last executing test programs: 1m4.194889306s ago: executing program 0 (id=1503): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000f1401002abd70f0fadbdf250800010000000000080045007372"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000180)="f06e00dcbcfd57c354333182854115b7", 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000001c0)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) r5 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0) close(r5) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) r6 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000840)='GPL\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@multicast1}]}, @generic={0x83, 0x2}]}}, {{0x4e20, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) getsockopt$inet_opts(r6, 0x0, 0x6, 0x0, &(0x7f0000000340)) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) close(r2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x25, 0x0, 0x1, 0xfffffffd}, {}, {0x2d}, {0x0, 0x1}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8090}, 0x8000) write(r0, &(0x7f0000000000)="21000000460010aaaaaaaaaa00000000000000000000000000bf4400"/76, 0x4c) 1m3.993141752s ago: executing program 0 (id=1504): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\x00'}, {0x18, 0x110, 0xc, "aa"}], 0x30}, 0x0) 1m3.223059659s ago: executing program 3 (id=1512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000e00)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x24000044) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x6, &(0x7f0000000200)=@framed={{0x5, 0x0, 0x0, 0x0, 0x20000, 0x69, 0x11, 0x1c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000240)='GPL\x00', 0x5, 0x29e, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0002001f14010022bd7000fbdbdf25080001000000000009004500756d6164000000000800030001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000280)={0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000c00)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x7, &(0x7f0000000c80)="f8ffffff", 0x4) r6 = socket(0x1d, 0x2, 0x6) recvfrom$rxrpc(r6, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xb, 0x34, 0x9, 0x71, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x10, 0x80, 0x10001, 0x4}}) syz_emit_ethernet(0x7e, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0f539af21094aaaaaaaaaabb86dd601200b000483a0000000000000000000000000000000000ff02000000000000000700000000000000009078000000006000000000002c00fc01002f01000000000000070822ebffff00fc0000000000000000"], 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000780), 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000b40)=[@in6={0xa, 0x0, 0x9000, @loopback}], 0x1c) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r10, 0x84, 0x73, &(0x7f0000000b80)=""/47, &(0x7f0000000bc0)=0x2f) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0e00000007000000060000000001000031a00200", @ANYRES32=0x1, @ANYBLOB="00000000000000000100000049a0d1345c6d83c4b4cda6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000000500"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000d40)={0x0, 0xfffffffffffffff8, 0xb1a6}) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00', 0x0, 0x8}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%+9llu \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x2a, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_fd={0x18, 0x8}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}}]}, &(0x7f0000000640)='GPL\x00', 0x3, 0xd, &(0x7f0000000680)=""/13, 0x41100, 0x0, '\x00', r7, 0x1a, r8, 0x8, &(0x7f00000007c0)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x6ef4, r3, 0x3, &(0x7f0000000a00)=[0x1, 0x1, r3, r9, r11, r12, r13, 0xffffffffffffffff], &(0x7f0000000a40)=[{0x2, 0x5, 0xd}, {0x3, 0x5, 0x8, 0xa}, {0x2, 0x3, 0x1, 0x8}], 0x10, 0xe1}, 0x94) 1m3.113535641s ago: executing program 3 (id=1515): getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x2, 0xffffffffffffffff}, &(0x7f0000000040)=0xc) r2 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x40000) ioctl$XFS_IOC_ERROR_INJECTION(r1, 0x40085874, &(0x7f00000000c0)={r2, 0x7}) (async) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r0, 0x4}, 0x8) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e21, 0x7fffffff, @mcast2, 0x8}}, 0x0, 0x0, 0x47, 0x0, "db717e28f9a6b53075168dc229338ddeb8148970ec4f9e1d4dd5fdd74ee9798585c96cc793e7b334ab69d0d980910ccdf841bb3587b17a0be9ce92020253432bfb91e405083e16631ffd2bf75c3cc4e1"}, 0xd8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(r1, 0x84, 0x25, &(0x7f0000000240)={r0, @in={{0x2, 0x4e20, @remote}}, 0x2, 0x12, 0x5}, 0x90) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000440)={{r2, &(0x7f0000000300)='\x00', 0x123020, &(0x7f0000000340)={@_ha_fsid={[0xffffff7f]}, {0x300, 0xff, 0x3, 0x82}}, 0x3, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x7ff}, {[0x0, 0x3, 0x3, 0x9]}, 0x5, 0x1b, &(0x7f0000000400)=""/27}) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x80, r4, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x929}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async, rerun: 64) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000640)=@sack_info={r0, 0x60, 0xffff}, &(0x7f0000000680)=0xc) (async) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x4, &(0x7f00000006c0)=""/4096, &(0x7f00000016c0)=0x1000) r7 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000001700)={0x3, 'veth1_to_bond\x00', {0x58c}, 0xffff}) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000001740)={0x6, @dev={0xac, 0x14, 0x14, 0x14}, 0x4e21, 0x2, 'dh\x00', 0x10, 0x1, 0x47}, 0x2c) (async) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000001780)=@assoc_id=r0, 0x4) r8 = accept4$x25(r3, &(0x7f00000017c0), &(0x7f0000001800)=0x12, 0x0) ioctl$SIOCX25SCALLUSERDATA(r8, 0x89e5, &(0x7f0000001840)={0x5d, "fe4c70fa8519a7c659614fe61fdcb876ea1534649587a698d68c3087c7ad4a1016fe0b6548ced43fc2c2e8a1d7a057f217845794e79267b88cba79f1a5fd61bac28812f14f525a3ba2a5b4323c8dcd61ecfea1920adb4ea1cfd5feee69455bedb28fa56330c4c23bbec3b3a78c00736ff224a3d41064d8cd2dd00271afccaf3f"}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001900)={'vcan0\x00', 0x0}) (async) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r3, 0x40786e88, &(0x7f0000001b80)={{&(0x7f0000001940)=[{0x4, 0x400, 0x8001, {0x7fffffffffffffff, 0x58}, 0xfffffffffffffc00, 0x0, 0x58000}], 0x1, 0x40, 0x5, 0x3dae}, {&(0x7f0000001980)=[{0x8, 0x6}], 0x1, 0x10, 0x2, 0x1}, {&(0x7f00000019c0)=[0x200, 0x6], 0x2, 0x8, 0x8000, 0x7}, {&(0x7f0000001a00)=[{0xc52, 0x0, 0x100000000, 0x6}, {0x37d6, 0xffffffff, 0x4, 0x2, 0x7}, {0x4, 0xd, 0xfff, 0x3, 0x7}, {0x6, 0x8, 0x5, 0x2, 0x8}, {0x7, 0x8, 0xc1d, 0xf, 0x6}, {0xc, 0x3, 0x9, 0x397c000000}, {0x9, 0x10001, 0x2, 0x8, 0xfffffffd}, {0x2, 0x7fff, 0x80000000, 0x0, 0x8}], 0x8, 0x28, 0x8, 0x9}, {&(0x7f0000001b40)=[0x80, 0x8, 0x1, 0xb7e0, 0x6], 0x5, 0x8, 0xa}}) setsockopt$sock_void(r3, 0x1, 0x24, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000001c00)={r6, 0x3, 0x10, 0x80cb, 0x1604}, &(0x7f0000001c40)=0x18) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), r3) (rerun: 64) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x24, r10, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}}, 0x800) (async) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000001f80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x80845}, 0xc, &(0x7f0000001f40)={&(0x7f0000001e00)={0x108, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x18, 0x1, 0x89, 0xd, {0x4e22, 0x4e20, [0x0, 0x8, 0x9, 0x1], [0x7, 0x236, 0x0, 0xfffff085], r9, [0x9, 0xfffffff8]}, 0x5a, 0x2c}, [@INET_DIAG_REQ_BYTECODE={0xa4, 0x1, "e13e7ac9e950afaca6f52435d18aec366d1ee5cf953c6d1066cc4c165e4f4e7b45f2f09a0ebeb71a1ec3efd81d73b62a6073a4b970d5d78ca9b2641ec7b1c8c8443432a16e971ae5a6053e0163ffb171cb902ba9e6876a2a2a04278433c32e39b47037d96a96dabc31ae9d67c5f19d0e036321a04e03eb93bef9a3f4b81982568212d4911db8240d08fa6cb2c444bf9cb3bbfc26ba58101f5e4b09575b9ec46f"}, @INET_DIAG_REQ_BYTECODE={0x18, 0x1, "353a0fe390634ade26efe03b6b1e32b14514f43c"}]}, 0x108}, 0x1, 0x0, 0x0, 0xc000}, 0x14) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) (async, rerun: 32) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000001fc0)={0x1, 0x8, 0x1, 0x3, 0x3, 0x0, [{0x0, 0x2, 0xffffffffffffffff, '\x00', 0x2c09}, {0xfff, 0x7fffffffffffffff, 0x800}, {0x0, 0x7fffffff, 0xa, '\x00', 0x2004}]}) (async, rerun: 32) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f0000002100)={0x5, 0x10, [0x4, 0x7, 0x8cd, 0x3], &(0x7f00000020c0)=[0x0, 0x0]}) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000002180), r3) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x54, r11, 0xd03, 0x70bd2c, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x20040040) 1m3.111607474s ago: executing program 4 (id=1516): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000005fdffffff1000320003000000000000000000eeff0f003300000000000000000000000000fc024000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtaction={0x8e0, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x8cc, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x87c, 0x2, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x4000001, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x6, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0xffffffff, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x1, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xd, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x5, 0xc56, 0xc, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x6, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc0, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x7, 0x2, 0x4, 0x3, 0x3, 0x6, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x1000004, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x5, 0x9, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xc, 0x1, 0xfb, 0x1ff, 0x8, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x101, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0xb, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008580cf77df0000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$vsock_stream(0x28, 0x1, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000e4ff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, r1, 0x25, 0x2, @void}, 0x10) 1m3.077806971s ago: executing program 0 (id=1517): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000780)={{0xffffffffffffffff, &(0x7f0000000340)='GPL\x00', 