last executing test programs: 3.232945797s ago: executing program 3 (id=1684): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/105, &(0x7f0000000080)=0x69) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000140)=0x4, 0x4) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000180)=@hci, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)=""/201, 0xc9}, {&(0x7f0000000300)=""/201, 0xc9}], 0x2}, 0x22) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000580)={r0, &(0x7f0000000480)='\x00', 0x208001, &(0x7f00000004c0)={@align=0x2, {0x5, 0x2, 0x0, 0x4}}, 0x3ff, &(0x7f0000000500), &(0x7f0000000540)=0xfffffffb}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000005c0)=0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000600)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000008c0)={{r0}, r2, 0x18, @inherit={0x88, &(0x7f0000000800)={0x1, 0x8, 0x200, 0x1, {0x22, 0x8000000000000000, 0x4, 0x200, 0x9}, [0x0, 0x5, 0x10000, 0x6, 0x5, 0x6, 0xfffffffffffffffe, 0x7]}}, @name="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"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000018c0)={0x0, 0x5, 0x5}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001cc0)={{r1}, r3, 0x8, @unused=[0x8, 0xef, 0x2a13], @devid=r4}) r5 = accept4$bt_l2cap(r1, &(0x7f0000002cc0), &(0x7f0000002d00)=0xe, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002d40)={'wlan1\x00'}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000002d80), &(0x7f0000002dc0)=0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002e40), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000002f40)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x81008}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e80)={0x48, r7, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x10}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x4000) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000003080)={0x0, 0xffffffff, 0xc3, &(0x7f0000002f80)=""/195}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000030c0)=0xcf8c, 0x4) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000003100)={{r6}, 0x400, 0x8}) r8 = socket$unix(0x1, 0x2, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_ADD_DEV(r9, 0x5000940a, &(0x7f0000003140)={{r0}, "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"}) ioctl$AUTOFS_IOC_PROTOSUBVER(r8, 0x80049367, &(0x7f0000004140)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000004180)=0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000042c0)={'syztnl0\x00', &(0x7f0000004280)={'gretap0\x00', 0x0, 0x7, 0x7, 0x9, 0x7fffffff, {{0x7, 0x4, 0x3, 0xd, 0x1c, 0x68, 0x0, 0x4, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @rand_addr=0x64010100, {[@end, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000043c0)={'tunl0\x00', &(0x7f0000004300)={'gretap0\x00', 0x0, 0x10, 0x8, 0x4, 0xcd67, {{0x24, 0x4, 0x0, 0x8, 0x90, 0x65, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_prespec={0x44, 0x3c, 0xaf, 0x3, 0x9, [{@remote, 0x6}, {@broadcast, 0x401}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@empty, 0x4}, {@rand_addr=0x64010100, 0xfffffffd}, {@loopback, 0x8}, {@multicast1, 0x1dac00}]}, @timestamp_addr={0x44, 0x1c, 0xce, 0x1, 0xa, [{@local, 0x4}, {@rand_addr=0x64010102, 0x5}, {@loopback, 0x80000000}]}, @end, @ssrr={0x89, 0x17, 0xf5, [@broadcast, @empty, @multicast1, @multicast2, @multicast1]}, @generic={0x86, 0xc, "88d7073a665c0cbc1cb7"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004400)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000004440)={'vxcan0\x00', 0x0}) sendmmsg$inet(r5, &(0x7f0000004900)=[{{&(0x7f00000041c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000004240)=[{&(0x7f0000004200)="e9419be5da01fb6bb52c55239ac9efe54050ee0677dd2e69cb8a", 0x1a}], 0x1, &(0x7f0000004780)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffff7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @multicast2, @rand_addr=0x64010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_retopts={{0x80, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x52, [@local, @remote, @remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @ssrr={0x89, 0x23, 0xab, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x3d}, @local, @private=0xa010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x18}]}, @end, @lsrr={0x83, 0xf, 0x9c, [@loopback, @remote, @broadcast]}, @timestamp={0x44, 0x20, 0xfe, 0x0, 0x3, [0x7990, 0xffffffff, 0x5, 0x200, 0xde, 0x101, 0x4]}]}}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @loopback, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x180}}], 0x1, 0x44800) 2.295179314s ago: executing program 3 (id=1695): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r0, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) 2.036262819s ago: executing program 3 (id=1699): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0) listen(r1, 0x50) sendmsg$inet(r1, &(0x7f00000019c0)={&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000380)="8cefbb785a23", 0x6}], 0x1}, 0x4000) r3 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1.841394232s ago: executing program 4 (id=1701): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) r3 = accept4(r2, 0x0, 0x0, 0x80000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r5, @ANYBLOB="01002cbd7000fddbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="08009e00010000000a000600080211000001000048002d800a0000000202020202020000140000001f0f78fdda7734d6bde6c48891165ad30a00000002020202020200000a00000002020202020200004100000002020202020200000a00060008021100000000000800dc00010000002b8ec9666ca6535784eead3c074b277f696097b9e84b51e8d0cb5499b1b4ecb2b18997a2cc11545c6784ec15bfdaa080e4"], 0x8c}}, 0x400c000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x30, r5, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x13}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) sendmsg$nl_route_sched(r3, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200), 0x806000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000240), 0x12) r12 = openat$cgroup_procs(r10, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r12, r12, 0x0, 0x9) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x200, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x1004}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_PHYS_SWITCH_ID={0xf, 0x24, "5768f09e8d5e21378b62a5"}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.747478844s ago: executing program 1 (id=1703): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x3}]}, @enum, @int]}, {0x0, [0x0, 0x0]}}, 0x0, 0x4c, 0x0, 0x3}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}}, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.617910291s ago: executing program 4 (id=1705): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="180000002e004106000000000000000008000000", @ANYRES32=0x0, @ANYBLOB], 0x18}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000180)=r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000003c0)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x8) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000100000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="000000000001000014001680100001800c000400feffffff0400000008001b"], 0x3c}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff00000004080000", @ANYRES32, @ANYBLOB="000000000000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff1, 0xfff3}, {0x6, 0xffe0}, {0x10, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r10, &(0x7f0000000240)={0x2, @long}, 0x14) r11 = gettid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)={0x1c, 0x33, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid=r11}]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x8800}, 0x0) 1.591916634s ago: executing program 2 (id=1706): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4, {0x2}}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x70}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x24, 0x1e, 0x492dfc465ae32a8d, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) 1.49968914s ago: executing program 1 (id=1707): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0xc, 0x0, &(0x7f0000000400)) r1 = socket(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{}, "536ad1861a1cb4bd", "f5449928accd2fc03da6e0541d812a56", "d06850a7", "cfa85b5e47cabf64"}, 0x28) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000100)="00000000a2532a8f2b5337c016f5946ad26baff690f7f1fe997ffd198fb966fec421f74e21fff2a2b57ccff6b6bfaa", 0x2f}], 0x1, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}], 0x18}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000380)={{r2, &(0x7f0000000180)='{\x00', 0x210080, &(0x7f00000001c0)={@align, {0xff, 0x7, 0x8, 0xa16}}, 0x9, &(0x7f0000000200), &(0x7f0000000240)=0x6}, {[0x2, 0x2, 0xffff, 0x9]}, 0x5, 0xe7, &(0x7f0000000280)=""/231}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x68, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x64, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x81}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x44, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffffb}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffffd}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xa9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000004c0)={0x0, @broadcast, @broadcast}, &(0x7f0000000500)=0xc) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xb08}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2ecbed66}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x64}}, 0x40080) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 1.385126484s ago: executing program 2 (id=1709): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80000) r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x4}, 0x21, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="10000000000000002900000004"], 0x30}}], 0x1, 0x4000084) sendto$inet(r3, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) accept4$tipc(r3, 0x0, 0x0, 0x800) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r7, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="10000000000000000100bc8c4520aa11"], 0x10}}], 0x2, 0x40840) connect$802154_dgram(r6, &(0x7f00000000c0)={0x24, @none={0x0, 0x3}}, 0x14) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0f13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2871"], 0xe0}], 0x1}, 0x40040) r9 = socket(0xa, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x44, 0x6, 0x520, 0x138, 0x0, 0x138, 0x208, 0x0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x3a}, 0xff, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x138}}, {{@ip={@loopback, @remote, 0xffffff00, 0x0, 'macvtap0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x2, @multicast2}}}, {{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x24}, 0xffffffff, 0xff, 'veth0_to_bond\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0xff, 0x3, 0x19}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x7fff, 0x7, [0x29, 0x26, 0x35, 0xc, 0x15, 0x33, 0x21, 0xf, 0x38, 0x21, 0xa, 0x3, 0x3, 0x1f, 0x14, 0x37], 0x2, 0x8, 0x85}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {}, 0x33, 0x3}, 0x0, 0x170, 0x198, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x2, 0x4, 0x5, 0x6, 0x3, 0x2], 0x1, 0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@empty, [0xffffffff, 0xffffffff, 0xffffff00], @ipv4=@broadcast, [0xffffff00, 0xff000000, 0xffffff00], @ipv4=@broadcast, [0xff, 0xffffff00, 0xff, 0xff], @ipv4=@empty, [0x0, 0xff000000, 0xff000000, 0xff], 0x40, 0xf, 0x89, 0x4e22, 0x4e20, 0x4e22, 0x4e22, 0x40}, 0x0, 0x8c}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x6}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 'lo\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4, 0x7}, {0x0, 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x580) getsockname$l2tp6(r9, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 1.370678119s ago: executing program 1 (id=1710): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@type_tag={0x2, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x2e, 0x51, 0x556c9cad818221ea, 0x2e, 0x61, 0x61]}}, &(0x7f0000000100)=""/226, 0x2c, 0xe2, 0x1}, 0x28) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) socketpair(0x8, 0x800, 0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000280)={0x1d, 0x4da, 0xa, 0xa, 0x3, 0x81}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002140)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000000) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) sendfile(r0, r5, 0x0, 0x7fffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$netlink(r6, &(0x7f0000000000), &(0x7f0000000040)=0xc) 1.25590415s ago: executing program 4 (id=1711): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x439, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_BROADCAST={0xa, 0x2, @random="75668d7c4870"}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x500000}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4) 1.200730891s ago: executing program 1 (id=1713): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYBLOB='z'], 0x1c}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYBLOB='z'], 0x1c}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x20, 0x140d, 0x1, 0x70bd28, 0x4, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x52}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.114617334s ago: executing program 4 (id=1714): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000080)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2e}}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x80}, {0x0, 0x4, 0x800000000001, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x4d5, 0x3c}, 0xb, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000600)=0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000008c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x58) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYRES64=r2], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a38000000140a01010000000000000000050000090c00064000000000000000010900020073797a32000000000900010073797a31001100010000000000000000000100000a6c3ff6526df9f97eb90503e5644c66bc300b119c5e642050ccc819a1733c954771c96ce2f0b326d3d2ce121e382edca40b6c9c170f4bf23c6c13f580109f6632715904d5d03fd6163960e5925fd40cc41b36161403ed61b3413868500b16ff752b336ea47dfba923e995b5293ae7bf8bb731c7a85b67880f6284dc060b2fbe973a4e4e5b4df54eeb21459040"], 0x60}, 0x1, 0x0, 0x0, 0x44050}, 0x4000000) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, 0x0, 0xf34, &(0x7f0000000640)='ipvlan1\x00', 0xbdbd, 0x1, 0x2}) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a, 0x0, 0x0, 0x0, 0x20400}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPOIB_PKEY={0x6, 0x1, 0x3}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}, @IFLA_IPOIB_MODE={0x6, 0x2, 0x1}, @IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}]}}}]}, 0x5c}}, 0x0) 987.494611ms ago: executing program 3 (id=1715): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000001100)={{0x2, 0x4e21, @private=0xa010101}, {0x306, @random="b5fd234225f5"}, 0x4, {0x2, 0x4e22, @multicast2}, 'sit0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000001180), r0) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x30, r3, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000001100)={{0x2, 0x4e21, @private=0xa010101}, {0x306, @random="b5fd234225f5"}, 0x4, {0x2, 0x4e22, @multicast2}, 'sit0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000001180), r0) (async) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x30, r3, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0) (async) 986.332865ms ago: executing program 2 (id=1716): syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) socket$unix(0x1, 0x2, 0x0) (async) r2 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000001100)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x8, 0xc, 0x2, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="8000bb000a000200aaaaaaaaaa0000000b710925052b369bb8feae13c248f0e32c3d40e9b286a1500444d5731dbb5431ada571ada4bc533d660a99f46fe5a2aa1fbfd8f076edecab26ab4d7c2c194317f6f44b299c7a192be2388926241a2f09f33dab3d5511e0f3617fb91befff0000000000000017fa3f79e153f449ac4ce1cd895c037464a8e5b7559090efd245bf33083404562788586d69e13f32e752cfe46687c9a26ac1848b101d604e2c0c6811d2ea"], 0x28}}, 0x0) 982.136863ms ago: executing program 1 (id=1717): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000200)) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0xbb8, 0x0, 0x5, 0x301, 0x0, 0x0, {0x8, 0x0, 0x1}, [{{0x254, 0x1, {{0x1, 0x2}, 0x9, 0x4, 0x2, 0xfff8, 0x0, 'syz1\x00', "a93decf86907af802267f5bf44d7d40ab0011f799f8b722a0db0a91cb31ef058", "8c21fda70298d5b22ca9dee990e6067dd2150b1f4500006aeb8596b0b8dfda1b", [{0x0, 0x9, {0x3, 0x8}}, {0xff3, 0x72, {0x2, 0x28a}}, {0x4d66, 0x2, {0x0, 0x8000}}, {0xaf1b, 0x6, {0x0, 0x4}}, {0x8f5, 0x4, {0x0, 0x7}}, {0x2000, 0x5e2, {0x1, 0x7}}, {0x2a6, 0x0, {0x2, 0x2}}, {0x8, 0x81, {0x0, 0xbc7}}, {0x101, 0x4, {0x2, 0x8}}, {0x74, 0x8, {0x3, 0x3}}, {0x7, 0x1, {0x0, 0x9}}, {0x94a, 0x2, {0x0, 0x5}}, {0x6, 0x6, {0x2, 0x7}}, {0x0, 0x5028, {0x2, 0x3}}, {0xd53, 0x0, {0x1, 0x3}}, {0xfffa, 0x2, {0x1}}, {0x4, 0x2f5, {0x3, 0x1b}}, {0x3, 0xc8, {0x1, 0xf}}, {0x5, 0x2, {0x2, 0x2d4}}, {0x400, 0x40, {0x1, 0x26}}, {0x6, 0x2, {0x1, 0x53}}, {0xb, 0x140, {0x2, 0x3}}, {0xa, 0xc, {0x1, 0xadc}}, {0x4, 0x4, {0x3, 0x7}}, {0x2800, 0xc, {0x3, 0x6}}, {0xff3, 0x5, {0x2, 0x9}}, {0x5, 0x1, {0x2, 0x7fff}}, {0xfff, 0x4, {0x0, 0xffff}}, {0x0, 0x1, {0x0, 0x5}}, {0x1, 0x2, {0x1, 0xfff}}, {0x401, 0x4, {0x1, 0x6}}, {0x4, 0x7, {0x3, 0x9}}, {0xd, 0x3, {0x3}}, {0x5, 0x8, {0x0, 0x2}}, {0x4, 0x9, {0x1, 0x9}}, {0x5, 0xfff, {0x1, 0x1c0}}, {0x0, 0x5, {0x2, 0x4}}, {0x8, 0x6, {0x2, 0x400}}, {0x7f, 0x2, {0x3}}, {0x3ff, 0x6, {0x2, 0xffffff8b}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x0, 0x0, 0xc0, 0x6, 0x24, 'syz0\x00', "faefc8f58e1d12c9048c047493e68cf1f634f2b35f1a7c7870414ac37f7fd789", "0f3275a4f2a6ff239ce0334ac6f833518af8aaa693c60bba5ec391b2721370f0", [{0x5, 0x5, {0x0, 0xcf4}}, {0x4, 0x1000, {0x1, 0x3}}, {0x2, 0x4000, {0x0, 0x4}}, {0xf, 0x0, {0x2, 0x2}}, {0x1, 0xf, {0x0, 0x10}}, {0x8, 0x3ff, {0x1, 0x1}}, {0x75, 0x1, {0x2, 0x81}}, {0x40, 0x4, {0x2, 0x10000}}, {0x4, 0x6, {0x0, 0xf8c3}}, {0x2, 0x8, {0x0, 0x3}}, {0x3, 0x8, {0x2, 0x1}}, {0x1, 0xd, {0x1, 0x4}}, {0xfffa, 0xfff, {0x3, 0xffffff01}}, {0x3ff, 0xfc, {0x0, 0xffff}}, {0x6, 0x10, {0x0, 0xd}}, {0x7, 0xffff, {0x2, 0x1000}}, {0x8, 0x7, {0x0, 0x6}}, {0x80, 0x6, {0x3, 0x7}}, {0x6, 0x5, {0x0, 0x5}}, {0x7, 0x8, {0x2, 0x3}}, {0x3, 0x2, {0x2, 0x1781}}, {0xfffa, 0x6, {0x3, 0x6}}, {0xc6, 0x0, {0x2, 0x4c12}}, {0x6, 0x7fff, {0x3, 0x8}}, {0x3441, 0x0, {0x1}}, {0x200, 0xd, {0x3, 0x80000000}}, {0x7, 0x10, {0x1}}, {0x8, 0x4, {0x1, 0xffffffff}}, {0x1ff, 0x89b1, {0x2}}, {0xa, 0xdb, {0x2, 0x5}}, {0x1ff, 0x5, {0x0, 0x1}}, {0x6, 0x9, {0x0, 0xffff}}, {0x2, 0x1, {0x2, 0x1}}, {0x3, 0x4, {0x1, 0xc7c2}}, {0x9, 0x7, {0x3, 0x7f8}}, {0xdd5, 