 11 <73> 10 48 69 c0 c8 00 00 00 48 8d 80 b0 63 27 93 eb 32 83 3d f2 6f [ 398.486889][ C1] RSP: 0018:ffffc900031076d8 EFLAGS: 00000047 [ 398.486903][ C1] RAX: 0000000000000000 RBX: 0000000076153240 RCX: 000000000000413d [ 398.486913][ C1] RDX: 00000000414040f8 RSI: 0000000048aa0974 RDI: ffff8880321bdb80 [ 398.486924][ C1] RBP: 3df1592f00000000 R08: ffffffff8498fb4c R09: ffffffff99b96718 [ 398.486935][ C1] R10: dffffc0000000000 R11: fffffbfff1f0440f R12: ffff8880321be6b0 [ 398.486946][ C1] R13: ffff8880321be6b0 R14: ffff8880321bdb80 R15: 0000000000000000 [ 398.486957][ C1] FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 398.486970][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.486980][ C1] CR2: 00007ffd15530808 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 398.486994][ C1] Call Trace: [ 398.487002][ C1] [ 398.487012][ C1] ? do_raw_spin_lock+0x121/0x290 [ 398.487035][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 398.487056][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 398.487072][ C1] ? debug_object_free+0x7c/0x400 [ 398.487092][ C1] lock_acquire+0x117/0x340 [ 398.487105][ C1] ? debug_object_free+0x7c/0x400 [ 398.487130][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 398.487150][ C1] ? debug_object_free+0x7c/0x400 [ 398.487168][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 398.487188][ C1] ? __pfx___timer_delete_sync+0x10/0x10 [ 398.487204][ C1] ? schedule+0x91/0x360 [ 398.487217][ C1] debug_object_free+0x7c/0x400 [ 398.487236][ C1] ? schedule+0x16f/0x360 [ 398.487250][ C1] schedule_timeout+0x13b/0x270 [ 398.487269][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 398.487287][ C1] ? __pfx_process_timeout+0x10/0x10 [ 398.487312][ C1] ip_vs_estimation_kthread+0x2a2a/0x3a00 [ 398.487335][ C1] ? ip_vs_estimation_kthread+0x2858/0x3a00 [ 398.487368][ C1] ? __pfx_ip_vs_estimation_kthread+0x10/0x10 [ 398.487387][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 398.487410][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 398.487439][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 398.487458][ C1] ? __kthread_parkme+0x7b/0x200 [ 398.487474][ C1] ? __kthread_parkme+0x1a1/0x200 [ 398.487492][ C1] kthread+0x711/0x8a0 [ 398.487510][ C1] ? __pfx_ip_vs_estimation_kthread+0x10/0x10 [ 398.487531][ C1] ? __pfx_kthread+0x10/0x10 [ 398.487548][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 398.487567][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 398.487581][ C1] ? __pfx_kthread+0x10/0x10 [ 398.487598][ C1] ret_from_fork+0x599/0xb30 [ 398.487626][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 398.487644][ C1] ? __switch_to_asm+0x39/0x70 [ 398.487662][ C1] ? __switch_to_asm+0x33/0x70 [ 398.487678][ C1] ? __pfx_kthread+0x10/0x10 [ 398.487695][ C1] ret_from_fork_asm+0x1a/0x30 [ 398.487720][ C1] [ 398.802041][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 398.808877][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 398.817976][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 398.828018][ T31] Call Trace: [ 398.831286][ T31] [ 398.834204][ T31] dump_stack_lvl+0x99/0x250 [ 398.838790][ T31] ? __asan_memcpy+0x40/0x70 [ 398.843372][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.848564][ T31] ? __pfx__printk+0x10/0x10 [ 398.853162][ T31] vpanic+0x237/0x6d0 [ 398.857241][ T31] ? __pfx_vpanic+0x10/0x10 [ 398.861760][ T31] ? preempt_schedule_common+0x83/0xd0 [ 398.867222][ T31] panic+0xb9/0xc0 [ 398.870946][ T31] ? __pfx_panic+0x10/0x10 [ 398.875355][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 398.880719][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 398.886868][ T31] watchdog+0xfdf/0xfe0 [ 398.891023][ T31] ? watchdog+0x20a/0xfe0 [ 398.895354][ T31] kthread+0x711/0x8a0 [ 398.899424][ T31] ? __pfx_watchdog+0x10/0x10 [ 398.904204][ T31] ? __pfx_kthread+0x10/0x10 [ 398.908789][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 398.913985][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 398.919171][ T31] ? __pfx_kthread+0x10/0x10 [ 398.923755][ T31] ret_from_fork+0x599/0xb30 [ 398.928338][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 398.933446][ T31] ? __switch_to_asm+0x39/0x70 [ 398.938201][ T31] ? __switch_to_asm+0x33/0x70 [ 398.942959][ T31] ? __pfx_kthread+0x10/0x10 [ 398.947542][ T31] ret_from_fork_asm+0x1a/0x30 [ 398.952366][ T31] [ 398.955550][ T31] Kernel Offset: disabled [ 398.959862][ T31] Rebooting in 86400 seconds..