0x14ac0, &(0x7f0000000380)={@_ha_fsid={[0x8, 0x1]}, {0x5, 0x3, 0x10, 0x1}}, 0x4, &(0x7f0000000400), &(0x7f0000000440)=0x10}, 0x2, &(0x7f0000000740)=[{0x1, 0x81, &(0x7f0000000480)='GPL\x00', &(0x7f00000005c0)="dd4e8fd3963f5d63b414b4918fcee8af958ce3778dbe6cf6e9b7020168c85a743e0e57f6fa490c2adc5613d2a18d145d13cafb90299ac162b99b6caaad570f5badfdbdaf1fdb86ceb0236c1575dbd3864273d90b7ba05e82aa560460a7caa0af68dffc203df769cd4a52b91c3ca9bf15ba910dd1a1097c3d1ce62a18d5d662ee17ddbacd71c3a29b998107c6309b8b6e0c4c9efe04", 0x95}, {0x2, 0x5, &(0x7f0000000680)='\x00', &(0x7f00000006c0)="5476596fd90a2a2a7f1ff1454ca0a2ce8911370ea4920ee40751543973fdebc9fb3922024cb007c731184f9576e42249ba5606aa3d29b017fd6e77df91b02c98ef207a761df7b698c5f79c7cb48f6b66fb8b180a5263ac3d892314043336aa7c33363caa9a4b", 0x66, 0x2}]}) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r1) (rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000980)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="54000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="01010200000000002400128009000100766c616e000000001400028006000100000000000600050088a8000008000500", @ANYRES32=r6], 0x54}, 0x1, 0xba01}, 0x810) (async) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f00000004c0)=0x800, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1b, &(0x7f0000000cc0)={0x0, 0x0}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r10 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000ac0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000d00)=@bridge_delneigh={0x58, 0x1d, 0x200, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x10, 0x14, 0x1}, [@NDA_CACHEINFO={0x14, 0x3, {0xfffffffc, 0x3, 0xf, 0x4}}, @NDA_VNI={0x8}, @NDA_PROTOCOL={0x5, 0xc, 0xd}, @NDA_VLAN={0x6, 0x5, 0x2}, @NDA_IFINDEX={0x8, 0x8, r11}, @NDA_PORT={0x6, 0x6, 0x4e23}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) (async, rerun: 64) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000c80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYRESHEX=r7, @ANYRES32=r6, @ANYBLOB="08000e00", @ANYRES32=r11, @ANYBLOB="08000300000000000800030001000000"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4004) (async, rerun: 64) pipe(&(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000dc0)={0xffffffffffffffff}) splice(r13, 0x0, r12, 0x0, 0xfffffffc, 0xf) (async, rerun: 32) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff000100"/20, @ANYRES32=0x0, @ANYRES32=r13, @ANYBLOB="030000000077b46048cb574b49307d5f11f700"/35], 0x50) (async, rerun: 32) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r16 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, r15, 0x8, &(0x7f0000000e00)={0x0, 0x1}, 0x8}, 0x94) r17 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r18 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r18, 0x5452, &(0x7f0000000080)=0x8) (async) setsockopt$sock_int(r18, 0x1, 0x7, &(0x7f00000001c0), 0x4) (async) close(r17) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000892b4cf22992556b57528f106d396576b9d4f34e0fa672bf56d47cc44ac5629b5816db2de3b25b842a8401c206ca3a14310604acefa2c027be0a0fdd1c0d826a515fd88b0b929bf1ed628185c1d9cd465a757cabc42be890295a35482dd7cc9b6077d356416a0fc5ed7ee96b5c31d815ea0f6a3b", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r15, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r16, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r17, r17, 0x19, 0x0, @val=@netfilter={0x0, 0x0, 0x6, 0x20}}, 0x20) 1m3.045365111s ago: executing program 4 (id=1518): r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xd}], {0x95, 0x0, 0x9}}, &(0x7f0000000100)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000240), 0x0, 0x10, &(0x7f0000000280), 0x85}, 0x52) (async) sendmsg$key(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002940)=ANY=[@ANYBLOB="020a07020700000029bd7000f9dbdf2505001a00ffffff440000000000000000000000fe8800000000000000000000bf61b4a3260014ca"], 0x38}}, 0x4) 1m2.940271754s ago: executing program 4 (id=1520): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4048c01}, 0x4040084) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newqdisc={0x64, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x1, 0x6}, {0xa, 0x2}, {0xfff1, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2a}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_RATE={0x6, 0x5, {0x7b, 0x2}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd}, @TCA_RATE={0x6, 0x5, {0xfa, 0xf7}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x24040075) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x52, &(0x7f0000000080)={0x0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x20) recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/167, 0xa7}], 0x1}, 0x40012062) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r4 = socket(0x40000000015, 0x5, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x5411, &(0x7f0000000400)) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r6 = socket(0x15, 0x5, 0x0) (async) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000980)="2c0000001d005f80004000000000000005000000000000000000080008000100000000ff5b1844ad30c8ac46", 0x2c) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000940)={r2, &(0x7f0000000840)="f0bce43a2ab1378948a108251a819922295bd15169aa35ff98bfb480b48505e63623b5f0141d4c37d5f1bd05014812c675a092fd776444dc94c5c59981433d681043f15129c2d85d7700ad6b069244eae3b83551d9ff895cdcd748b67561547e3ea4114a818da509b0104195bacf08dad1546420b8ecb82e255a4b9fb297fe784f2ab9305f7f75b802b12c1baffbc5140b20081d8175a61e07992e8eca09f22d51505c1669e366d24f5240420b2564f497552a2fc493bc212d3ad08d29d3192b948e43881f06a10b8ee9a6e7fa593d03cd8bb26db4163204e6759020"}, 0x20) (async) getsockopt(r6, 0x200000000114, 0x2715, 0x0, &(0x7f00000003c0)) (async) r8 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r8, &(0x7f00000009c0)={0x28, 0x0, 0x2710, @host}, 0x10) (async) listen(r8, 0x0) (async) accept4$unix(r8, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xa, 0x4, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x5, &(0x7f0000000d40)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) 1m2.931978637s ago: executing program 2 (id=1521): r0 = socket(0x2b, 0x1, 0x1) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0706000000000000000000000000080005000000000008000400ac14140008000100", @ANYRES32=0x0, @ANYBLOB="0c0003000000000000000000080002000002"], 0x40}}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000008c0)="2000000012005f0214f9f4012100fbe40a000000edff84b5ca8d7c10277582b9", 0x20) recvmmsg(r3, &(0x7f0000000900), 0x5b, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x14}}, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_opts(r6, 0x29, 0x39, &(0x7f0000000880)=@srh={0x2f, 0x4, 0x4, 0x2, 0xfd, 0x0, 0x33b, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1]}, 0x28) getsockname$packet(r5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r7, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000600)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x9f, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x24000000) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_LINK={0x8, 0x1, r10}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x14004080}, 0x20008000) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f0000000200)={0x46e6, 0x9, 0x8, 0x97, 0x2}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)=ANY=[], 0x8) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000240), &(0x7f0000000280)=0x30) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r12 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r12, 0x0, 0x48b, &(0x7f0000000380)={0x2, 'bridge0\x00', 0x4}, 0x18) 1m2.599565073s ago: executing program 4 (id=1523): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000900)=0x4bc, 0x4) bind$nfc_llcp(r2, &(0x7f0000000940)={0x27, 0x0, 0x0, 0x2, 0x0, 0x7, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x37}, 0x60) getsockopt$inet_buf(r2, 0x118, 0x1, 0x0, &(0x7f00000009c0)=0xf) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x100000c6}, 0x24000010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x2, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xffe, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @empty}}}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x84, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0xf890}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@empty, 0x3502}]}]}, 0x13c}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@getspdinfo={0x14, 0x25, 0x400, 0x70bd28, 0x25dfdbfc, 0x7fff, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240}, 0xe) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000c4) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000740000a1c000000120a0108000000000000000003000005080003200000000a140000001100010000000000000000000100000a"], 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0xd, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) ioctl$TUNSETLINK(r0, 0x400454cd, 0xf) 1m2.571746717s ago: executing program 2 (id=1524): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0x10, 0x117, 0x4}], 0x10}, 0x20000001) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='b *:75'], 0x9) 1m2.465720993s ago: executing program 3 (id=1525): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001640)={'erspan0\x00', &(0x7f0000001540)={'gre0\x00', 0x0, 0x700, 0x7800, 0x200, 0x2, {{0x2c, 0x4, 0x2, 0x39, 0xb0, 0x64, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0xc, 0x99, 0x0, 0x0, [0x7, 0xc95]}, @timestamp_addr={0x44, 0x34, 0xe5, 0x1, 0xe, [{@private=0xa010100, 0x4}, {@empty, 0xffff}, {@empty, 0x6}, {@broadcast, 0x9}, {@private=0xa010101, 0x1}, {@remote, 0x490}]}, @timestamp_prespec={0x44, 0x34, 0xf9, 0x3, 0x8, [{@broadcast, 0x1}, {@remote, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x200}, {@broadcast, 0x3}, {@local, 0x5}, {@empty, 0x7}]}, @noop, @timestamp={0x44, 0x24, 0x34, 0x0, 0x1, [0x9, 0xf7c5, 0x1d3, 0x2, 0x6, 0x10001, 0x400, 0x3]}]}}}}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001680)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001800)=@bpf_ext={0x1c, 0xb, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"/295], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000540)=""/4096, 0x41100, 0x48, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000240)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000001700)={0x0, 