0x6, {0x4}}, {0xe3, 0x1, {0x3, 0xff}}, {0x100, 0x480, {0x2, 0x7}}, {0x7, 0x6, {0x1, 0x3}}, {0x8, 0xd, {0x3, 0xfffffffe}}]}}}, {{0x254, 0x1, {{0x2, 0xac}, 0x4, 0x59, 0x4, 0xfffd, 0x17, 'syz1\x00', "9d0fc3adf5b4eb0f07d3ef342ee2d08c2a35ba5ec9570ba6f2f79f8d5a385210", "d53f6136a14e7bf3cd59c18c11aa56c9c178e16f26073088f758ac86468f2803", [{0xfffd, 0x8, {0x2}}, {0x3, 0x40, {0x2, 0x9b}}, {0xbb6, 0x5, {0x2, 0x1ff}}, {0x9, 0x7, {0x0, 0x3}}, {0x3, 0x8, {0x3, 0x5}}, {0x2, 0x81, {0x0, 0x4}}, {0x2, 0x1, {0x3, 0x3}}, {0x5, 0x9, {0x3}}, {0x6, 0x2, {0x0, 0x2}}, {0x0, 0x2, {0x1, 0x9}}, {0xfff5, 0x0, {0x0, 0x8}}, {0x9, 0x4ac, {0x2, 0x3dc}}, {0xff01, 0x9e5, {0x3, 0xc}}, {0x8, 0x1f65, {0x1, 0x3}}, {0xc464, 0x0, {0x0, 0xfffffc01}}, {0x9, 0x4, {0x1, 0x7}}, {0x1, 0x7a, {0x3, 0x4718bdb3}}, {0x7, 0xdfb, {0x0, 0x7f}}, {0xee, 0x8, {0x2, 0x6}}, {0x3, 0xfff, {0x1, 0x80}}, {0x4, 0x7, {0x1, 0x8}}, {0x0, 0x4, {0x2, 0x80000001}}, {0x5, 0x0, {0x3, 0xba25}}, {0xa, 0x100, {0x3, 0x10000}}, {0xf5, 0x6000, {0x1, 0x4}}, {0x0, 0x8a, {0x2, 0x5}}, {0x3, 0x6, {0x2, 0x7}}, {0x2e5d, 0x7, {0x2, 0x1}}, {0xd45, 0x7f, {0x1, 0x9}}, {0x8001, 0x0, {0x0, 0x8}}, {0xa, 0x101, {0x1, 0x4a364cfc}}, {0x4b5, 0x0, {0x0, 0x800}}, {0x9, 0x8, {0x1}}, {0xf801, 0x9255, {0x1, 0x2}}, {0xa88d, 0x8000, {0x0, 0x2}}, {0x2, 0x7, {0x3, 0x6}}, {0xa873, 0x7, {0x3, 0x3}}, {0x2, 0x0, {0x0, 0x3}}, {0x9, 0x6, {0x3, 0x4}}, {0x0, 0x0, {0x3, 0x6}}]}}}, {{0x254, 0x1, {{0x0, 0x6}, 0x0, 0x1, 0x7, 0x9ec7, 0x26, 'syz1\x00', "268138f99f7bf5f7aa6d9cafd67ad29a4ef88d59f5a12945700c9ec17e66564c", "e80d274263d860eae9e588d179052e01e2b85cd179d64016b32c97c294bef1d4", [{0x5, 0x7, {0x2, 0x3}}, {0x9, 0x401, {0x3, 0xfffffffb}}, {0x4, 0x97d, {0x0, 0x3}}, {0xf0, 0x0, {0x2}}, {0x400, 0x4, {0x2, 0x9}}, {0x4, 0x800, {0x1, 0xfff}}, {0x0, 0x5, {0x0, 0x4}}, {0x8, 0x2, {0x0, 0x7}}, {0x2, 0x8, {0x0, 0x9}}, {0x81, 0xf, {0x2, 0x2}}, {0x4b, 0x8, {0x1, 0x2}}, {0x3, 0x4, {0x1, 0xda81}}, {0xfffc, 0x81, {0x2, 0x5}}, {0x2ef, 0x8, {0x0, 0x5d}}, {0x9, 0x7, {0x3, 0x8000000}}, {0x6, 0x2, {0x3, 0x9}}, {0xcd, 0xfffb, {0x0, 0xb5}}, {0x1, 0xcb, {0x3, 0x7e}}, {0x8, 0x6, {0x1, 0x1}}, {0x5, 0x6, {0x1, 0x2}}, {0x9, 0x80, {0x0, 0x2}}, {0x4, 0x1ff, {0x3, 0x9}}, {0x4, 0x0, {0x1, 0x3}}, {0x80, 0x1, {0x0, 0x57f}}, {0x7, 0x4, {0x0, 0x77}}, {0x23f, 0x7, {0x3, 0x5}}, {0x6, 0x5, {0x7, 0x9baf}}, {0x10, 0x9, {0x0, 0x8}}, {0x9edb, 0x42c, {0x3, 0x9}}, {0x1, 0x40, {0x1, 0x2}}, {0x6, 0x4, {0x3, 0x2}}, {0x0, 0xb, {0x1, 0x2ce}}, {0x6, 0x9, {0x2, 0x50}}, {0x7fff, 0x6, {0x0, 0x8}}, {0xf20e, 0xd, {0x1, 0x5}}, {0x80, 0x2, {0x1, 0x9}}, {0x1a5, 0x9, {0x2, 0x4}}, {0x4, 0x8, {0x3, 0x6}}, {0x1000, 0x2, {0x1, 0x8001}}, {0x5, 0x4, {0x1, 0xb}}]}}}, {{0x254, 0x1, {{0x1, 0x80}, 0x0, 0x51, 0x400, 0x5, 0x1b, 'syz0\x00', "ceb7bfc3c09a62fbfa0233afba49b26dcba1e862c2998fe63d2fea7dc916c2ca", "043756bb918ff0faa738136500b5a54901c34ebff69f1e2f6c446dbf1838315a", [{0x1, 0x8, {0x0, 0x6}}, {0x1, 0x800, {0x3, 0x8}}, {0x4, 0x2, {0x0, 0x9}}, {0x1, 0x4, {0x2, 0xd7}}, {0x10, 0x7, {0x1, 0x3}}, {0x3, 0x8e0, {0x3, 0x5}}, {0x5, 0x2, {0x2, 0xd27a}}, {0xb, 0x8, {0x2, 0x10001}}, {0x7, 0x4, {0x2, 0x1}}, {0x0, 0x0, {0x1, 0x8}}, {0x9, 0x6, {0x0, 0x5}}, {0x3, 0x0, {0x2, 0x7}}, {0xfff8, 0x0, {0x2, 0xa4bb}}, {0xa, 0x5b1, {0x1, 0x1}}, {0x4, 0x40, {0x3, 0x6}}, {0x3c9, 0x48, {0x1, 0x10000000}}, {0x5, 0x3, {0x3, 0x1c}}, {0x4, 0x7fff, {0x2, 0x800}}, {0x2, 0x5, {0x1, 0x1}}, {0x800, 0x1ff, {0x3, 0x56}}, {0x6, 0x5, {0x1, 0x8000}}, {0x5, 0x3, {0x3, 0x80000001}}, {0x7f, 0x401, {0x0, 0x81}}, {0x6, 0x9}, {0x43ad, 0xf068, {0x3, 0xb5}}, {0x5, 0x4, {0x1, 0x4}}, {0x7, 0x2, {0x3, 0xfcd}}, {0x67a4, 0x8, {0x3, 0xce7}}, {0xee87, 0xf, {0x0, 0x7f}}, {0x2, 0x9, {0x1, 0x4}}, {0x9, 0x7fff, {0x3, 0x3}}, {0x374, 0x20, {0x2, 0x1}}, {0x3, 0x4540, {0x2, 0xff}}, {0x4, 0x2, {0x2, 0x2}}, {0xffff, 0x7, {0x3, 0xa0d}}, {0xc576, 0x80, {0x0, 0x8}}, {0x8, 0x0, {0x3, 0x8}}, {0x9, 0x4, {0x2, 0x5}}, {0x400, 0x81, {0x1, 0xb5e}}, {0x2a9, 0xc3ea, {0x3, 0x6}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x40000}, 0x20040001) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x2, 0x2, 0x1, 0x5, 0x5}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000480)={0xffff1a47, 0x40000000, 0x10000, 0x9, 0x9}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x4, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x939}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e7}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r7, @ANYBLOB="24005a8020000180140003000000000000000000010000000000000004000200040001"], 0x40}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r6, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) 788.486597ms ago: executing program 3 (id=1718): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000008000"/28], 0xe) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3}}, [@tmpl={0x104, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@remote, 0x3502}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}]}]}, 0x1bc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 724.018094ms ago: executing program 2 (id=1719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xfcfb, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xae0a}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048081}, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x9}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa}}]}}]}, 0x44}}, 0x20000000) 666.946882ms ago: executing program 4 (id=1720): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$unix(r0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x31}, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 600.378197ms ago: executing program 1 (id=1721): r0 = socket$kcm(0x23, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001c000000bca30000000000002403000020feffff620a00fef8ffffff71a400fe000000001f03000000000000e5000600000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff"], 0x0, 0x2}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x24008046) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'ecn\x00'}, @NFTA_MATCH_INFO={0xc, 0x3, "e4edf2b75cc7c0a3"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'pkttype\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r7) sendmsg$NLBL_MGMT_C_LISTDEF(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r8, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200448c4}, 0x850) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60044084) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7"], 0x0, 0xc}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r13], 0x1c}}, 0x4008054) write$nci(r10, &(0x7f0000000140)=ANY=[@ANYBLOB="700009450220020f0400e1d333b762df50ed50cb0e65062a0011edaf4631fcb3bb2c5d894ac4ec85044474faf825000000000000000089ab4b387589962be3bf3303b3c598b3306728d9ace7bb7cd06c11b04e84b9e5d5f46a817c3d"], 0xc) 520.211836ms ago: executing program 3 (id=1722): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010003904080095977de4b0749fd7e50400000000000000dbdf2500b10000", @ANYRES32=r2, @ANYBLOB="01980400419a04002800128008000100736974001c00028008000300e000000106000d000600000008000100", @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5) (async, rerun: 64) r7 = gettid() (async, rerun: 64) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="089805000750050008001300", @ANYRES32=r7, @ANYBLOB="1400350076090000005f6d656376006170000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) (async) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="040000000000fdffffff070000000e0001006e657464657673696d0000000f0002006e65746465000000003000000800060078c32a1bb329217e4a32dbdb21c8708d0aadccb8f3e12682e9cc57a4000000", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000380)=0x2) (async, rerun: 32) socketpair(0x33, 0x800, 0x4, &(0x7f0000000000)) (rerun: 32) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x40, r10, 0x1, 0x0, 0x25dfdbfb, {{0x2}, {@val={0x8, 0x3, r12}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x40}}, 0x4004044) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) (async) r16 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) (async, rerun: 64) sendmsg$nl_route_sched(r13, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r15, {}, {0x5, 0xffff}}}, 0x24}}, 0x0) (async, rerun: 64) poll(&(0x7f0000000400)=[{r3, 0x40}], 0x1, 0x3) 506.999666ms ago: executing program 4 (id=1723): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f40)={0x108, r0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xe00}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xc}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3ff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x1c}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001100)={0x2, 0xd, 0x1, 0x8, 0x2a, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_spirange={0x2, 0x10, 0x4d3, 0x4d4}, @sadb_x_policy={0x8, 0x12, 0x1, 0x4, 0x0, 0x0, 0xc4f, {0x6, 0x2b, 0x1f, 0x5, 0x0, 0x7, 0x0, @in=@loopback, @in=@loopback}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x3, 0x7, 0x78, 0x0, 0x80000000}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d3}, @sadb_lifetime={0x4, 0x3, 0x0, 0xf77, 0x8, 0x7f}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d5}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x6e6bc0, 0x2, {0x6, 0x32, 0x88, 0x8, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@empty}}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}, @sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@broadcast, 0x18, 0x14, 0x4}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e24, @multicast2}}]}, 0x150}}, 0x4000000) r2 = socket(0x10, 0x80002, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{&(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x8000}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000140)="78c60ff48b00bdf1a5600ef1f09a7e34f5d2e82f68316a82fda4c44fcfd7f5f46b3036d96cf23077843dc675b07d5d7ce2d57215378d8703739770500e5ccc7b51a1b486b509d367bc65c6a8738a42fb3532fcdd79d68b39286d5fd754f40fd60c6ceb55a1", 0x65}, {&(0x7f0000001d00)}], 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x208}}, {{0x0, 0x0, &(0x7f0000001740)=[{0x0}, {&(0x7f0000001680)="df4334a77664102f5a8caf10562be26700f4c6873633f6d1ff9b33bec6363e58ed9ccf89dabc9710a543f19bec7606bab45b59d8386ecc74e4c8dd6a8ada5ced6c74534e1b8256d9c3e5827940dffa100e1092990f3a9dcb18371f6929729e5cd32d78d4bd76577873b4e7c5e7fa12cf2a3005a5c5116948ec8a75294fa0", 0x7e}], 0x2}}], 0x2, 0x8000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200000000000050420f01630c02000000000000000000000d000000b3875719002e3d53c0d8ed70db8ffd319a00f5a39a84593c"], 0x0, 0x34}, 0x28) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000001400)) (async) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r7 = socket$kcm(0x2d, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, &(0x7f0000001300), &(0x7f0000001340)=0x4) (async) r8 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000e40)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="1d25d91d4d40", 0x6}, {&(0x7f0000000040)="6cbc5ab00464994d2e827072057e9925c86a8bf6134893bb", 0x18}, {&(0x7f00000000c0)}, {&(0x7f0000000140)="6c4aad20a614411766dfadb1baafbbe3a90afe437fa7e996a2fd32c493207ecea5bb1dde53a07c65a39b70bc7e60d2506aa736095bdba14a9656dabfe67f3479b9a537063dde623db3ccc69f54439b75e3dc0fab49923db801707aac2d8020e13162299887ffea985cd165b70643cfa3dfac8316909b503d98d3fda90be8a97ab53827bd665377a98fb955d80b7814f712f7d6a6a3019725175b8c4c9feb7ce9d2d018873843c37685468df37372d106301296ecb7b240b734103fc2ee92b753b37fa8a0e56e209aea7167cd38", 0xcd}, {&(0x7f0000000240)="0d71280d5de4e3a53b7a62ef04e39cc748da3b8ba35e1f0616761a5164d19a3fc05db8effff11bbe275e75de8862460a42791bb19699396fec512223aa9455ea4da6ea486aa346a8b79acde95c358772dada17f5b80dc7b1abc95520f830b53ca74d5edea7cc12e5fe8c6add9623aee0a4dfe80c696747d13f7b1e214b4ab4cfb414b6543441cb0c7b335c92b7a472f79340380dc4aaa02b89671c4aa5140e3bc8288dc9bb", 0xa5}, {&(0x7f0000000300)="252a2e2ce27bf1fba797c1", 0xb}], 0x6, &(0x7f00000004c0)=[@iv={0xb8, 0x117, 0x2, 0x9e, "3a74dba0e2191654336d06f975946f14d6f4376f23c0b2c056076311cf23e3ada81ea884ca7811be9773b0b1f758e1e02009e9dff7c423d1a781d10bb0925ee50d3ec747e9fca4fa650afbd1a39ea00b606a03a2337e34785794c6f80f516f2674228fd6dd50a774985dc0cb34a403555aa1d12233ead7c640f820c44b698187a5597c6aa62c7e5b12376bedb39c1e56a180dac9caaa58eedb4ad7b22a9f"}, @assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x100, 0x20004804}, {0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000006c0)="48066c4a73037cb0da8d70f69afd2017211a61345c69765932eb29e4174272871b029284b8b5ae414229bb2cb06b24e3b3f6e506e06937d531a696e7ad8cb5cb5ba2dda01d76b96ec00878f95a5ad55bd3bb8b3aabe45bb3473bda76487a0b98a48fcf0250f64e88245328544c28a4aba974e730fbb09b8fb5b345d7102cae9ba3cf54be126c5bee2b32e3b649aff163b1dc2123704f484d2d5a6039757bb72b912b", 0xa2}, {&(0x7f0000000340)="c78f3468cab3c0c27b53c623788d2095048eab294ae34d1543f43a1be95c2cafd205029d91c767480f22f9e0fe03b31cda0e4e8790be6f", 0x37}, {&(0x7f0000000780)="70b8c916e9a7bc95d0da77685dc85d79fbf2524369c7c8065ee844e922074409782e870d0309aaab6a580aa80c963d96a6e4c2221de00c3cec9d2baf94a12e530a64c804aa9fffaf1f10ccb812404cc9e462f61a883dc57d5fed0b7edc24e021618a0054c4aeac7c1cd3bd11737dd13b966f3b8bea0a84bd8bad3c279a45a50fa40fe772e06eecb0672e7b986d2deded032ce5c8ddc7fb967a118c6f72fa6037df74d201b1eb6b3e", 0xa8}, {&(0x7f0000000840)="e272ba8b1ea9423b91efd636970d8c65a6be572cc907b7e44a281ce6e3b761034e98a8983c6aebe733b20e07ea73e211e95b458cf36585baec3ed18c5d708b4953cc2c0d08170bc36b2e37606564e7aacf8eaf310bc6f44608ff84c078af59e7fac111ed65dce90f5ddde1b70d05f74f9af834a6ae21708bb00434fc6c0ab443e6ba453b2fe03f6e7f2ec754132cf1fd6425763d6a1502f6f98e0b94a95b423fac895e6cd9abf94012dc5cca9fad257f9032ef75f741ed401a846f94974b2dbdaef14b5e4e4ab69f0a0d535adc284e01ccedc31a73849cdc85feed873498181e", 0xe0}, {&(0x7f0000000940)="66bc30be711cce49e446e253585fafafa0740905be698092753cd8a3cdb820de1e44ead659d8e21a2240704d4bc78fff6f577a4c20dcae658fa45716055f01182c879cc3431ef50d77992bf33c7a9713b431e1f9bbea83a85d8f0fc60a653584ea389dda6debe7ef6d1c1223d12064f9dba8abe75f817d9b934e9096ca61193ea095bda31669784ecc0da609ba20703dc918f608380c95", 0x97}, {&(0x7f0000000a00)="76cfaa105d73886cd199feac4609c3a796549791fbfe39754bca9c9b2e01cd56b0bdb864ac3498364a1305a916681ae330eb01ae657007dc91750f29b998f29a79258ddc598f6970ea9331a9e14c75f3809017e0b63654d77cd1c4a213b8fec43433f70d632a59c15846bff9660b2a73d2c4c7b3d4f0eb7121f8c31bbccef90356af0b6aa0fb7885d7ff1f46a6450fd429e422aadd00ff7fcfea2a1e878f973e142d5fbe45613b05c7b5d70be632231a52943d9fa5a628d1978435238de2bddfc7a68ba9a88400b85dc7c198b17e3ed7a09c367d6096bbc9ac6fdb1ed6522d14d1f20544dbf01784ebe7784f", 0xec}, {&(0x7f0000000440)="a1dbf53c89b94608a74da2ee3e855e32846faa5753c908793303de3bea1a9c8fe4ce87b90655e967edf28c863d7dd3663433", 0x32}, {&(0x7f0000000b00)="be090650810e35cad28f66313e5b8d4714de405f2b901b042ed6e1c93c17e6c2c052d6e4c6a0d3ed0b71a6f792c9c08611ff3d8be1764435deddb980a7c376d225f2663516ea51f36a68cc2ab632981c84a0946ec34f404d05fab485b61170511240c9", 0x63}], 0x8, &(0x7f0000000c00)=[@assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18}], 0x48, 0x44040}, {0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)="f53871e26cc08d15fa4c825fd5bfa2a33bd5f96d67bc3271c7ff370b63589008a0036c71289f321f063a5848f809bd1c31422a26bb177b6e54565c7edaa59f0648be39f8929e621cba95434a4791d00cc326b5e7588ab7e1553da2e6cea46b90c0e44bfcf75d77ac24ef667e3a5b", 0x6e}, {&(0x7f0000000d00)="bf93782b9fabd9edee8b3f2205c75f776d2cebef795704000d5d99b2b237e190b26566def6c709bda786b474fd0341f99353fae487d2f73856ff896bcdecfeac68917c5d1cc73dd91dfa996c0f25df228a3fa28450d43e5572d15f67b1ffb38580f437bf7ce86f9745501dd7df82c8f956b61fdde571b7bfd6c2191d5a0c7a8bc4386b21e7ccb6b299cdc486dd4da3c0fbf12b2e5eeb19c7494a4a13ca1bfb1009f070a7a1f384225e77dc202d06619da1e123e13980fa259bef227d845153245cd266757f4f3d8a", 0xc8}], 0x2, &(0x7f0000000e00)=[@assoc={0x18, 0x117, 0x4, 0x3}], 0x18, 0x64000014}], 0x3, 0x10) (async) r9 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r9, 0x891b, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000100)={r7}) bind$xdp(r10, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x80000040}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="360a000040000000611058000000000095000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 426.63697ms ago: executing program 2 (id=1724): r0 = socket(0x8, 0x0, 0x3) (async) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340), 0x4) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000440)) (async) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006000000000000008065b44f95caae586a81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001, 0x0, 0x0, 0x4}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0x9, 0x0, 0x50}}, 0x18}}, 0x0) (async) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c, 0x40800) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netpci0\x00'}) 319.540513ms ago: executing program 2 (id=1725): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x200, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0xf4, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0xa, '\x00', 0x10001, 0x600, 0x4175, 0x72}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7f, '\x00', 0x4, 0x2, 0xfffffffc, 0x10}}, @TCA_CBS_PARMS={0x18, 0x1, {0x9, '\x00', 0x7, 0x3, 0x100, 0xfffffffa}}, @TCA_CBS_PARMS={0x18, 0x1, {0x40, '\x00', 0x8, 0x400000, 0x2, 0x9}}, @TCA_CBS_PARMS={0x18, 0x1, {0xe, '\x00', 0x7, 0x6, 0x1133dff8, 0x6}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x48f, 0x4, 0x5, 0x4}}, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x8, 0x5, 0x5, 0x7fffffff}}, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x8, 0x7ff, 0x5, 0x7}}, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x2, 0x7, 0x2, 0x101}}, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x8, 0x400, 0x0, 0xbd01}}]}}, @TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, {0x10, 0x2, [0x0, 0x0, 0xffff, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c}, {0x4}}, {{0x1c}, {0x4}}]}]}, 0x200}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) getsockopt(r1, 0x5, 0x7, &(0x7f0000000cc0)=""/4096, &(0x7f00000004c0)=0x1000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x0, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0xb7045f7a208feb8a) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r4, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007"], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 319.024818ms ago: executing program 0 (id=1726): r0 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r1 = socket(0x10, 0x803, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f00000000c0)=0x5c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000080000e00000020000000000000000000000060000000000000000000000000000000000000800100000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000006000000000000000000000000000000feffffffffffffff00000000bc6b6e000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 204.821511ms ago: executing program 0 (id=1727): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xea, 0xea, 0xa, [@struct={0x9, 0x1, 0x0, 0x4, 0x1, 0xa, [{0x9, 0x0, 0x7fffffff}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x287}}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x16}, @datasec={0xc, 0x7, 0x0, 0xf, 0x2, [{0x4, 0xfffffff7, 0x8001}, {0x2, 0x75c, 0x40}, {0x5, 0x2e57, 0xcc27}, {0x3, 0x7, 0x7c}, {0x3, 0x1, 0x8}, {0x4, 0x7, 0xfffffffa}, {0x2, 0x40, 0x6}], "f227"}, @func={0x4, 0x0, 0x0, 0xc, 0x4}, @ptr={0x5, 0x0, 0x0, 0x2, 0x5}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x7ff, [{0x3, 0x5, 0x897e}, {0x4, 0x3, 0x1200}, {0xf, 0x3, 0x6}]}]}, {0x0, [0x5f, 0x30, 0x61, 0x2e, 0x5f, 0x61, 0x61, 0x61]}}, &(0x7f0000000240)=""/125, 0x10e, 0x7d, 0x1}, 0x28) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x9, 0x6, 0xc, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x8000, 0xffff8c63, 0x8}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000010000000090000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="0200eb0005000000020000000b00"/28], 0x50) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x30000100}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c000000120101010000000000000000010000080c00058008000100524153000c0019800800020000080000dd6f8508e2e440b01a8293865db10ef84a0d8d1e80d250f5467e0f2f675198fc8a0a91a9553f5552de105403b364466afcd36744b64079442b19ded95420cacdc70c6a64e797f2c245227efe1267fa333a0a67dc2530a4ff93f68c3c60b447c73cced8bf2a3457f002fc7c4e1a70be1d876e9d27d0ded5e15731db13192ea4972ab6a55d451aaffbe858d32d9b00cf1bf6ae253fbf70f89df3a28881de5a68fc8983d67d602b40ea82ded1"], 0x2c}, 0x1, 0x0, 0x0, 0x40844}, 0xacc0acefe21bc401) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r3, &(0x7f0000000440)="6e7f6195f2fb883da24aea42c2fb71d3f6c26a860baab68d07a16ac5618af376379b13c3c4db95c911c872edc9df09e931c8f83435c67236cbe5700132c3e1b99c9c714fa51bec307064bef066d3395265e235a6e244ca920a99", &(0x7f0000000000)=""/2, 0x2}, 0x20) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x180}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast2}]}}}]}, 0x48}, 0x1, 0x2, 0x0, 0x8000}, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0f0000000400000004000000b73d000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000036cb000000000000000000"], 0x48) r9 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000040), &(0x7f0000000080)=@udp6=r9}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r8, &(0x7f00000003c0), &(0x7f0000000400)=@udp6=r9, 0x1}, 0x20) (async) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r10, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x3}, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 150.92435ms ago: executing program 0 (id=1728): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48850) r1 = socket(0x11, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x8c}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES16=r1, @ANYRESHEX=r0], 0x48}}, 0x0) 56.411807ms ago: executing program 0 (id=1729): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000340a0a223d4a3427808986068239e89aff62", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112ba000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000940)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x75}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000071103e00000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000240)={&(0x7f0000000080)=0x9, 0x1, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000200)}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) 53.852456ms ago: executing program 0 (id=1730): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_buf(r3, 0x0, 0x50, 0x0, &(0x7f0000000100)) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x5}, 0x10) (async, rerun: 64) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) (async, rerun: 64) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 0s ago: executing program 0 (id=1731): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="09180000000000000000010000000800020002000000080001"], 0x24}}, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x27}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500fefffcffffff85100000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts. [ 81.324845][ T5805] cgroup: Unknown subsys name 'net' [ 81.436359][ T5805] cgroup: Unknown subsys name 'cpuset' [ 81.445832][ T5805] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.086459][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.003115][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.033486][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.056461][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.093764][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.101964][ T5821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.112451][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.120924][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.128701][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.137219][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.147418][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.279604][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.292963][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.303676][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.314560][ T5821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.323015][ T5821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.351484][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.360013][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.373147][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.384869][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.392723][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.435627][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.444294][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.451864][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.460568][ T5821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.468389][ T5821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.981749][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 88.027196][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 88.169096][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 88.296597][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.304967][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.312163][ T5817] bridge_slave_0: entered allmulticast mode [ 88.320145][ T5817] bridge_slave_0: entered promiscuous mode [ 88.365230][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.372396][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.380320][ T5817] bridge_slave_1: entered allmulticast mode [ 88.388900][ T5817] bridge_slave_1: entered promiscuous mode [ 88.397557][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 88.427468][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.436743][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.444443][ T5822] bridge_slave_0: entered allmulticast mode [ 88.451635][ T5822] bridge_slave_0: entered promiscuous mode [ 88.459619][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.467171][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.474422][ T5822] bridge_slave_1: entered allmulticast mode [ 88.481465][ T5822] bridge_slave_1: entered promiscuous mode [ 88.525322][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 88.559560][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.571578][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.670563][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.697121][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.704379][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.711549][ T5830] bridge_slave_0: entered allmulticast mode [ 88.718970][ T5830] bridge_slave_0: entered promiscuous mode [ 88.738883][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.756320][ T5817] team0: Port device team_slave_0 added [ 88.768558][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.775752][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.783280][ T5830] bridge_slave_1: entered allmulticast mode [ 88.791232][ T5830] bridge_slave_1: entered promiscuous mode [ 88.819541][ T5817] team0: Port device team_slave_1 added [ 88.885176][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.893074][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.900335][ T5831] bridge_slave_0: entered allmulticast mode [ 88.907880][ T5831] bridge_slave_0: entered promiscuous mode [ 88.932953][ T5822] team0: Port device team_slave_0 added [ 88.951516][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.959192][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.966494][ T5831] bridge_slave_1: entered allmulticast mode [ 88.974245][ T5831] bridge_slave_1: entered promiscuous mode [ 88.984445][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.005536][ T5822] team0: Port device team_slave_1 added [ 89.012268][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.019492][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.046172][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.058741][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.065925][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.092143][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.115914][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.185897][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.193236][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.200534][ T5827] bridge_slave_0: entered allmulticast mode [ 89.203550][ T5825] Bluetooth: hci0: command tx timeout [ 89.208543][ T5827] bridge_slave_0: entered promiscuous mode [ 89.212262][ T5821] Bluetooth: hci1: command tx timeout [ 89.221419][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.230874][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.238227][ T5827] bridge_slave_1: entered allmulticast mode [ 89.245369][ T5827] bridge_slave_1: entered promiscuous mode [ 89.263114][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.270104][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.297198][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.311363][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.323355][ T5830] team0: Port device team_slave_0 added [ 89.352093][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.359452][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.385911][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.396508][ T5825] Bluetooth: hci2: command tx timeout [ 89.405252][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.416482][ T5830] team0: Port device team_slave_1 added [ 89.424421][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.453514][ T5825] Bluetooth: hci3: command tx timeout [ 89.495278][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.523044][ T5825] Bluetooth: hci4: command tx timeout [ 89.537215][ T5817] hsr_slave_0: entered promiscuous mode [ 89.543691][ T5817] hsr_slave_1: entered promiscuous mode [ 89.583227][ T5831] team0: Port device team_slave_0 added [ 89.589857][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.597227][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.628248][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.641917][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.649307][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.676787][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.708725][ T5827] team0: Port device team_slave_0 added [ 89.716305][ T5831] team0: Port device team_slave_1 added [ 89.752285][ T5822] hsr_slave_0: entered promiscuous mode [ 89.758931][ T5822] hsr_slave_1: entered promiscuous mode [ 89.765569][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 89.771358][ T5822] Cannot create hsr debugfs directory [ 89.779298][ T5827] team0: Port device team_slave_1 added [ 89.834177][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.841166][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.867689][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.908230][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.915393][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.942441][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.954634][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.961719][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.988268][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.006143][ T5830] hsr_slave_0: entered promiscuous mode [ 90.012446][ T5830] hsr_slave_1: entered promiscuous mode [ 90.018789][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 90.024834][ T5830] Cannot create hsr debugfs directory [ 90.046955][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.054113][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.080312][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.245701][ T5827] hsr_slave_0: entered promiscuous mode [ 90.252540][ T5827] hsr_slave_1: entered promiscuous mode [ 90.259109][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 90.265286][ T5827] Cannot create hsr debugfs directory [ 90.291969][ T5831] hsr_slave_0: entered promiscuous mode [ 90.298556][ T5831] hsr_slave_1: entered promiscuous mode [ 90.305190][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 90.311119][ T5831] Cannot create hsr debugfs directory [ 90.732012][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.752511][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.763608][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.774517][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.849315][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.860524][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.871202][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.883927][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.975818][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.989582][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.018633][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.039138][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.104455][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.115760][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.127413][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.139157][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.282194][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.283400][ T5821] Bluetooth: hci1: command tx timeout [ 91.295175][ T5825] Bluetooth: hci0: command tx timeout [ 91.309875][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.327950][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.337944][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.352579][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.399791][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.430105][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.437418][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.446228][ T5821] Bluetooth: hci2: command tx timeout [ 91.498329][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.505483][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.523984][ T5821] Bluetooth: hci3: command tx timeout [ 91.525790][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.567143][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.603118][ T5821] Bluetooth: hci4: command tx timeout [ 91.615081][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.626444][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.655662][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.675404][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.682548][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.703188][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.730406][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.737633][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.748323][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.755614][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.767912][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.775078][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.805075][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.812321][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.832669][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.839830][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.860419][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.941881][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.998375][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.005579][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.015604][ T9] cfg80211: failed to load regulatory.db [ 92.067526][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.074766][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.300699][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.489688][ T5817] veth0_vlan: entered promiscuous mode [ 92.568704][ T5817] veth1_vlan: entered promiscuous mode [ 92.689208][ T5817] veth0_macvtap: entered promiscuous mode [ 92.709260][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.751068][ T5817] veth1_macvtap: entered promiscuous mode [ 92.775784][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.796640][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.810615][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.830152][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.852620][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.870929][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.887786][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.914589][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.932807][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.071345][ T5830] veth0_vlan: entered promiscuous mode [ 93.086522][ T5822] veth0_vlan: entered promiscuous mode [ 93.135173][ T5830] veth1_vlan: entered promiscuous mode [ 93.170110][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.184606][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.199265][ T5822] veth1_vlan: entered promiscuous mode [ 93.277855][ T5831] veth0_vlan: entered promiscuous mode [ 93.302503][ T5831] veth1_vlan: entered promiscuous mode [ 93.311622][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.328093][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.363904][ T5821] Bluetooth: hci1: command tx timeout [ 93.369431][ T5821] Bluetooth: hci0: command tx timeout [ 93.382168][ T5822] veth0_macvtap: entered promiscuous mode [ 93.405870][ T5830] veth0_macvtap: entered promiscuous mode [ 93.419503][ T5822] veth1_macvtap: entered promiscuous mode [ 93.433128][ T5817] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.452394][ T5831] veth0_macvtap: entered promiscuous mode [ 93.476439][ T5831] veth1_macvtap: entered promiscuous mode [ 93.499880][ T5830] veth1_macvtap: entered promiscuous mode [ 93.514398][ T5827] veth0_vlan: entered promiscuous