0x10, 0xfffffffb, 0xfff}, 0x10, 0x375d, 0xffffffffffffffff, 0x8, &(0x7f0000001740)=[r0, r0], &(0x7f0000001780)=[{0x2, 0x3, 0xd, 0xb}, {0x3, 0x3, 0x8, 0x5}, {0x4, 0x3, 0xd, 0x7}, {0x5, 0x2, 0x8, 0xc}, {0x0, 0x0, 0x10, 0x6}, {0x1, 0x5, 0x7, 0x9}, {0x3, 0x3, 0xe, 0xb}, {0x5, 0x3, 0x10, 0x5}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x2000000000000019, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3f, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2db8d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m2.451194027s ago: executing program 1 (id=1526): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0x0, 0x7e5d}, 0xc) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000880)={'gretap0\x00', &(0x7f00000007c0)={'sit0\x00', 0x0, 0x40, 0x700, 0x5, 0x9, {{0x22, 0x4, 0x0, 0x4, 0x88, 0x64, 0x0, 0x1, 0x2f, 0x0, @broadcast, @rand_addr=0x64010101, {[@ssrr={0x89, 0x1f, 0x9d, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x31}, @rand_addr=0x64010101, @empty, @private=0xa010100, @remote, @multicast2]}, @end, @lsrr={0x83, 0xf, 0x35, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1]}, @timestamp={0x44, 0x24, 0xe7, 0x0, 0xb, [0x2, 0x4, 0x101, 0x60, 0x400, 0xc7f5, 0x80, 0x2]}, @lsrr={0x83, 0xf, 0x74, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010102]}, @rr={0x7, 0xb, 0x50, [@multicast1, @remote]}, @generic={0x88, 0x6, "f47ffccc"}]}}}}}) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000940)=0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x2, &(0x7f00000006c0)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000700)='GPL\x00', 0x7, 0x55, &(0x7f0000000740)=""/85, 0x41100, 0x14, '\x00', r2, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000980)=[r0, r0, r4], &(0x7f00000009c0)=[{0x2, 0x1, 0xb}, {0x3, 0x1, 0x6, 0x8}, {0x1, 0x2, 0x1}, {0x5, 0x2, 0xb}, {0x4, 0x3, 0x5, 0xb}, {0x1, 0x5, 0xd, 0x8}], 0x10, 0x9ec}, 0x94) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = accept$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000005c0)=0x1c) getsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000680), &(0x7f0000000640)=0xe) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xb, &(0x7f0000000200)=0x1e, 0x4) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="9b0f2bbd7000ffdbdf2d010000000800028004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x20, 0x40, 0x7, 0x7fffffff, {{0xe, 0x4, 0x3, 0x22, 0x38, 0x66, 0x0, 0x2, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x85, 0x1, 0x9, [{@multicast1, 0x4}, {@loopback, 0x9}, {@remote, 0x7}, {@multicast2, 0x3}]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) unshare(0x62000f80) 1m2.393922468s ago: executing program 0 (id=1527): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/51, 0x33}], 0x1}, 0x8}], 0x1, 0x20, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000001480)={0x8}, 0x10) write(r3, &(0x7f00000014c0)="240000001e005f02141f00fffffffff801000000080000000000000008000902009ea5b1", 0x24) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, 0x0, &(0x7f0000000ec0)) sendmsg$tipc(r1, &(0x7f0000000880)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8008001}, 0x4800) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0xffffffffffffff28) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x2b, 0x0, 0x0, 0x8, 0x4}]}}, 0x0, 0x26, 0x0, 0x0, 0x5}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)=ANY=[@ANYBLOB="18003f9f0214010000000000000004000000000000000084"], 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x4800) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, &(0x7f0000000740)='%){:-\x00', 0x6) r8 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x34e, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r9, 0x8953, &(0x7f0000001500)={{0x2, 0x2, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x4c32ac5fb68dbcb8, {0x2, 0x0, @empty}}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=ANY=[@ANYBLOB="380000001d14d9"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r11, 0x84, 0xa, 0x0, 0x0) sendmsg$sock(r11, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000100)="9869bbef27e901da215d0f6e84e3b470e4d222d1487f6cc1bafa2f076c594ec9fcdec7e95126a5c12c1818b4cd69a0b39f9e9b03833d5f2b2ffd5eb1c10626f18fc6645dc74036fc040e7096d620c6a66fd0845ed87f1471397e1925e882ccd845df95b636c5bcca75efa14e689816ba250d07ddd21b8b30d49cf6e642e1afafe8b8fc7664196a5629625af712fadf99503b07ef76e8d82bb4fe5ffe221a44220636fb1230031fdcc1c251504df223f85ae640fb0ab5fd07e1f4183875d2278527bf2610b4093d5b5905b018711122d89271e3991dcf4165828e1d9ddc915a61c9825145c7aef4212f474a9a7bcb68abeeb7", 0xf2}, {&(0x7f00000005c0)="78084274a38b0cd1d64be2c10d927582c59c9b694a0705ef921dbe680fd19a4228374524314078f5543f6010eb902065e279809f63eb1fc33c1a2eea879cab37105a6d2a7f89bb1ca5430154a56da4cbc994c769eb904ca5ed442284de84e5d72215270b1af47a49524aa8e6fa130198965799d9cfaf4282da357bae363c3f48524882c50ef8df7689be333efddf596eed6800dc5f0111bca95423cc929d8c0f9626a1a8aab42cf158e02348c930529556e130fabe3319478df48fd9558714f4a58495e9", 0xc4}, {&(0x7f00000006c0)="822474eaf1d5bf74dc4b4d0c32892d80cb", 0x11}, {&(0x7f0000001400)="a55f7d4b2e5d13b4491d3f7e206dd690d65f8672ffff6047ab781310b76b87c1c47fae9a40de4e6a365c96a98916eb9e75fd07f6d34d9d51828993fb74a08a177af200a7fd2c4b7529c1408e5fb3bd859e0d", 0x52}, {&(0x7f0000000780)="6bb4eae4a842a71bf564c1b9b159a2fb7b74c196c0fa4d50cb223a9f7ffd97dca7475ccc98c9542f6b2ebdd0e849ec930342a9f991c11468eae0dd8c3fceabced8fc3685fd88795efdc32f7a09cb5b810557119308d61b9cd1a3325975208e66ed14759bddc3c648163c5dd1d9006397ce1898fe3a11c317e39ae3ea31f065cd46932bb019418b4db8fe4ff3cc2809d2a9c71aaf14e41b9b1366446f6e0cbdd9b070fa858ad3f6aa98de9af7f9b2918f677b21a9286f6f627a75bc0ba2d5e16498b43c16a3155178ff0726ccde4ffd5bd82a14450b76362afc8d8ef8bf91de9d5fba102d87ade49bac0f4685b6", 0xed}, {&(0x7f0000000a40)="d1557e459bc108ce9b25b1d6a003b4b13a87a47bd9d9b29f828c4ff682a6c9322fd1367802461e3975562e440bf72051f09da408e05a7519b87711f15d93c210e4eabcff57a49b2b7b4df0cb635eccb22f9fabf40096b0a786a849ec5dda11d3051e2168c5767ecd9d5ed31a0b2a313efa85f6757e289a58b7ff8eb9f620579fc15a3ff42499df6b8c1891033e7dcb2c2b9682838e87b6b15c061ec26e16c787e26e8144a5948add9760e549", 0xac}, {&(0x7f0000000b00)="9f2942a0ea5e5766f6d18e147babae5410223335087d694a8068cb1d97d753217ff8685881aa3a2c18b79e424fa92fe5778b3a5ce7cbd006aa582350effc31e4533c0825d37924bec3298c66e47fd4868422f5a496bb992f081097011b452ad65df9dd8707721b8dcea2eecb1154ec3212c5efd1c2bb58fa20761263af7df4a6c892767dae8c12fd8ac0371aadf2a637ffa05bd3009f8ae48c0457ec0ff8536710ad356d469353193cb593c8e2cb0b5bf8fda5c86c358ef664640b475697c0c8", 0xc0}, {&(0x7f0000000bc0)="02caaa6d9173325e178574ad26adb3bc1bb76fcc78657af19f0db78dfcffe71d27d8bd79c84b9a4ae97a4c2b11cf6ed58f1344a2f0a19239925e901ae59f8419f37fcd1ef288a0c7daef15634fc6f73bd6a9c179f3379a03e88a9b3a14412597ce12cc44b261bdc69cf6973aebf098906692936e5210b39b88733f0efc2b0bb6eb7628571ebea9a8171c1705038e1b57b739b794bfd12a6efbd5f03dad37f51c7a2f69b244c7e7aa8efaced7ba3ed91b87b077e27e08435ff96ee63551cbc6020575d70dd1fa279cde41fe7b507ff3a7bc8825c23dfa174f2fda3fd04497bab1885bad8326919b4adda2090a0038652b", 0xf0}, {&(0x7f0000000cc0)="9b21b562676a68e6", 0x8}], 0x9, &(0x7f0000000dc0)=[@txtime={{0x18, 0x1, 0x3d, 0xd34f}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffa}}, @txtime={{0x18, 0x1, 0x3d, 0x88}}, @txtime={{0x18, 0x1, 0x3d, 0x6a34bc02}}, @mark={{0x14, 0x1, 0x24, 0xf69}}, @mark={{0x14, 0x1, 0x24, 0x80000001}}, @mark={{0x14, 0x1, 0x24, 0xd4f}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0xc0}, 0x40000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r10, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0xc4, 0x8, 0x0, 0x0}}, 0x10) 1m2.327754987s ago: executing program 2 (id=1528): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000003c0)={0x0, {{0xa, 0x0, 0xdb, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000680)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000100039042dbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="82000000000000001800128008007e1e36c1906d5770028006000f00a7ee8400"], 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x4040) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000bf03000000000000850000006b000000b70000000000000095"], &(0x7f00000008c0)='syzkaller\x00'}, 0x94) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x5813}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'ip6_vti0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001e008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="000002"], 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x1e, 0x4, &(0x7f00000009c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0x4, 0xb, 0xb2, 0x9, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8, 0x1000, 0x5}}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0xcc, 0x24, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x5, 0xd}, {0x3, 0x9}, {0xb, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_RATE={0x6, 0x5, {0x4, 0x9}}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x3}}}, @TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x8, 0xd, 0xffff, 0x2, 0x7, 0x0, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x8, 0x8, 0x200, 0x6f, 0x0, 0x1e5b, 0x4, 0x7}}, {0x12, 0x2, [0x5, 0x3, 0x3, 0xff, 0x2, 0xd6, 0x3]}}, {{0x1c, 0x1, {0x40, 0x4, 0x2, 0x730, 0x2, 0x4, 0xa2a4, 0x1}}, {0x6, 0x2, [0x2]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 1m2.281598614s ago: executing program 3 (id=1529): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d1f5c2b93bc3", @empty, @empty, @loopback, 0x2, 0xffffffff}}}, {{@arp={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff000000, 0x6, 0xb, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@multicast, {[0xb4e44995cf4cc780, 0x5400faa9f5c6f977, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0x8, 0xf, 0x6, 0x8, 0x100, 'dummy0\x00', 'macvtap0\x00', {0xeddc69e01a7ac061}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@remote, @multicast2, 0xffffff00, 0x0, 0x4, 0xb, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x1ff, 0x1, 0xc, 0x68d9, 0xfff, 0x5, 'nicvf0\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0x220}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @empty, @rand_addr=0x64010102, @private, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x440) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e0011"], 0x44}}, 0x0) 1m2.239509245s ago: executing program 1 (id=1530): syz_emit_ethernet(0x5a, &(0x7f0000000080)={@empty, @remote, @val={@void, {0x8100, 0x5, 0x1, 0x2}}, {@canfd={0xd, {{0x3}, 0x3e, 0x1, 0x0, 0x0, "d6bb357a0a761d063839bb7ea66e2cc5111c49775db61c8cd3741a0bb9f62a7b930dfe124b0ff58a24aca8e7d9e1f27e10282ffeb86adc7931ff91418da911ba"}}}}, 0x0) 1m2.165902787s ago: executing program 0 (id=1531): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000100)="21000000470010aaaaaaaaaa00030000000000000000000000000000000300"/76, 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000001c0)={0x4, 0x5}, 0x2) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, 0x0, 0x40000c0) (async) sendmsg$nl_route(r0, 0x0, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x100, 0x70bd29, 0x700, {0x0, 0x0, 0x0, 0x0, 0x452f2, 0x43a95}}, 0x20}}, 0x4000000) 1m2.109016226s ago: executing program 3 (id=1532): r0 = socket$key(0xf, 0x3, 0x2) clock_gettime(0x2, &(0x7f0000000080)) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x70}}, 0x0) nanosleep(&(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)) sendmmsg(r0, &(0x7f0000000180), 0x3ffffffffffffe5, 0x0) 1m2.108485357s ago: executing program 4 (id=1533): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x1e, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000009eb452d86a8ce2dc000000009500000000000000984ac8fcd4391b379d41b4867d512750bb8ddc766a3f41b9b73d889bf90dbdda166eb059846923704153488169b05d34d60de5d162a7e409cd14b2e2a9c04e02e2"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x90, 0x0, 0x1, 0x405, 0x0, 0x0, {0x2}, [@generic="3400018014000180080001007f000001080002007f0000011c00028005000100110000000600020006b700000600030006b700003400028014000180080001007f000001080002007f0000011c00028005000100110000000600020006b700000600030006b700000c00058008000100524153000800070000"]}, 0x90}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="03002dbd7000fd702f06000000000000000001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r5, &(0x7f0000000840)={&(0x7f0000000c80)={0xa, 0x0, @multicast2}, 0x10, 0x0}, 0x4000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x3, &(0x7f0000000f40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000f80)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={r7, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x3, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001240), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000cc0)={{r4, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{0x1, 0xffffffffffffffff}, &(0x7f0000001380), &(0x7f00000013c0)=r9}, 0x20) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001480)=@generic={&(0x7f0000001440)='./file0\x00', 0x0, 0xc}, 0x18) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="000000000000000005000000000000009736c7f56344d20cebe2b13402c2000000000000000000000000ed0098110a4f7f20b0f8480a258a675fa068f03844c3295350c2775f1083"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000012c0)=@bpf_tracing={0x1a, 0x30, &(0x7f0000001740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x217a}, {}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0xfffffffa}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @map_val={0x18, 0xb, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1f1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x6}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000d80)='GPL\x00', 0x2, 0xab, &(0x7f0000000dc0)=""/171, 0x0, 0x20, '\x00', r8, 0x19, r10, 0x8, &(0x7f0000001280)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1d2cf, r6, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r15, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f0000000740)='\x00', 0x0}, 0x48) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000001400078008000840000000000800174000000004050005000a000000050001000700000005000400000000000900020073513d31000000000d0003006c6973743a736574"], 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008114) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x16, 0x16, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001c00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000001c40), 0x253, 0x10, &(0x7f0000001c80), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74}, 0x48) r16 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r16, 0x89f2, &(0x7f0000000b80)="6a8fd61c4592e2d48c07e3a70bdbffb0ddfe3726a01f646e23634ebfd3d28c2b999ce381ac7d52e88e208758b433dcd2bab0870d37f09217d77ac906dbed598b366df57b488ddba4f224d4e962de67b8daa94296736119e4f1f62fea2d5b9f22d13aaabacac944f3c10d89fc68d87abc9d64d4392d18efd4fc2473990c7568c43a24887b69779156fd9ce5ff6cee85a15aed55c97ef702de4274ce92068834ce732499a1f2b0cd6b96da99e49bbf107d592b4d366946e50ad6a87782200dd83989cc85405836bc9193fe79926657406146a36cba0f39e501be433f35d11c275cc61c39612a41") r17 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x60}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80021}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x78bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1m2.079165675s ago: executing program 1 (id=1534): syz_emit_ethernet(0x2e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb8100000008060001080006040002000000000000400000000180c200000eac1414aa5586704ad1acec2e27ccb1183d36bd89534395244b4f549427b0f0ce4c898420a64c6880efac9ac7b54de729e371305c192fddc78203483aacb11688390f00d70963ffe7b420dc806ed0468c831edf9080942a72cfff57c97c3b5d4cc59b9241c3894bbf1f269750fad222bab73aa753937d6886528f38ddc774bee9eb88f921ff90eece04a91fef1af08f143f0684335e265990ec06b709949427bf62e55db2a478148139949d120ab8cff1bd20757b3b9f41f08c0b2957cc57e0a908e3511e9c79b9fb74132d7f43389fcd614502e6db551444e0d010ed1dddf988b0bd0bcc"], 0x0) 1m1.989719809s ago: executing program 0 (id=1535): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x180, 0x218, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x1, [0x50]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x310) syz_emit_ethernet(0x42, &(0x7f0000000180)={@random="fcfcaed48165", @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x3, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xfff, 0xff}]}}}}}}}, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000840)=0x14) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)={0x48, r1, 0x7, 0xffffffff, 0xff1f0000, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}]}, 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f00000000c0)={0x2, 0xffffffffffffffff, 0x800}, &(0x7f0000000200)=0xc) r6 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000880)=[{0x20, 0x0, 0x0, 0xffefffff}, {0x16}]}, 0x10) sendto$inet6(r6, &(0x7f0000000940)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r7, 0x10f, 0x82, &(0x7f0000000c40)=0x3, 0x4) sendmsg$tipc(r7, &(0x7f0000000c80)={&(0x7f0000000cc0)=@id, 0x10, 0x0}, 0x0) connect$tipc(r7, &(0x7f0000000d00)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}}}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$nci(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000a40)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000680)={0x2c, r11, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) sendmsg$NFC_CMD_START_POLL(r8, &(0x7f0000000c00)={&(0x7f0000000980), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, r11, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x82}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xc}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x12}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x50}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000894) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000640)=0x10) 1m1.933885177s ago: executing program 3 (id=1536): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x8004) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e", @ANYRES32=r1, @ANYBLOB="0dfa130016000000240012000c"], 0x44}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0xfffffffffffffffd) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000240)=0xc) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000440)=0x2, 0x4) setsockopt$inet6_udp_int(r5, 0x11, 0x66, &(0x7f0000000480)=0x1, 0x4) bind$inet6(r5, &(0x7f00000004c0)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', 0x1}) write$tun(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@private=0xa010101, @in=@multicast1}, {@in=@multicast2, 0x4d6, 0x32}, @in=@dev, {0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x2, 0x2}, [@algo_auth={0x48, 0x1, {{'sha384-avx\x00'}}}]}, 0x138}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m1.931675039s ago: executing program 1 (id=1537): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000140)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1300000042000106"], 0x1c}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x11}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffd}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0xa4}, 0x1, 0xfffff000}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x1, 0x2000000, 0x25dfdc00, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x91}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}]}, 0x54}}, 0x20044890) 1m1.870735071s ago: executing program 2 (id=1538): unshare(0x20000400) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async, rerun: 64) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3c, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x40, 0x40, 0x7, 0x0, {{0x16, 0x4, 0x0, 0x0, 0x58, 0x66, 0x0, 0x6, 0x2d, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@lsrr={0x83, 0xf, 0x15, [@dev={0xac, 0x14, 0x14, 0x26}, @remote, @remote]}, @timestamp={0x44, 0x18, 0xa5, 0x0, 0x1, [0x5, 0x8, 0x1, 0x0, 0xfffffff7]}, @lsrr={0x83, 0x1b, 0x44, [@rand_addr=0x1, @rand_addr=0x64010101, @loopback, @local, @loopback, @multicast2]}]}}}}}) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={r2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000061180000000000007a0af8ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff8507000001000000950000000037b3d548954e0000000000000000cc842975147959120660f3cbb7aa9fb636ba387d500d8390059c1097ed24c4235898f2f42abd1bcbf8b6429af5a2f59ddd219e60087a2125f56953b04e1622b6e9ab512ed5237cec5a9f479b4ab51d51a13e2fbc2fa59b04dba2ec9e5a91445788f5a9106158321b6b8196136dcd9ccafcb83c6f1d7bd8864fe5173405898a0ade3c1685a66ceac4cbf8d8ed0dac049117cf312031db731246eba6424ee2"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) 1m1.774096572s ago: executing program 1 (id=1539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$nci(r1, 