mode [ 93.524618][ T5821] Bluetooth: hci2: command tx timeout [ 93.579981][ T5933] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.596797][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.604707][ T5821] Bluetooth: hci3: command tx timeout [ 93.616193][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.645096][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.673452][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.683976][ T5821] Bluetooth: hci4: command tx timeout [ 93.694932][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.711786][ T5827] veth1_vlan: entered promiscuous mode [ 93.726403][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.736769][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.757966][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.769119][ T5935] openvswitch: netlink: Flow key attr not present in new flow. [ 93.783992][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.808313][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.882103][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.897653][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.924720][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.934841][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.954768][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.963940][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.965688][ T5938] netlink: 404 bytes leftover after parsing attributes in process `syz.0.6'. [ 93.984760][ T5938] ieee802154 phy0 wpan0: encryption failed: -22 [ 93.998984][ T5827] veth0_macvtap: entered promiscuous mode [ 94.008417][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.036386][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.075377][ T5827] veth1_macvtap: entered promiscuous mode [ 94.191604][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.194807][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.199849][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.218515][ T5943] netlink: 'syz.0.7': attribute type 17 has an invalid length. [ 94.218983][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.236307][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'. [ 94.247771][ T5943] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7'. [ 94.290569][ T5943] gretap0: entered promiscuous mode [ 94.297780][ T5943] gretap0: left promiscuous mode [ 94.339525][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.347550][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.369683][ T1156] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.382797][ T1156] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.430770][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.430775][ T1156] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.442374][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.498036][ T1156] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.512333][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.528030][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.646355][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.660766][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.672021][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.684223][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.850010][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.893377][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.910075][ T5957] netlink: 59 bytes leftover after parsing attributes in process `syz.2.9'. [ 95.021932][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.044921][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.098011][ T5961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'. [ 95.187366][ T5960] syzkaller0: entered promiscuous mode [ 95.210447][ T5960] syzkaller0: entered allmulticast mode [ 95.329806][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.337698][ T5960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.357969][ T5971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.420588][ T5971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13'. [ 95.447052][ T5821] Bluetooth: hci0: command tx timeout [ 95.452513][ T5821] Bluetooth: hci1: command tx timeout [ 95.604114][ T5821] Bluetooth: hci2: command tx timeout [ 95.683261][ T5821] Bluetooth: hci3: command tx timeout [ 95.739393][ T5994] netlink: 'syz.1.18': attribute type 21 has an invalid length. [ 95.763571][ T5821] Bluetooth: hci4: command tx timeout [ 95.778718][ T5994] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18'. [ 95.790131][ T5994] tipc: Enabling of bearer rejected, failed to enable media [ 96.157583][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 96.193240][ T6008] netlink: 'syz.2.21': attribute type 5 has an invalid length. [ 96.232507][ T6008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21'. [ 96.538454][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'. [ 96.700834][ T6037] netlink: 'syz.3.30': attribute type 8 has an invalid length. [ 96.720236][ T6037] bond0: entered promiscuous mode [ 96.743408][ T6037] bond_slave_0: entered promiscuous mode [ 96.794144][ T6037] bond_slave_1: entered promiscuous mode [ 96.846234][ T6037] gretap0: entered promiscuous mode [ 96.857585][ T6037] bond0: left promiscuous mode [ 96.871656][ T6037] bond_slave_0: left promiscuous mode [ 96.891679][ T6037] bond_slave_1: left promiscuous mode [ 96.905757][ T6037] gretap0: left promiscuous mode [ 97.159181][ T6044] "syz.1.31" (6044) uses obsolete ecb(arc4) skcipher [ 97.542302][ T6071] syzkaller0: entered promiscuous mode [ 97.552793][ T6071] syzkaller0: entered allmulticast mode [ 97.577524][ T6083] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 97.604817][ T6071] bond0: option ad_select: unable to set because the bond device is up [ 97.614375][ T35] bond0: (slave bond_slave_0): interface is now down [ 97.621460][ T6082] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 97.621460][ T35] bond0: (slave bond_slave_1): interface is now down [ 97.651715][ T6082] xt_SECMARK: invalid mode: 9 [ 97.704509][ T6087] netlink: 'syz.1.43': attribute type 1 has an invalid length. [ 97.835942][ T6093] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.932226][ T6097] delete_channel: no stack [ 99.151872][ T6090] gretap1: entered promiscuous mode [ 99.706678][ T6135] __nla_validate_parse: 5 callbacks suppressed [ 99.706698][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'. [ 99.759616][ T6135] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.871251][ T6144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.57'. [ 100.008627][ T6147] syzkaller1: entered promiscuous mode [ 100.021498][ T6147] syzkaller1: entered allmulticast mode [ 100.056718][ T6147] netlink: 'syz.0.58': attribute type 33 has an invalid length. [ 100.077208][ T6147] netlink: 152 bytes leftover after parsing attributes in process `syz.0.58'. [ 100.172917][ T145] bond0: (slave bond_slave_0): interface is now down [ 100.180623][ T145] bond0: (slave bond_slave_1): interface is now down [ 100.646097][ T6176] netlink: 'syz.2.65': attribute type 1 has an invalid length. [ 100.726395][ T6176] netlink: 52 bytes leftover after parsing attributes in process `syz.2.65'. [ 100.880622][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'. [ 100.932324][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'. [ 100.980799][ T6187] syz.0.68 uses obsolete (PF_INET,SOCK_PACKET) [ 101.026829][ T6196] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 101.056552][ T6201] netlink: 76 bytes leftover after parsing attributes in process `syz.3.72'. [ 101.314633][ T6205] netlink: 'syz.1.74': attribute type 10 has an invalid length. [ 101.333859][ T6205] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.395126][ T6205] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.402426][ T6205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.419388][ T6205] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 101.522400][ T6214] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.530207][ T6214] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.601146][ T6214] bridge_slave_0: left allmulticast mode [ 101.608368][ T6214] bridge_slave_0: left promiscuous mode [ 101.615703][ T6214] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.648593][ T6214] bridge_slave_1: left allmulticast mode [ 101.660036][ T6214] bridge_slave_1: left promiscuous mode [ 101.666576][ T6214] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.679495][ T6214] bond0: (slave bond_slave_0): Releasing backup interface [ 101.699600][ T6214] bond0: (slave bond_slave_1): Releasing backup interface [ 101.720376][ T6214] team0: Port device team_slave_0 removed [ 101.736474][ T6214] team0: Port device team_slave_1 removed [ 101.748603][ T6214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.761946][ T6214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.777675][ T6214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.790919][ T6214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.807303][ T6214] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 101.858538][ T6224] syzkaller0: entered promiscuous mode [ 101.892983][ T6224] syzkaller0: entered allmulticast mode [ 101.989196][ T6234] Zero length message leads to an empty skb [ 102.030423][ T6239] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 102.041289][ T6243] netlink: 36 bytes leftover after parsing attributes in process `syz.1.83'. [ 102.331453][ T6259] netlink: 28 bytes leftover after parsing attributes in process `syz.4.85'. [ 102.343380][ T6260] netlink: 'syz.3.88': attribute type 2 has an invalid length. [ 102.351183][ T6260] netlink: 'syz.3.88': attribute type 1 has an invalid length. [ 102.419969][ T6259] netlink: 36 bytes leftover after parsing attributes in process `syz.4.85'. [ 102.722782][ T12] bond0: (slave bond_slave_0): interface is now down [ 102.729706][ T12] bond0: (slave bond_slave_1): interface is now down [ 102.809013][ T6275] block nbd0: Unsupported socket: should be TCP or UNIX. [ 103.599539][ T6313] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 103.627917][ T6313] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 103.661138][ T6313] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 103.690816][ T6313] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 103.723862][ T6313] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 103.772525][ T6313] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 103.791275][ T6313] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 103.799718][ T6313] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 103.809403][ T6313] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 103.817585][ T6313] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 103.920532][ T6328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.101808][ T6332] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 104.531772][ T6349] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 104.597155][ T6349] bond1 (unregistering): Released all slaves [ 104.990756][ T6381] __nla_validate_parse: 8 callbacks suppressed [ 104.990776][ T6381] netlink: 596 bytes leftover after parsing attributes in process `syz.3.123'. [ 105.044332][ T6389] netlink: 'syz.2.124': attribute type 1 has an invalid length. [ 105.052077][ T6389] netlink: 228 bytes leftover after parsing attributes in process `syz.2.124'. [ 105.117596][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.127'. [ 105.188627][ T5821] block nbd0: Receive control failed (result -1) [ 105.286300][ T49] bond0: (slave bond_slave_0): interface is now down [ 105.302739][ T49] bond0: (slave bond_slave_1): interface is now down [ 105.332480][ T49] bond0: now running without any active interface! [ 105.807855][ T6415] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.133'. [ 105.857531][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.134'. [ 105.969703][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 106.029466][ T6422] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 106.074962][ T6416] netlink: 60 bytes leftover after parsing attributes in process `syz.0.133'. [ 106.187116][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 106.226306][ T6429] syzkaller0: entered promiscuous mode [ 106.238554][ T6429] syzkaller0: entered allmulticast mode [ 106.270799][ T6431] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 106.471315][ T6440] netlink: 'syz.2.141': attribute type 2 has an invalid length. [ 106.600186][ T6449] netlink: 256 bytes leftover after parsing attributes in process `syz.4.143'. [ 106.766123][ T6451] syzkaller0: entered promiscuous mode [ 106.771657][ T6451] syzkaller0: entered allmulticast mode [ 106.817948][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.147'. [ 107.294308][ T6486] netlink: 'syz.4.152': attribute type 6 has an invalid length. [ 107.316295][ T6486] netlink: 'syz.4.152': attribute type 6 has an invalid length. [ 107.358402][ T6486] netlink: 'syz.4.152': attribute type 6 has an invalid length. [ 107.373948][ T6486] netlink: 'syz.4.152': attribute type 6 has an invalid length. [ 107.382124][ T6486] netlink: 'syz.4.152': attribute type 6 has an invalid length. [ 107.390960][ T6486] netlink: 'syz.4.152': attribute type 6 has an invalid length. [ 107.399069][ T6486] netlink: 'syz.4.152': attribute type 6 has an invalid length. [ 107.408210][ T6486] netlink: 'syz.4.152': attribute type 6 has an invalid length. [ 107.441047][ T6490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.557493][ T6486] netlink: 'syz.4.152': attribute type 6 has an invalid length. [ 107.928316][ T6510] 8021q: VLANs not supported on wg1 [ 108.666303][ T6538] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.977419][ T6614] warning: `syz.0.183' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.546912][ T6637] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 110.565891][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 110.632370][ T6637] bond1 (unregistering): Released all slaves [ 110.823051][ T6644] ip6gre0: Master is either lo or non-ether device [ 111.074843][ T6663] __nla_validate_parse: 7 callbacks suppressed [ 111.074865][ T6663] netlink: 28 bytes leftover after parsing attributes in process `syz.1.192'. [ 111.281067][ T6673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.194'. [ 111.308956][ T6673] bond0: entered promiscuous mode [ 111.340479][ T6673] gretap0: entered promiscuous mode [ 111.378788][ T6673] ip6gretap0: entered promiscuous mode [ 111.407055][ T6673] hsr1: entered promiscuous mode [ 111.460437][ T6679] netlink: 40 bytes leftover after parsing attributes in process `syz.0.197'. [ 111.474239][ T6676] syzkaller1: entered promiscuous mode [ 111.492465][ T6676] syzkaller1: entered allmulticast mode [ 111.725316][ T6694] validate_nla: 28 callbacks suppressed [ 111.725337][ T6694] netlink: 'syz.0.201': attribute type 21 has an invalid length. [ 111.760963][ T6694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.201'. [ 112.060789][ T6703] syzkaller0: entered promiscuous mode [ 112.069774][ T6703] syzkaller0: entered allmulticast mode [ 112.547882][ T6736] netlink: 'syz.1.217': attribute type 25 has an invalid length. [ 112.644763][ T5821] Bluetooth: hci4: command 0x0405 tx timeout [ 112.657654][ T6740] netlink: 32 bytes leftover after parsing attributes in process `syz.4.215'. [ 112.742028][ T6748] Cannot find del_set index 0 as target [ 113.052029][ T6761] netlink: 80 bytes leftover after parsing attributes in process `syz.0.225'. [ 113.098659][ T6767] block nbd1: Unsupported socket: should be TCP or UNIX. [ 113.116321][ T6761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.225'. [ 113.228803][ T6770] veth3: entered promiscuous mode [ 113.251402][ T6773] netlink: 'syz.2.228': attribute type 39 has an invalid length. [ 113.253562][ T6761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.225'. [ 113.273670][ T6774] xt_addrtype: ipv6 does not support BROADCAST matching [ 113.438360][ T6780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.231'. [ 113.492497][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'. [ 113.659716][ T6790] trusted_key: syz.4.233 sent an empty control message without MSG_MORE. [ 113.837317][ T6801] netlink: 'syz.2.237': attribute type 21 has an invalid length. [ 114.043766][ T6798] syzkaller1: entered promiscuous mode [ 114.058948][ T6798] syzkaller1: entered allmulticast mode [ 114.766450][ T6849] syzkaller0: entered promiscuous mode [ 114.772114][ T6849] syzkaller0: entered allmulticast mode [ 114.794857][ T6849] tipc: Started in network mode [ 114.803739][ T6849] tipc: Node identity a653043d3de8, cluster identity 4711 [ 114.811394][ T6849] tipc: Enabled bearer , priority 0 [ 114.862709][ T6847] tipc: Resetting bearer [ 114.895593][ T6847] tipc: Disabling bearer [ 115.110821][ T6868] x_tables: duplicate underflow at hook 2 [ 115.305899][ T6870] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.593719][ T6892] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 115.779739][ T6903] syzkaller0: entered promiscuous mode [ 115.806368][ T6903] syzkaller0: entered allmulticast mode [ 115.825177][ T6908] netlink: 'syz.4.271': attribute type 1 has an invalid length. [ 115.960115][ T6913] netlink: 'syz.0.269': attribute type 1 has an invalid length. [ 116.527087][ T6956] syz.1.282 uses old SIOCAX25GETINFO [ 116.835850][ T6973] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 116.908223][ T6978] veth0_to_bridge: entered promiscuous mode [ 116.994501][ T6978] veth0_to_bridge: left promiscuous mode [ 117.375896][ T7002] __nla_validate_parse: 8 callbacks suppressed [ 117.375917][ T7002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.295'. [ 117.431755][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.296'. [ 117.443434][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 117.703834][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.301'. [ 117.723910][ T7015] netlink: 20 bytes leftover after parsing attributes in process `syz.3.298'. [ 117.744823][ T7020] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 118.044303][ T7035] netlink: 24 bytes leftover after parsing attributes in process `syz.3.304'. [ 118.159368][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.304'. [ 118.213417][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.307'. [ 118.542153][ T7068] netlink: 28 bytes leftover after parsing attributes in process `syz.3.311'. [ 118.839556][ T7086] tipc: Can't bind to reserved service type 2 [ 118.917165][ T7094] netlink: 'syz.0.316': attribute type 5 has an invalid length. [ 118.969345][ T7096] netlink: 28 bytes leftover after parsing attributes in process `syz.4.320'. [ 118.981740][ T7093] macsec1: entered promiscuous mode [ 119.597068][ T7119] bond1: entered promiscuous mode [ 119.606389][ T7119] bond1: entered allmulticast mode [ 119.617725][ T7119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.680813][ T7128] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.815262][ T7142] nbd1: detected capacity change from 0 to 127 [ 119.824511][ T7128] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.835500][ T5821] block nbd1: Receive control failed (result -104) [ 119.959435][ T7128] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.040889][ T7152] syzkaller0: entered promiscuous mode [ 120.055256][ T7152] syzkaller0: entered allmulticast mode [ 120.092556][ T7128] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.114557][ T7152] 0: reclassify loop, rule prio 0, protocol 800 [ 120.494371][ T6919] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.556354][ T6919] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.601474][ T6919] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.671091][ T6923] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.866583][ T7192] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 121.369779][ T7220] syz_tun: entered allmulticast mode [ 121.565460][ T7220] netlink: 'syz.3.352': attribute type 1 has an invalid length. [ 121.594753][ T7218] netlink: 'syz.3.352': attribute type 1 has an invalid length. [ 121.765432][ T7244] openvswitch: netlink: IPv4 tunnel dst address is zero [ 121.845859][ T7249] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 121.997475][ T7214] syz_tun: left allmulticast mode [ 122.356200][ T7275] IPVS: length: 4096 != 24 [ 122.736120][ T7284] __nla_validate_parse: 47 callbacks suppressed [ 122.736152][ T7284] netlink: 36 bytes leftover after parsing attributes in process `syz.0.365'. [ 123.493135][ T7321] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 123.587903][ T7334] netlink: 666 bytes leftover after parsing attributes in process `syz.4.375'. [ 123.667871][ T7328] delete_channel: no stack [ 123.961083][ T7346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.377'. [ 124.028487][ T7349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.378'. [ 124.125106][ T7352] netlink: 'syz.0.379': attribute type 10 has an invalid length. [ 124.178707][ T7357] tipc: Started in network mode [ 124.186865][ T7357] tipc: Node identity 4a76ee45f36, cluster identity 4711 [ 124.212481][ T7357] tipc: Enabled bearer , priority 0 [ 124.272216][ T7358] netlink: 88 bytes leftover after parsing attributes in process `syz.2.380'. [ 124.295488][ T7364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.381'. [ 124.318502][ T7358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.380'. [ 124.388763][ T7357] tipc: Disabling bearer [ 124.442359][ T7370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.382'. [ 124.522528][ T7375] sctp: [Deprecated]: syz.1.383 (pid 7375) Use of int in maxseg socket option. [ 124.522528][ T7375] Use struct sctp_assoc_value instead [ 124.696016][ T7381] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 124.713158][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.386'. [ 125.074170][ T7397] netlink: 'syz.1.388': attribute type 1 has an invalid length. [ 125.093634][ T7399] netlink: 'syz.2.390': attribute type 4 has an invalid length. [ 125.134206][ T7397] netlink: 244 bytes leftover after parsing attributes in process `syz.1.388'. [ 125.149261][ T7400] netlink: 'syz.2.390': attribute type 4 has an invalid length. [ 125.478572][ T7406] ip6gre1: entered allmulticast mode [ 125.491594][ T7412] netlink: 'syz.1.394': attribute type 1 has an invalid length. [ 125.581760][ T7412] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.009925][ T7440] netlink: 'syz.1.401': attribute type 1 has an invalid length. [ 126.135527][ T7443] bond3: (slave ip6gretap1): making interface the new active one [ 126.160160][ T7443] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 126.172199][ T7443] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 126.183798][ T7443] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 126.218466][ T7446] tipc: Failed to obtain node identity [ 126.229125][ T7446] tipc: Enabling of bearer rejected, failed to enable media [ 126.311113][ T6921] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.330421][ T6921] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.361024][ T6921] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.399664][ T6921] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.627568][ T7464] netlink: 'syz.3.413': attribute type 1 has an invalid length. [ 126.761092][ T7464] batadv1: entered allmulticast mode [ 126.890584][ T7480] netlink: 'syz.0.416': attribute type 1 has an invalid length. [ 126.930432][ T7480] netlink: 'syz.0.416': attribute type 1 has an invalid length. [ 126.945528][ T7485] netlink: 'syz.4.417': attribute type 39 has an invalid length. [ 127.148024][ T7492] 8021q: adding VLAN 0 to HW filter on device bond4 [ 127.263418][ T7498] bond4: (slave veth0_to_bond): making interface the new active one [ 127.279952][ T7498] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 127.300881][ T7492] bond4: entered promiscuous mode [ 127.306707][ T7492] veth0_to_bond: entered promiscuous mode [ 127.328550][ T7492] bond4: entered allmulticast mode [ 127.338471][ T7492] veth0_to_bond: entered allmulticast mode [ 127.766831][ T7527] sctp: [Deprecated]: syz.0.427 (pid 7527) Use of int in maxseg socket option. [ 127.766831][ T7527] Use struct sctp_assoc_value instead [ 128.008791][ T7539] geneve2: entered promiscuous mode [ 128.062830][ T7539] : renamed from hsr0 (while UP) [ 128.139942][ T7543] xt_CT: No such helper "pptp" [ 128.438021][ T7558] __nla_validate_parse: 52 callbacks suppressed [ 128.438044][ T7558] netlink: 60 bytes leftover after parsing attributes in process `syz.2.437'. [ 128.442430][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'. [ 128.462942][ T7561] unsupported nla_type 33542 [ 128.478103][ T7558] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 128.533263][ T7566] mac80211_hwsim hwsim6 ÿ: renamed from wlan1 (while UP) [ 128.678616][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'. [ 128.776150][ T5941] IPVS: starting estimator thread 0... [ 128.784805][ T7582] openvswitch: netlink: Missing valid actions attribute. [ 128.816008][ T7582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.867453][ T7584] IPVS: using max 34 ests per chain, 81600 per kthread [ 128.891986][ T7589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.449'. [ 128.936895][ T7589] netlink: 40 bytes leftover after parsing attributes in process `syz.4.449'. [ 129.011509][ T7600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.451'. [ 129.050132][ T7601] openvswitch: netlink: IP tunnel TTL not specified. [ 129.067459][ T7601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.452'. [ 129.075105][ T7597] netlink: 24 bytes leftover after parsing attributes in process `syz.2.451'. [ 129.243405][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d751400: rx timeout, send abort [ 129.253249][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d751400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 129.300670][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.454'. [ 129.956303][ T7652] netlink: 24 bytes leftover after parsing attributes in process `syz.0.468'. [ 131.736053][ T7742] validate_nla: 1 callbacks suppressed [ 131.736072][ T7742] netlink: 'syz.0.496': attribute type 1 has an invalid length. [ 131.967577][ T7750] bond1 (unregistering): Released all slaves [ 132.117089][ T7755] bond1: (slave gretap1): making interface the new active one [ 132.125736][ T7755] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 132.171360][ T7761] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.219812][ T7765] : entered promiscuous mode [ 132.277404][ T7773] netlink: 'syz.3.503': attribute type 1 has an invalid length. [ 132.289277][ T7773] netlink: 'syz.3.503': attribute type 2 has an invalid length. [ 132.297776][ T7773] netlink: 'syz.3.503': attribute type 1 has an invalid length. [ 132.942334][ T7813] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.979817][ T7813] openvswitch: netlink: IPv6 tunnel dst address is zero [ 132.981551][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.001266][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.013487][ T1299] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 133.064856][ T7818] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.602402][ T7847] __nla_validate_parse: 18 callbacks suppressed [ 133.602426][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'. [ 133.617977][ T7849] netlink: 'syz.0.521': attribute type 21 has an invalid length. [ 133.633479][ T7849] netlink: 'syz.0.521': attribute type 6 has an invalid length. [ 133.670279][ T7849] netlink: 132 bytes leftover after parsing attributes in process `syz.0.521'. [ 133.776328][ T7848] syzkaller1: entered promiscuous mode [ 133.781868][ T7848] syzkaller1: entered allmulticast mode [ 133.950362][ T7862] netlink: 40 bytes leftover after parsing attributes in process `syz.1.526'. [ 134.390036][ T7880] netlink: 'syz.2.531': attribute type 2 has an invalid length. [ 134.403008][ T7880] netlink: 'syz.2.531': attribute type 3 has an invalid length. [ 134.606675][ T7894] Cannot find add_set index 65532 as target [ 134.621060][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.535'. [ 134.691819][ T7894] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.535'. [ 134.975260][ T7909] netlink: 'syz.0.540': attribute type 3 has an invalid length. [ 135.057723][ T7917] Bluetooth: MGMT ver 1.23 [ 135.334919][ T7928] syzkaller1: entered promiscuous mode [ 135.348074][ T7928] syzkaller1: entered allmulticast mode [ 135.375811][ T7934] netlink: 'syz.1.548': attribute type 1 has an invalid length. [ 135.392764][ T7934] netlink: 224 bytes leftover after parsing attributes in process `syz.1.548'. [ 135.665015][ T7942] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 135.668951][ T7913] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 135.896459][ T7953] x_tables: duplicate underflow at hook 2 [ 136.172527][ T7967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.558'. [ 136.504000][ T7986] gretap1: entered promiscuous mode [ 136.540339][ T7986] bond3: (slave gretap1): making interface the new active one [ 136.567163][ T7986] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 136.664550][ T7976] macvlan2: entered promiscuous mode [ 136.673878][ T7976] macvlan2: entered allmulticast mode [ 136.680439][ T7976] bond3: entered promiscuous mode [ 136.681400][ T8000] SET target dimension over the limit! [ 136.687344][ T7976] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 136.701008][ T7976] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 136.721343][ T7976] bond3: left promiscuous mode [ 136.844589][ T8006] validate_nla: 1 callbacks suppressed [ 136.844608][ T8006] netlink: 'syz.1.568': attribute type 1 has an invalid length. [ 136.888765][ T8006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.568'. [ 137.123141][ T5821] Bluetooth: hci0: command 0x0c1a tx timeout [ 137.177127][ T8026] netlink: 'syz.1.575': attribute type 32 has an invalid length. [ 137.185688][ T8026] netlink: 'syz.1.575': attribute type 62 has an invalid length. [ 137.406441][ T8033] xt_hashlimit: size too large, truncated to 1048576 [ 137.531343][ T8044] netlink: 20 bytes leftover after parsing attributes in process `syz.1.582'. [ 138.048365][ T8063] netlink: 48 bytes leftover after parsing attributes in process `syz.3.587'. [ 138.660108][ T5833] udevd[5833]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 138.729339][ T7206] udevd[7206]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 138.988177][ T8119] sctp: [Deprecated]: syz.2.600 (pid 8119) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.988177][ T8119] Use struct sctp_sack_info instead [ 139.269303][ T8131] __nla_validate_parse: 4 callbacks suppressed [ 139.269325][ T8131] netlink: 16 bytes leftover after parsing attributes in process `syz.0.603'. [ 139.323202][ T8132] netlink: 'syz.1.604': attribute type 32 has an invalid length. [ 139.331162][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'. [ 139.408835][ T8132] bond6: Setting coupled_control to off (0) [ 139.422459][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'. [ 139.883421][ T8148] xt_socket: unknown flags 0xe4 [ 139.916075][ T8124] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 140.239458][ T8165] netlink: 56 bytes leftover after parsing attributes in process `syz.1.614'. [ 140.242020][ T8168] netlink: 56 bytes leftover after parsing attributes in process `syz.1.614'. [ 140.288644][ T8168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.614'. [ 140.323122][ T8168] netlink: 31 bytes leftover after parsing attributes in process `syz.1.614'. [ 140.401079][ T8168] netlink: 'syz.1.614': attribute type 2 has an invalid length. [ 140.421852][ T8173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.615'. [ 140.450069][ T8168] netlink: 31 bytes leftover after parsing attributes in process `syz.1.614'. [ 140.492121][ T8165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.614'. [ 140.521515][ T8165] netlink: 'syz.1.614': attribute type 2 has an invalid length. [ 141.082596][ T8210] bond7 (unregistering): Released all slaves [ 141.134941][ T5821] Bluetooth: hci4: command 0x0405 tx timeout [ 141.258655][ T8218] netlink: 'syz.2.628': attribute type 4 has an invalid length. [ 141.433976][ T8233] netlink: 'syz.3.632': attribute type 2 has an invalid length. [ 141.612530][ T8239] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 141.675578][ T8248] netlink: 'syz.4.634': attribute type 1 has an invalid length. [ 141.717967][ T8246] x_tables: duplicate underflow at hook 2 [ 141.850378][ T8251] ipvlan2: entered promiscuous mode [ 141.946977][ T8248] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.097224][ T8239] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.112135][ T8239] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 142.125927][ T8239] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 142.211202][ T8242] veth5: entered promiscuous mode [ 142.242469][ T8242] bond2: (slave veth5): Enslaving as an active interface with a down link [ 142.270824][ T8248] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.391856][ T8272] 8021q: adding VLAN 0 to HW filter on device bond4 [ 142.571228][ T8290] FAULT_INJECTION: forcing a failure. [ 142.571228][ T8290] name failslab, interval 1, probability 0, space 0, times 0 [ 142.596430][ T8290] CPU: 0 UID: 0 PID: 8290 Comm: syz.4.644 Not tainted syzkaller #0 PREEMPT(full) [ 142.596457][ T8290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 142.596467][ T8290] Call Trace: [ 142.596475][ T8290] [ 142.596483][ T8290] dump_stack_lvl+0xe8/0x150 [ 142.596513][ T8290] should_fail_ex+0x412/0x560 [ 142.596545][ T8290] should_failslab+0xa8/0x100 [ 142.596571][ T8290] __kmalloc_noprof+0xe8/0x760 [ 142.596595][ T8290] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 142.596628][ T8290] tomoyo_realpath_from_path+0xe3/0x5d0 [ 142.596653][ T8290] ? tomoyo_domain+0xd7/0x130 [ 142.596676][ T8290] ? tomoyo_path_number_perm+0x219/0x630 [ 142.596698][ T8290] tomoyo_path_number_perm+0x246/0x630 [ 142.596721][ T8290] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 142.596741][ T8290] ? __lock_acquire+0x6b5/0x2cf0 [ 142.596778][ T8290] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 142.596823][ T8290] ? __fget_files+0x2a/0x420 [ 142.596844][ T8290] ? __fget_files+0x2a/0x420 [ 142.596859][ T8290] ? __fget_files+0x3a0/0x420 [ 142.596875][ T8290] ? __fget_files+0x2a/0x420 [ 142.596897][ T8290] security_file_ioctl+0xc3/0x2a0 [ 142.596921][ T8290] __se_sys_ioctl+0x47/0x170 [ 142.596949][ T8290] do_syscall_64+0x14d/0xf80 [ 142.596970][ T8290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.596987][ T8290] ? trace_irq_disable+0x37/0x100 [ 142.597006][ T8290] ? clear_bhb_loop+0x40/0x90 [ 142.597028][ T8290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.597045][ T8290] RIP: 0033:0x7f061ad9c629 [ 142.597064][ T8290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.597078][ T8290] RSP: 002b:00007f061bd41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.597099][ T8290] RAX: ffffffffffffffda RBX: 00007f061b015fa0 RCX: 00007f061ad9c629 [ 142.597120][ T8290] RDX: 0000200000000480 RSI: 0000000000008946 RDI: 0000000000000005 [ 142.597131][ T8290] RBP: 00007f061bd41090 R08: 0000000000000000 R09: 0000000000000000 [ 142.597142][ T8290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.597152][ T8290] R13: 00007f061b016038 R14: 00007f061b015fa0 R15: 00007ffd59fd43d8 [ 142.597183][ T8290] [ 142.597363][ T8290] ERROR: Out of memory at tomoyo_realpath_from_path. [ 143.380439][ T8323] IPVS: Error connecting to the multicast addr [ 143.431874][ T8330] xt_limit: Overflow, try lower: 604147548/4200216962 [ 143.704022][ T7206] udevd[7206]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 143.806568][ T8351] gretap0: entered promiscuous mode [ 143.823780][ T7206] udevd[7206]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 143.951407][ T8356] netlink: 'syz.0.670': attribute type 1 has an invalid length. [ 144.105101][ T87] IPVS: starting estimator thread 0... [ 144.117497][ T8364] netlink: 'syz.0.674': attribute type 1 has an invalid length. [ 144.213684][ T8365] IPVS: using max 25 ests per chain, 60000 per kthread [ 144.370107][ T8384] __nla_validate_parse: 21 callbacks suppressed [ 144.370142][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.676'. [ 144.401179][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.676'. [ 144.439756][ T8390] ip_vti0: entered promiscuous mode [ 144.462813][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.680'. [ 147.288533][ T8377] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 147.545108][ T8420] netlink: 76 bytes leftover after parsing attributes in process `syz.4.688'. [ 147.558514][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.689'. [ 147.566486][ T8422] netlink: 20 bytes leftover after parsing attributes in process `syz.2.685'. [ 147.605502][ T8421] gre1: entered promiscuous mode [ 147.639969][ T8421] gre1: entered allmulticast mode [ 147.934499][ T8439] netlink: 20 bytes leftover after parsing attributes in process `syz.0.694'. [ 147.967728][ T8439] netlink: 96 bytes leftover after parsing attributes in process `syz.0.694'. [ 148.054008][ T8443] IPVS: Scheduler module ip_vs_sip not found [ 148.130520][ T8451] netlink: 24 bytes leftover after parsing attributes in process `syz.3.698'. [ 148.272210][ T8453] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 148.292294][ T8453] bond3 (unregistering): Released all slaves [ 148.347584][ T8457] tipc: Started in network mode [ 148.357703][ T8457] tipc: Node identity ac14140f, cluster identity 4711 [ 148.369211][ T8457] tipc: New replicast peer: 255.255.255.255 [ 148.378323][ T8457] tipc: Enabled bearer , priority 10 [ 148.459580][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.700'. [ 148.650336][ T8481] openvswitch: netlink: IP tunnel dst address not specified [ 149.401175][ T8518] __nla_validate_parse: 35 callbacks suppressed [ 149.401195][ T8518] netlink: 76 bytes leftover after parsing attributes in process `syz.4.716'. [ 149.429645][ T8514] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 149.449572][ T8514] bond1: (slave lo): Enslaving as an active interface with an up link [ 149.477941][ T8522] netlink: 144 bytes leftover after parsing attributes in process `syz.1.717'. [ 149.485259][ T8514] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 149.518882][ T87] tipc: Node number set to 2886997007 [ 149.727055][ T8534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.718'. [ 149.743563][ T8534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.718'. [ 150.115510][ T8540] netlink: 7016 bytes leftover after parsing attributes in process `syz.1.722'. [ 150.137253][ T8540] openvswitch: netlink: Message has 7 unknown bytes. [ 150.254731][ T1716] block nbd1: Possible stuck request ffff888026570000: control (read@0,1024B). Runtime 30 seconds [ 150.267171][ T1716] block nbd1: Possible stuck request ffff888026570200: control (read@1024,1024B). Runtime 30 seconds [ 150.278781][ T1716] block nbd1: Possible stuck request ffff888026570400: control (read@2048,1024B). Runtime 30 seconds [ 150.290100][ T1716] block nbd1: Possible stuck request ffff888026570600: control (read@3072,1024B). Runtime 30 seconds [ 150.372190][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.724'. [ 150.381566][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.724'. [ 150.396441][ T8554] netlink: 'syz.3.724': attribute type 15 has an invalid length. [ 150.420081][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.724'. [ 150.432560][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.724'. [ 150.443470][ T145] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 150.454213][ T6925] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 150.470448][ T8554] netlink: 'syz.3.724': attribute type 15 has an invalid length. [ 150.485082][ T6925] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 150.498864][ T6925] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 150.745304][ T8564] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 150.773245][ T8564] netlink: 'syz.2.727': attribute type 21 has an invalid length. [ 150.781124][ T8564] IPv6: NLM_F_CREATE should be specified when creating new route [ 150.912510][ T8574] netlink: 252 bytes leftover after parsing attributes in process `syz.3.731'. [ 151.192833][ T8597] bridge_slave_0: entered promiscuous mode [ 151.580770][ T8623] tipc: MTU too low for tipc bearer [ 151.998353][ T8646] veth0: entered promiscuous mode [ 152.008598][ T8646] smc: net device team0 applied user defined pnetid SYZ2 [ 152.160354][ T8645] veth0: left promiscuous mode [ 152.308444][ T8662] tipc: Started in network mode [ 152.318603][ T8662] tipc: Node identity fa1515e308f3, cluster identity 4711 [ 152.342920][ T8662] tipc: Enabled bearer , priority 0 [ 152.523389][ T8678] syzkaller0: entered promiscuous mode [ 152.529016][ T8678] syzkaller0: entered allmulticast mode [ 152.535540][ T8678] tipc: Resetting bearer [ 152.584728][ T8661] tipc: Resetting bearer [ 154.051751][ T8661] tipc: Disabling bearer [ 154.066061][ T8687] netlink: 'syz.4.759': attribute type 12 has an invalid length. [ 154.116715][ T87] tipc: Node number set to 4075165155 [ 154.772215][ T8734] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 154.838359][ T8737] __nla_validate_parse: 9 callbacks suppressed [ 154.838382][ T8737] netlink: 100 bytes leftover after parsing attributes in process `syz.0.775'. [ 155.107382][ T8749] netlink: 28 bytes leftover after parsing attributes in process `syz.2.778'. [ 155.770816][ T8785] tipc: New replicast peer: 255.255.255.255 [ 155.814246][ T8785] tipc: Enabled bearer , priority 10 [ 155.886141][ T8785] tipc: Enabling of bearer rejected, already enabled [ 155.963223][ T8795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.788'. [ 156.276695][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.793'. [ 156.318479][ T8815] netlink: 'syz.1.795': attribute type 12 has an invalid length. [ 156.647286][ T5821] Bluetooth: hci4: command 0x0405 tx timeout [ 156.737101][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.802'. [ 156.820517][ T8831] netlink: 48 bytes leftover after parsing attributes in process `syz.1.800'. [ 156.943145][ T5890] tipc: Node number set to 3105287749 [ 157.049982][ T8827] delete_channel: no stack [ 157.239778][ T8862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.809'. [ 157.257393][ T8859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.808'. [ 157.276589][ T8862] tipc: Enabling of bearer rejected, failed to enable media [ 157.299266][ T8862] Bluetooth: MGMT ver 1.23 [ 157.307727][ T8864] netlink: 516 bytes leftover after parsing attributes in process `syz.2.810'. [ 157.337581][ T8864] openvswitch: netlink: Flow key attr not present in new flow. [ 157.518363][ T8874] netlink: 'syz.1.812': attribute type 1 has an invalid length. [ 157.615619][ T8879] netlink: 60 bytes leftover after parsing attributes in process `syz.1.812'. [ 157.736248][ T8877] syzkaller0: entered promiscuous mode [ 157.741791][ T8877] syzkaller0: entered allmulticast mode [ 157.818132][ T8883] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 157.916887][ T8883] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 158.510856][ T8922] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 158.613174][ T8924] tipc: Invalid UDP bearer configuration [ 158.613233][ T8924] tipc: Enabling of bearer rejected, failed to enable media [ 158.649572][ T8928] xt_hashlimit: invalid rate [ 159.077499][ T8954] netlink: 'syz.4.839': attribute type 4 has an invalid length. [ 159.241807][ T8961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.381305][ T8968] Driver unsupported XDP return value 0 on prog (id 152) dev N/A, expect packet loss! [ 159.471677][ T8966] syzkaller0: entered promiscuous mode [ 159.477307][ T8966] syzkaller0: entered allmulticast mode [ 161.780924][ T8932] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 162.101562][ T8997] __nla_validate_parse: 5 callbacks suppressed [ 162.101583][ T8997] netlink: 76 bytes leftover after parsing attributes in process `syz.2.852'. [ 162.121435][ T8994] netlink: 16 bytes leftover after parsing attributes in process `syz.4.851'. [ 162.590119][ T9009] netlink: 'syz.2.854': attribute type 13 has an invalid length. [ 162.598319][ T9009] netlink: 'syz.2.854': attribute type 17 has an invalid length. [ 162.666869][ T9009] ip_vti0: left promiscuous mode [ 162.767751][ T9009] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.948120][ T9021] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 162.953530][ T9017] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 163.185915][ T9031] netlink: 'syz.1.860': attribute type 4 has an invalid length. [ 163.243759][ T9034] netlink: 7 bytes leftover after parsing attributes in process `syz.0.861'. [ 163.256320][ T9033] netlink: 7 bytes leftover after parsing attributes in process `syz.0.861'. [ 163.286950][ T9035] netlink: 96 bytes leftover after parsing attributes in process `syz.1.860'. [ 163.412944][ T9043] netlink: 76 bytes leftover after parsing attributes in process `syz.0.864'. [ 163.490611][ T9048] netlink: 40 bytes leftover after parsing attributes in process `syz.0.866'. [ 163.502326][ T9048] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 163.529957][ T9050] netlink: 24 bytes leftover after parsing attributes in process `syz.3.865'. [ 163.592106][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.867'. [ 163.815813][ T9063] xfrm1: entered allmulticast mode [ 164.057469][ T9072] syzkaller0: entered promiscuous mode [ 164.078911][ T9072] syzkaller0: entered allmulticast mode [ 164.330387][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.877'. [ 164.417879][ T9080] syzkaller0: create flow: hash 4058878123 index 1 [ 164.529959][ T6923] syzkaller0: tun_net_xmit 76 [ 164.543555][ T6923] syzkaller0: tun_net_xmit 48 [ 164.551956][ T9094] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 164.560912][ T837] syzkaller0: tun_net_xmit 76 [ 164.612103][ T9078] syzkaller0: delete flow: hash 4058878123 index 1 [ 166.336189][ T9127] netlink: 'syz.0.888': attribute type 33 has an invalid length. [ 166.519827][ T9127] bond3 (unregistering): Released all slaves [ 166.779370][ T9156] netlink: 'syz.0.896': attribute type 1 has an invalid length. [ 166.784313][ T9148] netlink: 'syz.4.894': attribute type 13 has an invalid length. [ 166.901872][ T9159] syzkaller0: entered promiscuous mode [ 166.935965][ T9159] syzkaller0: entered allmulticast mode [ 167.269215][ T9178] netlink: 'syz.2.902': attribute type 39 has an invalid length. [ 167.372743][ T9186] __nla_validate_parse: 8 callbacks suppressed [ 167.372763][ T9186] netlink: 44 bytes leftover after parsing attributes in process `syz.2.902'. [ 167.379167][ T9181] syzkaller0: entered promiscuous mode [ 167.399237][ T9181] syzkaller0: entered allmulticast mode [ 167.423334][ T9187] netlink: 108 bytes leftover after parsing attributes in process `syz.0.906'. [ 167.441388][ T9187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'. [ 167.443230][ T9186] netlink: 40 bytes leftover after parsing attributes in process `syz.2.902'. [ 167.702179][ T9197] netlink: 260 bytes leftover after parsing attributes in process `syz.2.909'. [ 168.064062][ T9217] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 0, id = 0 [ 168.170539][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'. [ 168.360251][ T9232] netlink: 76 bytes leftover after parsing attributes in process `syz.1.919'. [ 168.736155][ T9253] team0: Device gtp0 is up. Set it down before adding it as a team port [ 169.174674][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.934'. [ 169.174933][ T9278] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 169.400393][ T9289] openvswitch: netlink: IPv4 tunnel dst address is zero [ 169.634592][ T9303] netlink: 176 bytes leftover after parsing attributes in process `syz.3.939'. [ 169.641108][ T9309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.943'. [ 169.689326][ T9295] syzkaller1: entered promiscuous mode [ 169.697733][ T9295] syzkaller1: entered allmulticast mode [ 169.727388][ T9303] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 169.939169][ T9322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.060706][ T9325] gre0: entered promiscuous mode [ 170.065842][ T9325] gre0: entered allmulticast mode [ 170.097689][ T9295] syz.3.939 (9295) used greatest stack depth: 17592 bytes left [ 170.169000][ T9328] netlink: 'syz.0.949': attribute type 20 has an invalid length. [ 170.196567][ T9328] IPv6: NLM_F_CREATE should be specified when creating new route [ 171.185961][ T9385] netlink: 'syz.4.966': attribute type 3 has an invalid length. [ 171.213786][ T9385] netlink: 'syz.4.966': attribute type 1 has an invalid length. [ 171.233925][ T9385] NCSI netlink: No device for ifindex 813332851 [ 171.617582][ T9400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.766441][ T9416] netlink: 'syz.3.974': attribute type 1 has an invalid length. [ 171.951858][ T9425] netlink: 'syz.2.977': attribute type 2 has an invalid length. [ 172.145202][ T9436] 8021q: VLANs not supported on gre0 [ 172.464523][ T9451] __nla_validate_parse: 9 callbacks suppressed [ 172.464541][ T9451] netlink: 224 bytes leftover after parsing attributes in process `syz.0.988'. [ 172.535079][ T9456] syzkaller0: entered promiscuous mode [ 172.546596][ T9456] syzkaller0: entered allmulticast mode [ 172.678173][ T9462] tipc: Enabled bearer , priority 0 [ 172.727934][ T9456] tipc: Resetting bearer [ 172.749320][ T9452] tipc: Resetting bearer [ 172.784680][ T9452] tipc: Disabling bearer [ 172.851088][ T9468] netlink: 36 bytes leftover after parsing attributes in process `syz.3.995'. [ 172.872274][ T9472] syzkaller1: entered promiscuous mode [ 172.885464][ T9472] syzkaller1: entered allmulticast mode [ 173.094220][ T9481] netlink: 132 bytes leftover after parsing attributes in process `syz.3.999'. [ 173.107459][ T9485] tipc: Enabling of bearer rejected, failed to enable media [ 173.616699][ T9515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1009'. [ 173.723274][ T9519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1012'. [ 173.774163][ T9522] netlink: 'syz.2.1012': attribute type 1 has an invalid length. [ 173.928979][ T9520] delete_channel: no stack [ 173.969633][ T9533] netlink: 'syz.3.1015': attribute type 4 has an invalid length. [ 174.002019][ T9536] IPv6: NLM_F_CREATE should be specified when creating new route [ 174.399349][ T9555] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1024'. [ 174.478817][ T9557] netlink: 'syz.2.1026': attribute type 1 has an invalid length. [ 174.505767][ T9555] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1024'. [ 174.532299][ T9555] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.685466][ T9573] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1027'. [ 174.912973][ T9585] netlink: 'syz.2.1031': attribute type 13 has an invalid length. [ 174.954722][ T9585] veth0_macvtap: left promiscuous mode [ 174.996207][ T9585] macvtap0: entered allmulticast mode [ 175.031372][ T9585] macvtap0: refused to change device tx_queue_len [ 175.195277][ T9596] xt_TCPMSS: Only works on TCP SYN packets [ 175.205550][ T6919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.216600][ T87] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.227177][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.338776][ T9600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1036'. [ 175.406377][ T9605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1036'. [ 175.415460][ T9600] netlink: 'syz.2.1036': attribute type 7 has an invalid length. [ 175.415494][ T9600] netlink: 'syz.2.1036': attribute type 8 has an invalid length. [ 175.502952][ T9608] syz.0.1039: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 175.523292][ T9608] CPU: 1 UID: 0 PID: 9608 Comm: syz.0.1039 Not tainted syzkaller #0 PREEMPT(full) [ 175.523320][ T9608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 175.523332][ T9608] Call Trace: [ 175.523340][ T9608] [ 175.523348][ T9608] dump_stack_lvl+0xe8/0x150 [ 175.523381][ T9608] warn_alloc+0x249/0x340 [ 175.523408][ T9608] ? stack_trace_save+0xa9/0x100 [ 175.523439][ T9608] ? __pfx_warn_alloc+0x10/0x10 [ 175.523473][ T9608] ? kasan_save_track+0x4f/0x80 [ 175.523493][ T9608] ? kasan_save_track+0x3e/0x80 [ 175.523513][ T9608] ? __kasan_kmalloc+0x93/0xb0 [ 175.523535][ T9608] ? __kmalloc_cache_noprof+0x31c/0x660 [ 175.523557][ T9608] ? xskq_create+0x56/0x170 [ 175.523578][ T9608] ? xsk_setsockopt+0x54c/0x990 [ 175.523595][ T9608] ? do_sock_setsockopt+0x17c/0x1b0 [ 175.523616][ T9608] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 175.523636][ T9608] ? do_syscall_64+0x14d/0xf80 [ 175.523665][ T9608] __vmalloc_node_range_noprof+0x132/0x1730 [ 175.523725][ T9608] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 175.523757][ T9608] ? __kasan_kmalloc+0x93/0xb0 [ 175.523788][ T9608] vmalloc_user_noprof+0xad/0xe0 [ 175.523813][ T9608] ? xskq_create+0xbf/0x170 [ 175.523844][ T9608] xskq_create+0xbf/0x170 [ 175.523869][ T9608] xsk_init_queue+0xad/0x110 [ 175.523892][ T9608] xsk_setsockopt+0x54c/0x990 [ 175.523916][ T9608] ? __pfx_xsk_setsockopt+0x10/0x10 [ 175.523936][ T9608] ? __pfx_aa_sk_perm+0x10/0x10 [ 175.523967][ T9608] ? aa_sock_opt_perm+0xff/0x1a0 [ 175.523996][ T9608] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 175.524021][ T9608] ? __pfx_xsk_setsockopt+0x10/0x10 [ 175.524044][ T9608] do_sock_setsockopt+0x17c/0x1b0 [ 175.524071][ T9608] __x64_sys_setsockopt+0x13d/0x1b0 [ 175.524100][ T9608] do_syscall_64+0x14d/0xf80 [ 175.524124][ T9608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.524143][ T9608] ? trace_irq_disable+0x37/0x100 [ 175.524163][ T9608] ? clear_bhb_loop+0x40/0x90 [ 175.524187][ T9608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.524205][ T9608] RIP: 0033:0x7f72db59c629 [ 175.524223][ T9608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.524238][ T9608] RSP: 002b:00007f72dc466028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 175.524259][ T9608] RAX: ffffffffffffffda RBX: 00007f72db815fa0 RCX: 00007f72db59c629 [ 175.524273][ T9608] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 175.524284][ T9608] RBP: 00007f72db632b39 R08: 0000000000000004 R09: 0000000000000000 [ 175.524296][ T9608] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.524308][ T9608] R13: 00007f72db816038 R14: 00007f72db815fa0 R15: 00007ffd57f54c88 [ 175.524341][ T9608] [ 175.524349][ T9608] Mem-Info: [ 175.809132][ T9608] active_anon:8705 inactive_anon:0 isolated_anon:0 [ 175.809132][ T9608] active_file:3280 inactive_file:39969 isolated_file:0 [ 175.809132][ T9608] unevictable:768 dirty:104 writeback:0 [ 175.809132][ T9608] slab_reclaimable:11217 slab_unreclaimable:110704 [ 175.809132][ T9608] mapped:29524 shmem:3785 pagetables:1256 [ 175.809132][ T9608] sec_pagetables:0 bounce:0 [ 175.809132][ T9608] kernel_misc_reclaimable:0 [ 175.809132][ T9608] free:1317637 free_pcp:8294 free_cma:0 [ 175.860578][ T9608] Node 0 active_anon:38120kB inactive_anon:0kB active_file:13120kB inactive_file:159676kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118096kB dirty:416kB writeback:0kB shmem:16904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12732kB pagetables:4868kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 175.893479][ T9608] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 176.023336][ T9608] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 176.071390][ T9608] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 176.078392][ T9608] Node 0 DMA32 free:1301472kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37452kB inactive_anon:0kB active_file:13120kB inactive_file:159676kB unevictable:1536kB writepending:416kB zspages:0kB present:3129332kB managed:2554004kB mlocked:0kB bounce:0kB free_pcp:38604kB local_pcp:19012kB free_cma:0kB [ 176.143530][ T9608] lowmem_reserve[]: 0 0 0 0 0 [ 176.148344][ T9608] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:920kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 176.252713][ T9608] lowmem_reserve[]: 0 0 0 0 0 [ 176.257515][ T9608] Node 1 Normal free:3947032kB boost:0kB min:55684kB low:69604kB high:83524kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 176.341720][ T9608] lowmem_reserve[]: 0 0 0 0 0 [ 176.347059][ T9608] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 176.359983][ T9608] Node 0 DMA32: 3501*4kB (UME) 1495*8kB (UME) 380*16kB (UM) 167*32kB (UM) 37*64kB (UM) 3*128kB (UME) 8*256kB (UME) 9*512kB (UME) 5*1024kB (ME) 6*2048kB (UME) 303*4096kB (UM) = 1305292kB [ 176.404629][ T9608] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 176.427380][ T9608] Node 1 Normal: 0*4kB 3*8kB (UM) 12*16kB (UME) 14*32kB (UME) 6*64kB (UM) 4*128kB (UM) 2*256kB (M) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 961*4096kB (M) = 3947032kB [ 176.453707][ T9633] tipc: Invalid UDP bearer configuration [ 176.453763][ T9633] tipc: Enabling of bearer rejected, failed to enable media [ 176.511520][ T9608] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 176.522434][ T9608] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 176.534927][ T9608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 176.549137][ T9608] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 176.561624][ T9608] 44627 total pagecache pages [ 176.568219][ T9608] 0 pages in swap cache [ 176.572922][ T9608] Free swap = 124996kB [ 176.577194][ T9608] Total swap = 124996kB [ 176.581378][ T9608] 2097051 pages RAM [ 176.612202][ T9608] 0 pages HighMem/MovableOnly [ 176.617726][ T9608] 426705 pages reserved [ 176.626709][ T9608] 0 pages cma reserved [ 177.067877][ T9671] netlink: 'syz.1.1059': attribute type 1 has an invalid length. [ 177.069835][ T9676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.267172][ T9690] IPv6: NLM_F_CREATE should be specified when creating new route [ 177.708815][ T9713] ip_vti0: entered promiscuous mode [ 177.734435][ T9713] __nla_validate_parse: 5 callbacks suppressed [ 177.734456][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'. [ 177.796954][ T9717] Bluetooth: MGMT ver 1.23 [ 177.996286][ T5821] block nbd2: Receive control failed (result -32) [ 178.010835][ T5825] block nbd3: Receive control failed (result -32) [ 178.141509][ T9743] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.353735][ T9753] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 178.361202][ T9753] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 178.370837][ T9753] tipc: Enabled bearer , priority 0 [ 178.734515][ T9771] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1087'. [ 178.800035][ T9774] netlink: 'syz.1.1088': attribute type 1 has an invalid length. [ 179.293635][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1098'. [ 179.392143][ T9809] netlink: 'syz.2.1100': attribute type 11 has an invalid length. [ 179.403718][ T9802] team0: Port device team_slave_0 removed [ 179.422576][ T9809] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1100'. [ 179.539739][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1096'. [ 179.650601][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1101'. [ 179.765563][ T9816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.829048][ T9816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.913289][ T9816] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 179.938303][ T9816] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.956361][ T9816] bond0 (unregistering): Released all slaves [ 179.996847][ T9834] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1105'. [ 180.325705][ T1716] block nbd1: Possible stuck request ffff888026570000: control (read@0,1024B). Runtime 60 seconds [ 180.339838][ T1716] block nbd1: Possible stuck request ffff888026570200: control (read@1024,1024B). Runtime 60 seconds [ 180.350838][ T1716] block nbd1: Possible stuck request ffff888026570400: control (read@2048,1024B). Runtime 60 seconds [ 180.363393][ T1716] block nbd1: Possible stuck request ffff888026570600: control (read@3072,1024B). Runtime 60 seconds [ 180.465727][ T9852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1110'. [ 180.687479][ T9866] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1112'. [ 180.840941][ T9870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1115'. [ 180.864396][ T9868] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 180.873523][ T9868] syzkaller0: entered promiscuous mode [ 180.893224][ T9868] syzkaller0: entered allmulticast mode [ 180.968038][ T9868] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 180.980278][ T9868] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.996709][ T9874] tap0: tun_chr_ioctl cmd 1074025678 [ 181.002948][ T9876] netlink: 'syz.1.1117': attribute type 1 has an invalid length. [ 181.003619][ T9874] tap0: group set to 0 [ 181.011983][ T9876] nbd: error processing sock list [ 181.025139][ T9876] block nbd4: shutting down sockets [ 181.309260][ T9890] tipc: Started in network mode [ 181.322838][ T9890] tipc: Node identity 3a2df65a58cd, cluster identity 4711 [ 181.330196][ T9890] tipc: Enabled bearer , priority 0 [ 181.373337][ T9890] syzkaller0: entered promiscuous mode [ 181.378862][ T9890] syzkaller0: entered allmulticast mode [ 181.431655][ T9890] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 181.477059][ T9890] tipc: Resetting bearer [ 181.534745][ T9889] tipc: Resetting bearer [ 181.600423][ T9889] tipc: Disabling bearer [ 182.120486][ T9930] batadv_slave_0: entered promiscuous mode [ 182.145337][ T9929] batadv_slave_0: left promiscuous mode [ 182.419763][ T9947] netlink: 'syz.2.1132': attribute type 2 has an invalid length. [ 182.429585][ T9947] veth1_macvtap: left promiscuous mode [ 182.435830][ T9947] macsec0: entered promiscuous mode [ 182.441441][ T9947] macsec0: entered allmulticast mode [ 182.483610][ T9947] veth1_macvtap: entered promiscuous mode [ 182.489410][ T9947] veth1_macvtap: entered allmulticast mode [ 182.533092][ T9947] macsec0: left promiscuous mode [ 182.538372][ T9947] macsec0: left allmulticast mode [ 182.551124][ T9947] veth1_macvtap: left allmulticast mode [ 183.046114][ T9971] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.056553][ T9971] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.115178][ T9978] netlink: 'syz.2.1144': attribute type 16 has an invalid length. [ 183.186232][ T9978] netlink: 'syz.2.1144': attribute type 17 has an invalid length. [ 183.277517][ T9978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.400088][ T9995] __nla_validate_parse: 6 callbacks suppressed [ 183.400110][ T9995] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1147'. [ 183.538775][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1149'. [ 183.551956][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1149'. [ 183.571662][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1149'. [ 183.601645][ T6922] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.628835][ T6920] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.639854][ T6920] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.734781][ T6920] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.011026][T10029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1157'. [ 184.052159][T10029] vxcan2: entered allmulticast mode [ 184.091609][T10035] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1158'. [ 184.108051][T10035] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 184.109488][T10035] block (null): Could not allocate knbd recv work queue. [ 184.166033][T10035] nbd: failed to add new device [ 184.192222][T10044] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1160'. [ 184.387709][T10055] netlink: 'syz.2.1164': attribute type 83 has an invalid length. [ 184.461198][T10060] xt_nat: multiple ranges no longer supported [ 184.514349][T10063] netlink: 'syz.0.1166': attribute type 1 has an invalid length. [ 184.669620][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'. [ 184.718227][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'. [ 184.806911][ T87] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.840547][T10080] veth13: entered promiscuous mode [ 184.848285][T10080] veth13: entered allmulticast mode [ 184.935610][T10052] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 184.984567][T10087] netlink: 'syz.0.1171': attribute type 1 has an invalid length. [ 184.992452][T10087] netlink: 'syz.0.1171': attribute type 1 has an invalid length. [ 185.089178][T10087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.105008][T10095] netlink: 'syz.4.1173': attribute type 21 has an invalid length. [ 185.114779][T10088] syzkaller0: entered promiscuous mode [ 185.120307][T10088] syzkaller0: entered allmulticast mode [ 185.135616][T10095] IPv6: NLM_F_CREATE should be specified when creating new route [ 185.620443][T10120] netlink: 'syz.4.1176': attribute type 11 has an invalid length. [ 187.411297][T10149] netlink: 'syz.3.1184': attribute type 1 has an invalid length. [ 187.419579][T10151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.492439][T10155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1187'. [ 187.620693][T10149] 8021q: adding VLAN 0 to HW filter on device bond7 [ 187.702729][T10171] veth15: entered promiscuous mode [ 187.715036][T10171] bond7: (slave veth15): Enslaving as an active interface with a down link [ 187.860409][T10149] vlan2: entered allmulticast mode [ 187.877400][T10149] bond7: entered allmulticast mode [ 187.889484][T10149] bond7: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 188.253388][T10207] pim6reg527: entered allmulticast mode [ 190.799234][T10179] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.040758][T10226] __nla_validate_parse: 4 callbacks suppressed [ 191.040787][T10226] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1206'. [ 191.214558][T10239] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1212'. [ 191.223224][T10242] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1213'. [ 191.235837][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1213'. [ 191.255440][T10242] netlink: 'syz.2.1213': attribute type 1 has an invalid length. [ 191.263647][T10242] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1213'. [ 191.610197][T10265] team0: Device ip6gre2 is of different type [ 191.701180][T10257] bridge1: entered promiscuous mode [ 191.706687][T10257] bridge1: entered allmulticast mode [ 191.814479][T10280] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1217'. [ 191.848264][T10282] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1222'. [ 191.863909][T10282] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1222'. [ 191.901045][T10282] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.909819][T10282] bridge0: port 1(1¾x9ÿ) entered disabled state [ 192.128452][T10294] macvlan0: entered promiscuous mode [ 192.807996][T10320] netlink: 'syz.4.1233': attribute type 1 has an invalid length. [ 192.852433][T10311] bridge5: entered promiscuous mode [ 192.874536][T10311] bridge5: entered allmulticast mode [ 192.883895][T10326] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1231'. [ 192.903923][T10320] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 192.933069][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1231'. [ 193.660711][T10373] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 194.117700][T10397] netlink: 'syz.1.1250': attribute type 5 has an invalid length. [ 194.235693][T10397] geneve2: entered promiscuous mode [ 194.270158][T10397] geneve2: entered allmulticast mode [ 194.304909][ T49] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 194.354575][ T145] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 194.391784][ T145] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 194.410041][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.421068][ T1299] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 194.421940][ T145] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 194.631427][T10417] openvswitch: netlink: Flow actions attr not present in new flow. [ 195.073007][T10437] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.080597][T10437] IPv6: NLM_F_CREATE should be set when creating new route [ 196.016808][T10486] netlink: 'syz.1.1276': attribute type 10 has an invalid length. [ 196.094967][T10488] __nla_validate_parse: 18 callbacks suppressed [ 196.094999][T10488] netlink: 9196 bytes leftover after parsing attributes in process `syz.1.1276'. [ 196.126541][T10490] ip6t_rpfilter: unknown options [ 196.151195][T10492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1278'. [ 196.194965][T10486] team0 (unregistering): Port device team_slave_1 removed [ 196.239427][T10496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1277'. [ 196.496496][T10506] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1282'. [ 196.509381][T10506] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 196.748379][T10519] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 196.755874][T10521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1286'. [ 196.757694][T10519] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 196.826964][T10521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1286'. [ 196.836356][T10521] nbd: device at index 64 is going down [ 196.895662][ T8354] udevd[8354]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 196.979224][T10528] block nbd4: Unsupported socket: should be TCP or UNIX. [ 197.006068][ T8354] udevd[8354]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 197.211217][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1292'. [ 197.230121][T10535] syzkaller0: entered promiscuous mode [ 197.237129][T10535] syzkaller0: entered allmulticast mode [ 197.277498][T10535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1291'. [ 197.480626][T10554] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1297'. [ 197.496798][T10556] netlink: 'syz.4.1298': attribute type 9 has an invalid length. [ 197.552178][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1297'. [ 197.681452][T10568] netlink: 'syz.0.1302': attribute type 11 has an invalid length. [ 197.914119][T10583] syzkaller0: entered promiscuous mode [ 197.934829][T10583] syzkaller0: entered allmulticast mode [ 198.531485][T10601] bond3: option miimon: invalid value (18446744073709551585) [ 198.543158][T10601] bond3: option miimon: allowed values 0 - 2147483647 [ 198.557266][T10601] bond3 (unregistering): Released all slaves [ 198.574406][T10625] netlink: 'syz.4.1318': attribute type 4 has an invalid length. [ 200.528902][T10706] bridge_slave_1: default FDB implementation only supports local addresses [ 200.579153][T10710] netlink: 'syz.0.1342': attribute type 21 has an invalid length. [ 200.604137][T10710] netlink: 'syz.0.1342': attribute type 6 has an invalid length. [ 200.635755][T10710] xt_HMARK: spi-set and port-set can't be combined [ 200.683983][T10710] xt_l2tp: missing protocol rule (udp|l2tpip) [ 200.853879][T10728] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 201.352284][T10757] __nla_validate_parse: 17 callbacks suppressed [ 201.352306][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'. [ 201.403875][ T6922] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6c [ 201.417841][T10752] netlink: 'syz.2.1352': attribute type 23 has an invalid length. [ 201.437837][T10760] netlink: 'syz.2.1352': attribute type 23 has an invalid length. [ 201.700967][T10774] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1358'. [ 201.755169][T10775] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1358'. [ 201.827241][T10777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1359'. [ 201.878134][T10783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1359'. [ 201.887709][T10777] openvswitch: netlink: Flow actions attr not present in new flow. [ 202.015477][T10781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 202.469068][T10818] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 202.732768][T10839] netlink: 'syz.4.1375': attribute type 1 has an invalid length. [ 202.771783][T10839] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1375'. [ 202.908924][T10846] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1377'. [ 202.924557][T10846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1377'. [ 202.978585][T10846] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1377'. [ 203.057463][T10850] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1379'. [ 203.284127][T10861] netlink: 'syz.2.1383': attribute type 1 has an invalid length. [ 203.481937][T10876] IPv6: sit1: Disabled Multicast RS [ 203.706610][T10890] netlink: 'syz.2.1393': attribute type 12 has an invalid length. [ 203.725606][T10890] netlink: 'syz.2.1393': attribute type 11 has an invalid length. [ 203.824380][T10896] IPVS: Unknown mcast interface: vcan0 [ 203.916109][T10901] netlink: 'syz.1.1397': attribute type 1 has an invalid length. [ 204.102054][T10918] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 204.108864][T10901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.196343][T10916] bond4: (slave veth0_to_bond): Releasing active interface [ 204.204749][T10916] veth0_to_bond: left promiscuous mode [ 204.210442][T10916] veth0_to_bond: left allmulticast mode [ 204.348952][T10927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.358334][T10929] netlink: 'syz.2.1403': attribute type 25 has an invalid length. [ 204.406107][T10927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.448596][T10927] bond0 (unregistering): Released all slaves [ 204.640721][T10901] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 204.664800][T10901] bond8 (unregistering): Released all slaves [ 204.739855][T10952] netlink: 'syz.4.1410': attribute type 5 has an invalid length. [ 205.371890][T10989] xt_hashlimit: size too large, truncated to 1048576 [ 205.470613][T10982] syzkaller0: entered promiscuous mode [ 205.476381][T10982] syzkaller0: entered allmulticast mode [ 205.710331][T11006] netlink: 'syz.1.1413': attribute type 16 has an invalid length. [ 205.736587][T11006] netlink: 'syz.1.1413': attribute type 17 has an invalid length. [ 205.865368][T11008] netlink: 'syz.3.1416': attribute type 10 has an invalid length. [ 206.247526][T11020] netlink: 'syz.4.1419': attribute type 1 has an invalid length. [ 207.463469][T11006] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 207.472952][T11006] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 207.546847][T11008] veth0_macvtap: left promiscuous mode [ 207.663358][T11020] 8021q: adding VLAN 0 to HW filter on device bond3 [ 208.107915][T11058] syzkaller0: entered promiscuous mode [ 208.124665][T11058] syzkaller0: entered allmulticast mode [ 208.409314][T11073] syzkaller1: entered promiscuous mode [ 208.442109][T11073] syzkaller1: entered allmulticast mode [ 208.616203][T11080] bond4: entered promiscuous mode [ 208.630975][T11080] bond4: entered allmulticast mode [ 208.646082][T11080] 8021q: adding VLAN 0 to HW filter on device bond4 [ 208.667631][T11083] __nla_validate_parse: 49 callbacks suppressed [ 208.667648][T11083] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1434'. [ 208.675596][T11086] syzkaller0: entered promiscuous mode [ 208.690126][T11086] syzkaller0: entered allmulticast mode [ 208.854094][T11096] netlink: 'syz.1.1437': attribute type 15 has an invalid length. [ 