0x0, 0xfffffed2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x28002, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r3, 0x0, &(0x7f0000000340)=""/53}, 0x20) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$nci(r1, 0x0, 0xfffffed2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x28002, 0x7}, 0x50) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r3, 0x0, &(0x7f0000000340)=""/53}, 0x20) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x0) (async) 1m1.615701485s ago: executing program 2 (id=1540): getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x80000}, &(0x7f0000000040)=0xc) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x80000}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x7ff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={r1, 0x81, 0x20, 0xfffffffffffffffd, 0x1}, &(0x7f0000000140)=0x18) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) syz_emit_ethernet(0x22, &(0x7f00000001c0)={@empty, @remote, @val={@void, {0x8100, 0x6, 0x0, 0x3}}, {@can={0xc, {{0x2, 0x1}, 0x3, 0x1, 0x0, 0x0, "ce6fadb12761d11f"}}}}, &(0x7f0000000200)={0x0, 0x2, [0x5db, 0xcd, 0xd55, 0x7be]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000004c0)={{r0, &(0x7f00000002c0)='\x00', 0x10082, &(0x7f0000000300)={@align=0x2, {0x4, 0x6, 0x6, 0x6}}, 0x5, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0xd8}, {[0xbe4, 0x42fb, 0x2, 0x5]}, 0x3, 0xf9, &(0x7f00000003c0)=""/249}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000004c0)={{r0, &(0x7f00000002c0)='\x00', 0x10082, &(0x7f0000000300)={@align=0x2, {0x4, 0x6, 0x6, 0x6}}, 0x5, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0xd8}, {[0xbe4, 0x42fb, 0x2, 0x5]}, 0x3, 0xf9, &(0x7f00000003c0)=""/249}) ioctl$XFS_IOC_GETBMAPA(r2, 0xc020582c, &(0x7f0000000540)={0x9, 0xd8f2, 0x100, 0x3ff, 0xfffffff7}) (async) ioctl$XFS_IOC_GETBMAPA(r2, 0xc020582c, &(0x7f0000000540)={0x9, 0xd8f2, 0x100, 0x3ff, 0xfffffff7}) readv(r2, &(0x7f00000008c0)=[{&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000600)=""/243, 0xf3}, {&(0x7f0000000700)=""/73, 0x49}, {&(0x7f0000000780)}, {&(0x7f00000007c0)=""/203, 0xcb}], 0x5) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000940)={'macvtap0\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002fc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400008}, 0xc, &(0x7f0000002f80)={&(0x7f00000009c0)=@newtaction={0x25bc, 0x30, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{0x274, 0x1, [@m_ctinfo={0x104, 0x4, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x4d19, 0x5, 0x7, 0x56ef, 0xb4}}]}, {0xc0, 0x6, "b3f8592aaa54ebf01702909d14726f1fa17f64dee43c3f295591967f3cf1c0ae7ea791ceeaa14b7a0c4f87252d7ad8fd934924c3b4d28751e045b60b69d8b274383814121b5604ffcc531f014cfe9d4394e328744a7fcdbc7ad7d5e73e57f71399926feee9a4f61cee9b9875d2fb5a4be0d6bcffd2b2db7b3fa2cb5a96a992907c3616338e3960b9724345d7309882919b471453fa7a912aead1a9a0cfb28720134e073e21198f95bc49b5992136e828f9e06a399264df1ced1e7ad9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x16c, 0xc, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffa, 0x26, 0x1, 0x9, 0x3}, 0x2f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1a, 0xc75c, 0x1, 0x8, 0x7}, 0x7}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x78, 0x5, 0x7, 0x10, 0x72c67309}, 0x77}}]}, {0xe9, 0x6, "59c38b3eb22ff63b33888bbf0bd5840a5d90075e742e70d6edbe74cf332125f9265e7cedb067e36a42d3821f5acbfb934f2500c316803a5b1b4dcb33cf96b9442b0580398e8516c0376dedc73b8e7d37f97a49a31dd63b3eea269308f15f00d4af258d35b305a8b8acb8ab3e703e554cd45c49afa377ea95260e1d974bf086366779dfd6117e407242116e80de73bc135dd1b0a4e0114bf5d8f0de3b2e577553ba3c3d671de3c56d8b5dd2357947964219757ccd705a723fa717132849b39c1c0679916a374d4d51313c8ed8df97943827366ef1574ea02398aa24a1b1d99d1b58c06e0b99"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x21a4, 0x1, [@m_csum={0x120, 0x1b, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x400, 0x3, 0x0, 0xa}, 0x41}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x75d, 0x7fff, 0xffffffffeffffff8, 0x9}, 0x3}}]}, {0xbb, 0x6, "a965ac9fea00c89164b180b14df2fa6224bd871c94d5a2f28efa597a3382dd01eabfa668eada32d6295ce2f6d3ce2b81ff842bc11f8139eadc9d7ea4c28178300183138c778bb2e500dd5dc3c4ec92a58823514a1227b6e96f6c4395104bd69d0a57b5742e7d99392d12112ff43082d3614113285ba8d7810eca72f06a0f51d82c9f685c7dc025f8a675de44c426a78d034fae11358f3eeef98fb51f1c47da2ef52cc372c6fda580b307e3a7189b2f432c18fcaf57c9ee"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0x1030, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_connmark={0x1050, 0x1e, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40, 0x3, 0x8, 0xfffffffc}}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x190, 0x1, [@m_sample={0x108, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1ff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}]}, {0xc1, 0x6, "d4c486fd9d50fc8c1766f0c32c6d5cdf757c6b71ef8ee56101deaefa84c6a82f479385a8f6ca67fb884528f098f793ae659493b7cba3b9ddc6f3758b643e7630bdbeabf8429cd0f8e6563ca4b7795745140b15c5761907e4f016006d7c2ac3d58f3101b6f1f5a13937d8f2b09018efab887397a8f75bf694e55b4cb35dd7e14a50d5e30d1778cbe4cf8f0b84f22f22e207a1fd80b253474068f9a366778aea042b12f598c4a2947eb352cc391b8dc228525fc5a612beea2233627e3505"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x84, 0x11, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @empty}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "57776c2a928180ae6bbb10573078482c"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}]}, {0x10, 0x6, "77821de983819813dd0f2a8c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x25bc}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) setsockopt$inet_sctp_SCTP_REUSE_PORT(r0, 0x84, 0x24, &(0x7f0000003000)=0x3, 0x4) pselect6(0x40, &(0x7f0000003040)={0x459d936a, 0x7f, 0x7, 0xfffffffffffffff9, 0x0, 0x100000000, 0x7}, &(0x7f0000003080)={0x5e, 0x5, 0x8d9, 0x3, 0x3, 0x0, 0xf76c, 0x5}, &(0x7f00000030c0)={0x2, 0x1, 0x0, 0x475, 0x10000, 0x1, 0x80000000, 0x84f5}, &(0x7f0000003100)={0x0, 0x989680}, &(0x7f0000003180)={&(0x7f0000003140)={[0x3]}, 0x8}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000032c0)={r2, &(0x7f00000031c0)="44ca8e", &(0x7f0000003200)=""/139, 0x4}, 0x20) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x100010, r2, 0xf66d1000) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000033c0)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003380)={&(0x7f0000003340)={0x28, 0x1404, 0x1, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x8801) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000033c0)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003380)={&(0x7f0000003340)={0x28, 0x1404, 0x1, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x8801) syz_emit_ethernet(0x77, &(0x7f0000003400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @broadcast, @val={@val={0x88a8, 0x3, 0x0, 0x2}, {0x8100, 0x4, 0x1}}, {@ipv4={0x800, @tipc={{0x12, 0x4, 0x0, 0x3e, 0x61, 0x67, 0x0, 0x0, 0x6, 0x0, @remote, @remote, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xe7, 0x1, 0x0, [{@multicast2, 0x7fffffff}]}, @cipso={0x86, 0x16, 0xffffffffffffffff, [{0x5, 0x10, "2ae9c1d9f14df541da9f20ded96e"}]}, @end, @rr={0x7, 0x7, 0x9f, [@rand_addr=0x64010101]}, @end, @generic={0x89, 0x5, "f0f642"}]}}, @payload_conn={{{0x19, 0x0, 0x1, 0x0, 0x1, 0x6, 0x0, 0x2, 0x8, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0xfff9, 0x3, 0x4e20, 0x4e20}}, [0x0]}}}}}, 0x0) r4 = accept$phonet_pipe(r2, &(0x7f0000003480), &(0x7f00000034c0)=0x10) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000003500)) (async) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000003500)) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000003540), &(0x7f0000003580)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000003680)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003640)={&(0x7f0000003600)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000003800)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003700)={0x84, 0x453, 0x0, 0x70bd2d, 0x25dfdbfd, "3c509c458064d45df1a6b86fe5d6894a524073012bd9ed651b3b8e84572cc2e0bd82c8c27b9867469b9666f84c533f90590a385af246e6ce4154f19e444d53d2a4d170ec9b57ab75ab3ab017d5a96dd6828ac1be28d0a3b315d446e46a7a899db57a3a1449bffdb83a47f4f4f3499b1a5b", ["", "", "", "", "", "", ""]}, 0x84}, 0x1, 0x0, 0x0, 0x8040}, 0x4800) (async) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000003800)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003700)={0x84, 0x453, 0x0, 0x70bd2d, 0x25dfdbfd, "3c509c458064d45df1a6b86fe5d6894a524073012bd9ed651b3b8e84572cc2e0bd82c8c27b9867469b9666f84c533f90590a385af246e6ce4154f19e444d53d2a4d170ec9b57ab75ab3ab017d5a96dd6828ac1be28d0a3b315d446e46a7a899db57a3a1449bffdb83a47f4f4f3499b1a5b", ["", "", "", "", "", "", ""]}, 0x84}, 0x1, 0x0, 0x0, 0x8040}, 0x4800) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000003840)={r1, 0xffffffffffffffff, 0x80800}, &(0x7f0000003880)=0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f00000038c0)=[@in={0x2, 0x4e22, @empty}], 0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f00000038c0)=[@in={0x2, 0x4e22, @empty}], 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000003a80)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003a40)={&(0x7f0000003940)={0xc4, 0x0, 0x302, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4040041}, 0x4004080) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000003ac0)=0x7fff) socket$inet6(0xa, 0x80000, 0x3) getpeername$l2tp(r2, &(0x7f0000003b00)={0x2, 0x0, @initdev}, &(0x7f0000003b40)=0x10) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000003c80)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003c40)={&(0x7f0000003c00)={0x3c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x4) (async) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000003c80)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003c40)={&(0x7f0000003c00)={0x3c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x4) 1m1.261589848s ago: executing program 1 (id=1541): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x4, &(0x7f0000000600)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000680)=0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000180)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1b}}, 0x40) close(r4) bind$nfc_llcp(r0, &(0x7f00000006c0)={0x27, r2, 0xffffffffffffffff, 0x6, 0x0, 