208.882775][T11096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1437'. [ 209.053142][T11096] netlink: 'syz.1.1437': attribute type 15 has an invalid length. [ 209.053694][ T6922] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 209.090541][T11096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1437'. [ 209.120378][ T6922] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 209.167780][ T6922] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 209.210277][ T6922] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 209.290949][T11110] tipc: Enabled bearer , priority 0 [ 209.299118][T11104] syzkaller0: entered promiscuous mode [ 209.304676][T11104] syzkaller0: entered allmulticast mode [ 209.370927][T11104] syzkaller0: mtu less than device minimum [ 209.484060][T11116] vxcan1: entered promiscuous mode [ 209.569272][T11103] tipc: Resetting bearer [ 209.601292][T11103] tipc: Disabling bearer [ 209.698641][T11127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1446'. [ 209.747757][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1447'. [ 209.996600][T11144] netlink: 'syz.1.1449': attribute type 1 has an invalid length. [ 210.010505][T11144] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1449'. [ 210.074911][T11152] vxcan1 speed is unknown, defaulting to 1000 [ 210.125123][T11152] vxcan1 speed is unknown, defaulting to 1000 [ 210.172184][T11152] vxcan1 speed is unknown, defaulting to 1000 [ 210.255948][T11161] sctp: [Deprecated]: syz.3.1456 (pid 11161) Use of int in max_burst socket option. [ 210.255948][T11161] Use struct sctp_assoc_value instead [ 210.412871][ T1716] block nbd1: Possible stuck request ffff888026570000: control (read@0,1024B). Runtime 90 seconds [ 210.424995][ T1716] block nbd1: Possible stuck request ffff888026570200: control (read@1024,1024B). Runtime 90 seconds [ 210.436216][ T1716] block nbd1: Possible stuck request ffff888026570400: control (read@2048,1024B). Runtime 90 seconds [ 210.447909][ T1716] block nbd1: Possible stuck request ffff888026570600: control (read@3072,1024B). Runtime 90 seconds [ 210.579018][T11169] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1459'. [ 210.749707][T11170] bond8: invalid ARP target 0.0.0.0 specified for addition [ 210.768584][T11170] bond8: option arp_ip_target: invalid value (0) [ 210.790862][T11170] bond8 (unregistering): Released all slaves [ 210.837915][T11175] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 211.023576][T11189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1463'. [ 211.100595][T11152] infiniband syz2: set down [ 211.113378][T11152] infiniband syz2: added vxcan1 [ 211.124995][T11152] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 211.126394][ T837] vxcan1 speed is unknown, defaulting to 1000 [ 211.129498][T11191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1464'. [ 211.156136][T11152] infiniband syz2: Couldn't open port 1 [ 211.166014][T11191] tc_dump_action: action bad kind [ 211.278338][T11152] RDS/IB: syz2: added [ 211.303936][T11152] smc: adding ib device syz2 with port count 1 [ 211.326555][T11152] smc: ib device syz2 port 1 has no pnetid [ 211.346053][T11191] xt_CT: No such helper "syz1" [ 211.358381][ T837] vxcan1 speed is unknown, defaulting to 1000 [ 211.373376][T11152] vxcan1 speed is unknown, defaulting to 1000 [ 211.847310][T11136] Bluetooth: hci1: command 0x0406 tx timeout [ 211.855592][T11136] Bluetooth: hci2: command 0x0406 tx timeout [ 211.866746][ T5138] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.874498][ T5821] Bluetooth: hci3: command 0x0406 tx timeout [ 212.019449][T11239] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 212.031949][T11239] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 212.369753][T11152] vxcan1 speed is unknown, defaulting to 1000 [ 213.126162][T11300] syzkaller0: entered promiscuous mode [ 213.142098][T11300] syzkaller0: entered allmulticast mode [ 213.418427][T11312] bond8 (unregistering): Released all slaves [ 213.462201][T11152] vxcan1 speed is unknown, defaulting to 1000 [ 213.771391][T11339] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1502'. [ 213.907517][T11348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1505'. [ 213.922833][T11348] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 214.019843][T11152] vxcan1 speed is unknown, defaulting to 1000 [ 214.253686][T11152] vxcan1 speed is unknown, defaulting to 1000 [ 214.405318][T11344] lo speed is unknown, defaulting to 1000 [ 214.414478][T11344] lo speed is unknown, defaulting to 1000 [ 214.424481][T11344] lo speed is unknown, defaulting to 1000 [ 214.465181][T11344] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 214.488636][T11362] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1508'. [ 214.511420][T11344] lo speed is unknown, defaulting to 1000 [ 214.521760][T11344] lo speed is unknown, defaulting to 1000 [ 214.531497][T11344] lo speed is unknown, defaulting to 1000 [ 214.549287][T11344] lo speed is unknown, defaulting to 1000 [ 214.561776][T11344] lo speed is unknown, defaulting to 1000 [ 215.329313][T11415] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 215.330598][T11411] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1521'. [ 215.680524][T11439] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1 [ 215.726220][T11443] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1531'. [ 216.100308][T11468] syzkaller0: entered promiscuous mode [ 216.107955][T11468] syzkaller0: entered allmulticast mode [ 216.199886][T11475] syzkaller0: entered promiscuous mode [ 216.206101][T11475] syzkaller0: entered allmulticast mode [ 216.231560][T11471] tipc: Enabled bearer , priority 0 [ 216.256318][T11474] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1537'. [ 216.276208][T11469] tipc: Resetting bearer [ 216.318550][T11469] tipc: Disabling bearer [ 216.426672][T11487] syzkaller0: entered promiscuous mode [ 216.436496][T11487] syzkaller0: entered allmulticast mode [ 216.451358][T11487] 0: reclassify loop, rule prio 0, protocol 800 [ 216.458845][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1542'. [ 216.517475][T11491] openvswitch: netlink: IP tunnel dst address not specified [ 216.717757][T11500] netlink: 'syz.0.1548': attribute type 1 has an invalid length. [ 217.007579][T11519] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1552'. [ 217.080801][T11519] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1552'. [ 217.376327][T11542] vxcan1 speed is unknown, defaulting to 1000 [ 217.644162][T11546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1558'. [ 217.661565][T11542] lo speed is unknown, defaulting to 1000 [ 217.743599][T11546] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 218.199393][T11561] sctp: [Deprecated]: syz.1.1562 (pid 11561) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.199393][T11561] Use struct sctp_sack_info instead [ 219.284328][T11610] 8021q: adding VLAN 0 to HW filter on device bond9 [ 219.340153][T11624] __nla_validate_parse: 2 callbacks suppressed [ 219.340172][T11624] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1573'. [ 219.445970][T11623] netlink: 'syz.4.1576': attribute type 39 has an invalid length. [ 219.591481][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1579'. [ 219.794792][T11637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1581'. [ 219.933570][T11643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1584'. [ 220.112119][T11653] netlink: 'syz.4.1589': attribute type 1 has an invalid length. [ 220.121634][T11653] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1589'. [ 220.125012][T11651] netlink: 'syz.2.1588': attribute type 1 has an invalid length. [ 220.143504][T11646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1586'. [ 220.176727][T11656] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1588'. [ 220.200378][T11660] netlink: 'syz.0.1591': attribute type 10 has an invalid length. [ 220.622282][T11681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1596'. [ 220.647202][T11679] gtp0: entered promiscuous mode [ 220.654598][T11679] gtp0: entered allmulticast mode [ 220.660478][T11681] netlink: 'syz.2.1596': attribute type 7 has an invalid length. [ 220.668623][T11681] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1596'. [ 220.675403][T11684] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1597'. [ 221.297617][T11717] xt_hashlimit: size too large, truncated to 1048576 [ 221.394283][T11722] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 221.576496][T11734] netlink: 'syz.4.1614': attribute type 1 has an invalid length. [ 222.077342][T11767] sctp: [Deprecated]: syz.2.1623 (pid 11767) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.077342][T11767] Use struct sctp_sack_info instead [ 222.310235][T11775] vxcan1 speed is unknown, defaulting to 1000 [ 222.509708][T11793] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.590437][T11796] openvswitch: netlink: Flow key attr not present in new flow. [ 222.747445][ T6922] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.762702][ T6922] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.779580][ T6922] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.825728][ T6922] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.926156][T11775] lo speed is unknown, defaulting to 1000 [ 223.780994][T11848] netlink: 'syz.2.1648': attribute type 1 has an invalid length. [ 223.804936][T11848] netlink: 'syz.2.1648': attribute type 2 has an invalid length. [ 224.438581][T11885] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 224.649426][T11902] __nla_validate_parse: 9 callbacks suppressed [ 224.649449][T11902] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1661'. [ 224.727445][T11909] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1661'. [ 224.757690][T11911] netlink: zone id is out of range [ 224.778921][T11911] netlink: zone id is out of range [ 224.804649][T11911] netlink: zone id is out of range [ 224.818982][T11911] netlink: zone id is out of range [ 224.840488][T11911] netlink: zone id is out of range [ 224.848301][T11911] netlink: zone id is out of range [ 224.856897][T11911] netlink: zone id is out of range [ 224.895790][T11911] netlink: zone id is out of range [ 224.915371][T11911] netlink: zone id is out of range [ 225.466205][T11944] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1674'. [ 225.990239][T11968] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1681'. [ 226.421182][T11982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1687'. [ 226.441595][T11989] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 226.476672][T11989] netlink: 'syz.1.1688': attribute type 9 has an invalid length. [ 226.513131][T11989] netlink: 'syz.1.1688': attribute type 11 has an invalid length. [ 226.536139][T11989] netlink: 'syz.1.1688': attribute type 12 has an invalid length. [ 226.566998][T11989] netlink: 188560 bytes leftover after parsing attributes in process `syz.1.1688'. [ 226.590983][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1688'. [ 226.939455][T12006] tipc: Enabled bearer , priority 11 [ 227.258600][T12025] netlink: 'syz.1.1700': attribute type 13 has an invalid length. [ 227.324969][T12025] netlink: 'syz.1.1700': attribute type 6 has an invalid length. [ 227.769286][T12051] net_ratelimit: 46 callbacks suppressed [ 227.769305][T12051] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.771852][T12057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1708'. [ 227.950403][T12063] xt_TPROXY: Can be used only with -p tcp or -p udp [ 228.336098][T12086] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 228.747332][T12112] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1722'. [ 228.802146][T12120] netlink: 'syz.2.1724': attribute type 12 has an invalid length. [ 228.810222][T12120] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1724'. [ 231.225632][ T6921] ------------[ cut here ]------------ [ 231.231577][ T6921] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band [ 231.245488][ T6921] WARNING: net/mac80211/tx.c:760 at ieee80211_tx_h_rate_ctrl+0xd82/0x1760, CPU#1: kworker/u8:14/6921 [ 231.256519][ T6921] Modules linked in: [ 231.260641][ T6921] CPU: 1 UID: 0 PID: 6921 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 231.270242][ T6921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 231.280374][ T6921] Workqueue: events_unbound cfg80211_wiphy_work [ 231.286676][ T6921] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xded/0x1760 [ 231.293180][ T6921] Code: 1c 08 00 00 48 8b 44 24 38 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 01 48 ab f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 fa <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 73 01 00 00 e8 9e 43 ab f6 e9 [ 231.312886][ T6921] RSP: 0018:ffffc9001a24f440 EFLAGS: 00010293 [ 231.318988][ T6921] RAX: ffffffff8b18f70f RBX: ffffffff9021e310 RCX: 0000000000000005 [ 231.327021][ T6921] RDX: ffff88807d2bedc4 RSI: ffff8880563e1808 RDI: ffffffff9021e310 [ 231.335236][ T6921] RBP: ffffc9001a24f5a8 R08: ffff88807a0529c7 R09: 1ffff1100f40a538 [ 231.343255][ T6921] R10: dffffc0000000000 R11: ffffed100f40a539 R12: dffffc0000000000 [ 231.351260][ T6921] R13: 0000000000000001 R14: ffff8880563e1808 R15: ffff88807d2bedc4 [ 231.359287][ T6921] FS: 0000000000000000(0000) GS:ffff8881255ae000(0000) knlGS:0000000000000000 [ 231.368300][ T6921] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.374965][ T6921] CR2: 00007f72db5e9d40 CR3: 0000000027b94000 CR4: 00000000003526f0 [ 231.383080][ T6921] Call Trace: [ 231.386400][ T6921] [ 231.389358][ T6921] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 231.395487][ T6921] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 231.401671][ T6921] invoke_tx_handlers_late+0xba/0x18a0 [ 231.407203][ T6921] ? invoke_tx_handlers_early+0xa0c/0x1d50 [ 231.413191][ T6921] ieee80211_tx+0x2d7/0x4b0 [ 231.417777][ T6921] ? __pfx_ieee80211_tx+0x10/0x10 [ 231.423036][ T6921] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 231.429047][ T6921] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 231.435005][ T6921] ? ieee80211_scan_state_send_probe+0x4e8/0xa00 [ 231.441381][ T6921] ieee80211_scan_state_send_probe+0x594/0xa00 [ 231.447987][ T6921] ieee80211_scan_work+0x64d/0x1c60 [ 231.453469][ T6921] cfg80211_wiphy_work+0x2ab/0x450 [ 231.458604][ T6921] ? process_scheduled_works+0xa0f/0x17a0 [ 231.464404][ T6921] process_scheduled_works+0xaec/0x17a0 [ 231.470013][ T6921] ? __pfx_process_scheduled_works+0x10/0x10 [ 231.476063][ T6921] ? assign_work+0x3d5/0x5e0 [ 231.480681][ T6921] worker_thread+0xa50/0xfc0 [ 231.485384][ T6921] kthread+0x388/0x470 [ 231.489482][ T6921] ? __pfx_worker_thread+0x10/0x10 [ 231.494646][ T6921] ? __pfx_kthread+0x10/0x10 [ 231.499441][ T6921] ret_from_fork+0x51e/0xb90 [ 231.504083][ T6921] ? __pfx_ret_from_fork+0x10/0x10 [ 231.509216][ T6921] ? __switch_to+0xc7d/0x1400 [ 231.514044][ T6921] ? __pfx_kthread+0x10/0x10 [ 231.519200][ T6921] ret_from_fork_asm+0x1a/0x30 [ 231.524047][ T6921] [ 231.527151][ T6921] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 231.534631][ T6921] CPU: 1 UID: 0 PID: 6921 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 231.544435][ T6921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 231.554515][ T6921] Workqueue: events_unbound cfg80211_wiphy_work [ 231.560867][ T6921] Call Trace: [ 231.564185][ T6921] [ 231.567125][ T6921] vpanic+0x1e0/0x670 [ 231.571139][ T6921] panic+0xc5/0xd0 [ 231.574862][ T6921] ? __pfx_panic+0x10/0x10 [ 231.579298][ T6921] ? ret_from_fork_asm+0x1a/0x30 [ 231.584275][ T6921] __warn+0x315/0x4a0 [ 231.588368][ T6921] ? ieee80211_tx_h_rate_ctrl+0xd82/0x1760 [ 231.594186][ T6921] ? ieee80211_tx_h_rate_ctrl+0xd82/0x1760 [ 231.600206][ T6921] __report_bug+0x29a/0x540 [ 231.604766][ T6921] ? ieee80211_tx_h_rate_ctrl+0xd82/0x1760 [ 231.610676][ T6921] ? __pfx___report_bug+0x10/0x10 [ 231.615702][ T6921] ? stack_trace_save+0xa9/0x100 [ 231.620656][ T6921] ? kasan_save_track+0x4f/0x80 [ 231.625504][ T6921] ? kasan_save_track+0x3e/0x80 [ 231.630371][ T6921] ? __kasan_slab_alloc+0x6c/0x80 [ 231.635494][ T6921] report_bug_entry+0x19a/0x290 [ 231.640358][ T6921] ? ieee80211_tx_h_rate_ctrl+0xded/0x1760 [ 231.646170][ T6921] ? ieee80211_tx_h_rate_ctrl+0xdf2/0x1760 [ 231.651994][ T6921] handle_bug+0xca/0x200 [ 231.656258][ T6921] exc_invalid_op+0x1a/0x50 [ 231.660772][ T6921] asm_exc_invalid_op+0x1a/0x20 [ 231.665615][ T6921] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xded/0x1760 [ 231.672039][ T6921] Code: 1c 08 00 00 48 8b 44 24 38 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 01 48 ab f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 fa <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 73 01 00 00 e8 9e 43 ab f6 e9 [ 231.692100][ T6921] RSP: 0018:ffffc9001a24f440 EFLAGS: 00010293 [ 231.698188][ T6921] RAX: ffffffff8b18f70f RBX: ffffffff9021e310 RCX: 0000000000000005 [ 231.706256][ T6921] RDX: ffff88807d2bedc4 RSI: ffff8880563e1808 RDI: ffffffff9021e310 [ 231.714405][ T6921] RBP: ffffc9001a24f5a8 R08: ffff88807a0529c7 R09: 1ffff1100f40a538 [ 231.722383][ T6921] R10: dffffc0000000000 R11: ffffed100f40a539 R12: dffffc0000000000 [ 231.730356][ T6921] R13: 0000000000000001 R14: ffff8880563e1808 R15: ffff88807d2bedc4 [ 231.738344][ T6921] ? ieee80211_tx_h_rate_ctrl+0xddf/0x1760 [ 231.744189][ T6921] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 231.750274][ T6921] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 231.756436][ T6921] invoke_tx_handlers_late+0xba/0x18a0 [ 231.761912][ T6921] ? invoke_tx_handlers_early+0xa0c/0x1d50 [ 231.767736][ T6921] ieee80211_tx+0x2d7/0x4b0 [ 231.772348][ T6921] ? __pfx_ieee80211_tx+0x10/0x10 [ 231.777400][ T6921] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 231.783381][ T6921] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 231.789196][ T6921] ? ieee80211_scan_state_send_probe+0x4e8/0xa00 [ 231.795526][ T6921] ieee80211_scan_state_send_probe+0x594/0xa00 [ 231.801708][ T6921] ieee80211_scan_work+0x64d/0x1c60 [ 231.807024][ T6921] cfg80211_wiphy_work+0x2ab/0x450 [ 231.812229][ T6921] ? process_scheduled_works+0xa0f/0x17a0 [ 231.818581][ T6921] process_scheduled_works+0xaec/0x17a0 [ 231.824361][ T6921] ? __pfx_process_scheduled_works+0x10/0x10 [ 231.830378][ T6921] ? assign_work+0x3d5/0x5e0 [ 231.835016][ T6921] worker_thread+0xa50/0xfc0 [ 231.839641][ T6921] kthread+0x388/0x470 [ 231.843738][ T6921] ? __pfx_worker_thread+0x10/0x10 [ 231.849124][ T6921] ? __pfx_kthread+0x10/0x10 [ 231.853758][ T6921] ret_from_fork+0x51e/0xb90 [ 231.858358][ T6921] ? __pfx_ret_from_fork+0x10/0x10 [ 231.863481][ T6921] ? __switch_to+0xc7d/0x1400 [ 231.868188][ T6921] ? __pfx_kthread+0x10/0x10 [ 231.872788][ T6921] ret_from_fork_asm+0x1a/0x30 [ 231.877577][ T6921] [ 231.881159][ T6921] Kernel Offset: disabled [ 231.885509][ T6921] Rebooting in 86400 seconds..