0xff, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f5237c9c58a8f60d4f1700000000000200000000001900", 0x3c}, 0x60) (async) close(r1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x88, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x64, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @broadcast, @device_a, @initial, {0x9, 0x204}}, 0xfff, @default, 0x808, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0xb7}, @void, @val={0x6, 0x2}, @val={0x2d, 0x1a, {0x800, 0x2, 0x4, 0x0, {0x1, 0x1, 0x0, 0x5}, 0x8, 0x8, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x6}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a010400000000000000000100000024000480200001800700010072740000140002800800014000000014080002400000004208000b40000000000900010073797a3000"], 0xd4}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) (async, rerun: 32) getsockopt(r0, 0x1, 0x4, 0x0, &(0x7f0000000340)) 1m1.195771407s ago: executing program 4 (id=1542): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000080)=0x79, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000480)='bic', 0x3) sendmmsg$inet(r0, 0x0, 0x0, 0x60d0) sendmsg$xdp(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000700)="5a3be5a94bbc394d84aceba7f47053152172efe4d7", 0x15}, {&(0x7f0000000740)="8bedfe3b1781df82e427fd36ca824223fffdb75e17126adf6f40e330d508bc9b1272ce0d37dabc2c8f923a6f43d84e1c99f33c75084468dc35773b6492e37d6a0a5553a0810455184f9ce1d85e6503646ab9364d07958df0b94470fdd8123618ef2fd1a4c9", 0x65}, {&(0x7f00000007c0)="c4fd87bb1f97f7617b7ee3222cfdf5e1c1db9088850d9bc57c16e97da906dcbcb948e9e9825d5b502fb631622c605cf9daae7678aec05ad2fcf52200aa3e24ea0ff451f9078438", 0x47}, {&(0x7f0000000840)="b84fd52c35f879e4f8cf6ed3e021e68dc471965103293535901eace9975e15b51fed0e834d7f19828cef7a5f9a2da529b6585ca6e18cd1e53c3d43ff17e68d0c4b87d7b1b616bee219835ea072cb862efb4403aea4d84fb15133966dcb9e4d4fa2ffabf1641fff32261b47a1ba9a52b25ecd77209a4f038b331592ba14ba806edb7cfa7e22dc8bbf43", 0x89}, {&(0x7f0000000900)="f5c5beeef928cb5f7fcc66ac2eeb042650112c59c70cc4d12bf7dfa0f3ea63e420ec4db9f50408a9e2a7e23da33a384d6f5d337c20048097b86a153f28dca5780ef27486b126d4b0bdbfe8e19ff57d5f71ea6c4b4f0cda515adb888706c364a5bfce8546d70cce8f9e3e37f15b4e85115b8f1fe1f895e77f8219e1d4aa67931baee8c60d08179f5958688bbf0e9354770b45ca6a03c39b9da05f03a8fe0770ad7f799ad610d7a9d1fee9757ab92c9ef4a87ea58e2b183a7b3fe9bcfc61e9a3c54c8536", 0xc3}, {&(0x7f0000000a00)="a5ea457986fac1c52ef4a8c5d273941d65079e2adb1ea544f3261d845e18685653ac80f426074b968916cd7ed6826768de5149be1565673535f3826eb42d254e3d0a35f8f5ef92f767b06043467f4b1aebd4d3a71c", 0x55}], 0x6, 0x0, 0x0, 0x80}, 0x8080) 1m0.921823288s ago: executing program 2 (id=1543): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_create1(0x80000) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x2) 0s ago: executing program 32 (id=1535): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x180, 0x218, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x1, [0x50]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x310) syz_emit_ethernet(0x42, &(0x7f0000000180)={@random="fcfcaed48165", @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x3, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xfff, 0xff}]}}}}}}}, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000840)=0x14) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)={0x48, r1, 0x7, 0xffffffff, 0xff1f0000, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}]}, 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f00000000c0)={0x2, 0xffffffffffffffff, 0x800}, &(0x7f0000000200)=0xc) r6 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000880)=[{0x20, 0x0, 0x0, 0xffefffff}, {0x16}]}, 0x10) sendto$inet6(r6, &(0x7f0000000940)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r7, 0x10f, 0x82, &(0x7f0000000c40)=0x3, 0x4) sendmsg$tipc(r7, &(0x7f0000000c80)={&(0x7f0000000cc0)=@id, 0x10, 0x0}, 0x0) connect$tipc(r7, &(0x7f0000000d00)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}}}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$nci(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000a40)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000680)={0x2c, r11, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) sendmsg$NFC_CMD_START_POLL(r8, &(0x7f0000000c00)={&(0x7f0000000980), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, r11, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x82}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xc}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x12}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x50}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000894) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000640)=0x10) kernel console output (not intermixed with test programs): ridge_slave_0: entered allmulticast mode [ 84.386383][ T5639] bridge_slave_0: entered promiscuous mode [ 84.388054][ T5630] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.390628][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.469516][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.471108][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.471209][ T5639] bridge_slave_1: entered allmulticast mode [ 84.472454][ T5639] bridge_slave_1: entered promiscuous mode [ 84.516768][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.516900][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.517367][ T5643] bridge_slave_0: entered allmulticast mode [ 84.520209][ T5643] bridge_slave_0: entered promiscuous mode [ 84.585677][ T5629] team0: Port device team_slave_0 added [ 84.589067][ T5629] team0: Port device team_slave_1 added [ 84.589262][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.589386][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.589834][ T5643] bridge_slave_1: entered allmulticast mode [ 84.592029][ T5643] bridge_slave_1: entered promiscuous mode [ 84.709497][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.709613][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.709739][ T5642] bridge_slave_0: entered allmulticast mode [ 84.712508][ T5642] bridge_slave_0: entered promiscuous mode [ 84.743870][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.770907][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.771143][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.771554][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.772793][ T5642] bridge_slave_1: entered allmulticast mode [ 84.777823][ T5642] bridge_slave_1: entered promiscuous mode [ 84.790078][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.824273][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.824291][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.824318][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.828598][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.906530][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.906549][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.906577][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.909118][ T5639] team0: Port device team_slave_0 added [ 84.992809][ T5639] team0: Port device team_slave_1 added [ 85.000440][ T5643] team0: Port device team_slave_0 added [ 85.000570][ T5630] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.009229][ T5643] team0: Port device team_slave_1 added [ 85.022566][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.068261][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.179139][ T5629] hsr_slave_0: entered promiscuous mode [ 85.180700][ T5629] hsr_slave_1: entered promiscuous mode [ 85.182984][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.182999][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.183027][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.190796][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.190832][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.190906][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.209006][ T5642] team0: Port device team_slave_0 added [ 85.221940][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.221978][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.222046][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.233991][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.234034][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.234108][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.320223][ T5642] team0: Port device team_slave_1 added [ 85.490915][ T5639] hsr_slave_0: entered promiscuous mode [ 85.491924][ T5639] hsr_slave_1: entered promiscuous mode [ 85.492478][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 85.492566][ T5639] Cannot create hsr debugfs directory [ 85.496057][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.496107][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.496187][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.577910][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.577928][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.577953][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.588192][ T5643] hsr_slave_0: entered promiscuous mode [ 85.591043][ T5643] hsr_slave_1: entered promiscuous mode [ 85.593771][ T5643] debugfs: 'hsr0' already exists in 'hsr' [ 85.593831][ T5643] Cannot create hsr debugfs directory [ 85.800712][ T5642] hsr_slave_0: entered promiscuous mode [ 85.801463][ T5642] hsr_slave_1: entered promiscuous mode [ 85.802061][ T5642] debugfs: 'hsr0' already exists in 'hsr' [ 85.802082][ T5642] Cannot create hsr debugfs directory [ 85.853883][ T4948] Bluetooth: hci2: command tx timeout [ 85.934624][ T53] Bluetooth: hci1: command tx timeout [ 85.934715][ T4948] Bluetooth: hci0: command tx timeout [ 86.014957][ T4948] Bluetooth: hci3: command tx timeout [ 86.093431][ T4948] Bluetooth: hci4: command tx timeout [ 86.251523][ T5629] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.264703][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.280467][ T5629] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.298350][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.299325][ T5629] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.318337][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.320830][ T5629] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.340852][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.482702][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.482815][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.482993][ T5630] bridge_slave_0: entered allmulticast mode [ 86.508753][ T5630] bridge_slave_0: entered promiscuous mode [ 86.518144][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.518284][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.518586][ T5630] bridge_slave_1: entered allmulticast mode [ 86.519953][ T5630] bridge_slave_1: entered promiscuous mode [ 86.547226][ T5639] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.550606][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.551535][ T5639] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.570336][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.613944][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.616500][ T5639] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.619675][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.621041][ T5639] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.636671][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.650637][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.715129][ T5630] team0: Port device team_slave_0 added [ 86.718051][ T5630] team0: Port device team_slave_1 added [ 86.774618][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.774637][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.774665][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.777223][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.777239][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.777263][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.979784][ T5630] hsr_slave_0: entered promiscuous mode [ 86.980914][ T5630] hsr_slave_1: entered promiscuous mode [ 86.981733][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 86.981754][ T5630] Cannot create hsr debugfs directory [ 87.028824][ T5643] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.047640][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.048684][ T5643] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.052506][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.109528][ T5643] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.125433][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.126439][ T5643] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.130125][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.375087][ T5642] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.378705][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.409108][ T5642] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.415728][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.418379][ T5642] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.435859][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.436879][ T5642] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.440019][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.489199][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.589546][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.602411][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.612578][ T5630] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.624643][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.632412][ T5630] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.647601][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.660416][ T5630] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.669037][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.688634][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.688763][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.690390][ T5630] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.696855][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.712379][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.762317][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.762395][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.790976][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.791052][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.838508][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.838584][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.922124][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.933744][ T4948] Bluetooth: hci2: command tx timeout [ 87.988743][ T5643] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.014043][ T53] Bluetooth: hci1: command tx timeout [ 88.014139][ T4948] Bluetooth: hci0: command tx timeout [ 88.019818][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.065307][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.065425][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.093457][ T4948] Bluetooth: hci3: command tx timeout [ 88.119316][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.119428][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.174160][ T4948] Bluetooth: hci4: command tx timeout [ 88.175902][ T5642] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.239673][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.239798][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.312300][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.312438][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.361964][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.464855][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.521824][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.521940][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.610411][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.610525][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.301033][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.412793][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.571594][ T5629] veth0_vlan: entered promiscuous mode [ 89.608689][ T5629] veth1_vlan: entered promiscuous mode [ 89.761470][ T5629] veth0_macvtap: entered promiscuous mode [ 89.790002][ T5629] veth1_macvtap: entered promiscuous mode [ 89.857303][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.872986][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.894593][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.944168][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.947787][ T1331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.016062][ T4948] Bluetooth: hci2: command tx timeout [ 90.094021][ T53] Bluetooth: hci1: command tx timeout [ 90.094069][ T4948] Bluetooth: hci0: command tx timeout [ 90.102018][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.173995][ T4948] Bluetooth: hci3: command tx timeout [ 90.220314][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.220346][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.221364][ T5643] veth0_vlan: entered promiscuous mode [ 90.244935][ T64] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.245233][ T64] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.260287][ T4948] Bluetooth: hci4: command tx timeout [ 90.283759][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.283921][ T5642] veth0_vlan: entered promiscuous mode [ 90.338111][ T5643] veth1_vlan: entered promiscuous mode [ 90.352365][ T5642] veth1_vlan: entered promiscuous mode [ 90.354798][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.354820][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.467776][ T5630] veth0_vlan: entered promiscuous mode [ 90.480558][ T5639] veth0_vlan: entered promiscuous mode [ 90.520319][ T5630] veth1_vlan: entered promiscuous mode [ 90.529862][ T5643] veth0_macvtap: entered promiscuous mode [ 90.561970][ T5639] veth1_vlan: entered promiscuous mode [ 90.577775][ T5642] veth0_macvtap: entered promiscuous mode [ 90.591630][ T5643] veth1_macvtap: entered promiscuous mode [ 90.616940][ T5629] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.628816][ T5642] veth1_macvtap: entered promiscuous mode [ 90.691178][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.718601][ T5630] veth0_macvtap: entered promiscuous mode [ 90.748804][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.754592][ T5630] veth1_macvtap: entered promiscuous mode [ 90.787386][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.809370][ T5639] veth0_macvtap: entered promiscuous mode [ 90.821707][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.867291][ T5639] veth1_macvtap: entered promiscuous mode [ 90.886546][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.891317][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.915353][ T5832] warning: `syz.3.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.995811][ T64] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.997375][ T156] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.997424][ T156] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.997464][ T156] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.049943][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.074860][ T62] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.074909][ T62] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.074947][ T62] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.074985][ T62] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.075037][ T62] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.075076][ T62] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.075114][ T62] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.113720][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.185720][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.185744][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.192389][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.228457][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.228482][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.302842][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.302865][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.381174][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.381198][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.408483][ T64] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.408667][ T64] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.498500][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.498526][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.563297][ T1331] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.563931][ T1331] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.630866][ T1331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.630905][ T1331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.726482][ T5839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6'. [ 91.726519][ T5839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6'. [ 91.731381][ T5842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 91.767896][ T5840] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6'. [ 91.767941][ T5840] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6'. [ 91.870212][ T5840] gretap1: entered promiscuous mode [ 91.870236][ T5840] gretap1: entered allmulticast mode [ 91.910571][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.910594][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.947759][ T1224] cfg80211: failed to load regulatory.db [ 92.010120][ T5846] netlink: 'syz.1.2': attribute type 2 has an invalid length. [ 92.068301][ T5849] ieee802154 phy0 wpan0: encryption failed: -22 [ 92.103862][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.103884][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.219339][ T5854] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 92.219362][ T5854] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2'. [ 92.258571][ T5860] Zero length message leads to an empty skb [ 92.569445][ T5871] openvswitch: netlink: Missing valid actions attribute. [ 92.569489][ T5871] openvswitch: netlink: Actions may not be safe on all matching packets [ 92.998742][ T5892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14'. [ 93.123945][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 93.152953][ T5901] hsr_slave_0: left promiscuous mode [ 93.164161][ T5901] hsr_slave_1: left promiscuous mode [ 93.182407][ T5899] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 93.209066][ T5905] netlink: 232 bytes leftover after parsing attributes in process `syz.3.20'. [ 93.551044][ T5921] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002 [ 93.610402][ T5927] xt_hashlimit: invalid interval [ 93.627182][ T5927] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 93.631467][ T5917] netlink: 'syz.3.20': attribute type 83 has an invalid length. [ 93.682767][ T5928] netlink: 48 bytes leftover after parsing attributes in process `syz.1.23'. [ 93.727504][ T5928] netlink: 'syz.1.23': attribute type 1 has an invalid length. [ 93.798818][ T5915] syzkaller1: entered promiscuous mode [ 93.798842][ T5915] syzkaller1: entered allmulticast mode [ 93.910366][ T4948] block nbd296: Receive control failed (result -32) [ 94.079866][ T5948] syz.3.29 uses obsolete (PF_INET,SOCK_PACKET) [ 94.612583][ T5974] netlink: 'syz.2.38': attribute type 1 has an invalid length. [ 94.666901][ T5974] macvtap1: entered allmulticast mode [ 94.712676][ T5974] macvtap2: entered allmulticast mode [ 94.979566][ T5987] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 94.981424][ T5987] bond1 (unregistering): Released all slaves [ 95.137184][ T6004] FAULT_INJECTION: forcing a failure. [ 95.137184][ T6004] name failslab, interval 1, probability 0, space 0, times 1 [ 95.137235][ T6004] CPU: 1 UID: 0 PID: 6004 Comm: syz.1.48 Not tainted syzkaller #0 PREEMPT(full) [ 95.137259][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 95.137281][ T6004] Call Trace: [ 95.137290][ T6004] [ 95.137298][ T6004] dump_stack_lvl+0xe8/0x150 [ 95.137344][ T6004] should_fail_ex+0x410/0x560 [ 95.137381][ T6004] should_failslab+0xa8/0x100 [ 95.137416][ T6004] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 95.137445][ T6004] ? __kasan_kmalloc+0x93/0xb0 [ 95.137474][ T6004] ? __request_module+0x2ec/0x630 [ 95.137503][ T6004] ? __request_module+0x2ec/0x630 [ 95.137541][ T6004] ? __kmalloc_cache_noprof+0x148/0x600 [ 95.137572][ T6004] kstrdup+0x42/0x100 [ 95.137602][ T6004] __request_module+0x2ec/0x630 [ 95.137635][ T6004] ? rtnl_link_ops_get+0x23/0x250 [ 95.137658][ T6004] ? __pfx___request_module+0x10/0x10 [ 95.137701][ T6004] ? rtnl_link_ops_get+0x23/0x250 [ 95.137723][ T6004] ? rtnl_link_ops_get+0x23/0x250 [ 95.137746][ T6004] ? rtnl_link_ops_get+0x215/0x250 [ 95.137772][ T6004] rtnl_newlink+0x66c/0x1c30 [ 95.137805][ T6004] ? __lock_acquire+0x6f0/0x2de0 [ 95.137833][ T6004] ? kasan_save_track+0x4f/0x80 [ 95.137859][ T6004] ? kasan_save_track+0x3e/0x80 [ 95.137885][ T6004] ? kasan_save_free_info+0x40/0x50 [ 95.137907][ T6004] ? __kasan_slab_free+0x5c/0x80 [ 95.137937][ T6004] ? __pfx_rtnl_newlink+0x10/0x10 [ 95.137967][ T6004] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 95.137993][ T6004] ? netlink_deliver_tap+0x19c/0x1b0 [ 95.138018][ T6004] ? netlink_unicast+0x8c1/0xa80 [ 95.138039][ T6004] ? netlink_sendmsg+0x7f0/0xb20 [ 95.138064][ T6004] ? sock_sendmsg_nosec+0x14e/0x190 [ 95.138088][ T6004] ? ____sys_sendmsg+0x54e/0x850 [ 95.138119][ T6004] ? ___sys_sendmsg+0x2a5/0x360 [ 95.138149][ T6004] ? __x64_sys_sendmsg+0x1b1/0x290 [ 95.138168][ T6004] ? do_syscall_64+0x166/0x520 [ 95.138188][ T6004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.138247][ T6004] ? kasan_quarantine_put+0xbb/0x1f0 [ 95.138275][ T6004] ? lockdep_hardirqs_on+0x7b/0x110 [ 95.138300][ T6004] ? nlmon_xmit+0xb0/0x100 [ 95.138319][ T6004] ? kmem_cache_free+0x182/0x650 [ 95.138356][ T6004] ? __lock_acquire+0x747/0x2de0 [ 95.138386][ T6004] ? __pfx_hook_capable+0x10/0x10 [ 95.138412][ T6004] ? __dev_queue_xmit+0x29b/0x3920 [ 95.138439][ T6004] ? __pfx_hook_capable+0x10/0x10 [ 95.138468][ T6004] ? lockdep_hardirqs_on+0x7b/0x110 [ 95.138515][ T6004] ? __pfx_rtnl_newlink+0x10/0x10 [ 95.138559][ T6004] rtnetlink_rcv_msg+0x802/0xc00 [ 95.138596][ T6004] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 95.138628][ T6004] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 95.138662][ T6004] ? __copy_skb_header+0xa3/0x4a0 [ 95.138685][ T6004] ? __asan_memcpy+0x40/0x70 [ 95.138718][ T6004] netlink_rcv_skb+0x226/0x4a0 [ 95.138746][ T6004] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 95.138780][ T6004] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 95.138820][ T6004] ? netlink_deliver_tap+0x2e/0x1b0 [ 95.138847][ T6004] ? netlink_deliver_tap+0x2e/0x1b0 [ 95.138879][ T6004] netlink_unicast+0x8ef/0xa80 [ 95.138922][ T6004] netlink_sendmsg+0x7f0/0xb20 [ 95.138957][ T6004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.138988][ T6004] ? aa_sock_msg_perm+0x144/0x210 [ 95.139020][ T6004] ? apparmor_socket_sendmsg+0x98/0x360 [ 95.139045][ T6004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.139072][ T6004] sock_sendmsg_nosec+0x14e/0x190 [ 95.139101][ T6004] ____sys_sendmsg+0x54e/0x850 [ 95.139140][ T6004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.139183][ T6004] ? import_iovec+0x73/0xa0 [ 95.139218][ T6004] ___sys_sendmsg+0x2a5/0x360 [ 95.139248][ T6004] ? __lock_acquire+0x747/0x2de0 [ 95.139277][ T6004] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.139349][ T6004] ? __fget_files+0x3a2/0x420 [ 95.139372][ T6004] ? __fget_files+0x2a/0x420 [ 95.139405][ T6004] __x64_sys_sendmsg+0x1b1/0x290 [ 95.139428][ T6004] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 95.139484][ T6004] do_syscall_64+0x166/0x520 [ 95.139505][ T6004] ? trace_irq_disable+0x3b/0x140 [ 95.139538][ T6004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.139560][ T6004] ? clear_bhb_loop+0x70/0xc0 [ 95.139587][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.139608][ T6004] RIP: 0033:0x7f857619f559 [ 95.139637][ T6004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.139654][ T6004] RSP: 002b:00007f8577135028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.139681][ T6004] RAX: ffffffffffffffda RBX: 00007f8576425fa0 RCX: 00007f857619f559 [ 95.139697][ T6004] RDX: 0000000000008024 RSI: 00002000000002c0 RDI: 0000000000000003 [ 95.139711][ T6004] RBP: 00007f8577135090 R08: 0000000000000000 R09: 0000000000000000 [ 95.139724][ T6004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.139737][ T6004] R13: 00007f8576426038 R14: 00007f8576425fa0 R15: 00007ffe5dc96a38 [ 95.139771][ T6004] [ 95.351334][ T5735] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.809322][ T6016] Bluetooth: MGMT ver 1.23 [ 95.836716][ T6021] netlink: zone id is out of range [ 95.836778][ T6021] netlink: zone id is out of range [ 95.836788][ T6021] netlink: zone id is out of range [ 95.836797][ T6021] netlink: zone id is out of range [ 95.836805][ T6021] netlink: zone id is out of range [ 96.082598][ T64] IPVS: starting estimator thread 0... [ 96.105476][ T6030] ip_tables: iptables: counters copy to user failed while replacing table [ 96.177264][ T6032] IPVS: using max 25 ests per chain, 60000 per kthread [ 96.354274][ T6040] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 96.354274][ T6040] Please contact the netfilter-devel mailing list or update your nftables rules. [ 96.565342][ T6057] xt_ecn: cannot match TCP bits for non-tcp packets [ 96.818794][ T6062] x_tables: duplicate underflow at hook 1 [ 97.021371][ T6066] __nla_validate_parse: 6 callbacks suppressed [ 97.021393][ T6066] netlink: 112 bytes leftover after parsing attributes in process `syz.1.65'. [ 97.101413][ T6077] netlink: 'syz.3.67': attribute type 1 has an invalid length. [ 97.101435][ T6077] netlink: 'syz.3.67': attribute type 268 has an invalid length. [ 97.101450][ T6077] netlink: 224 bytes leftover after parsing attributes in process `syz.3.67'. [ 97.446270][ T6089] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 97.450469][ T6089] bond1 (unregistering): Released all slaves [ 97.489682][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 97.489774][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.489785][ T6095] IPv6: NLM_F_CREATE should be set when creating new route [ 97.489847][ T6095] IPv6: NLM_F_CREATE should be set when creating new route [ 97.504160][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 97.504247][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.504458][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 97.504530][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.504735][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 97.581239][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.581488][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 97.581588][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.581791][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 97.581859][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.582061][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 97.582130][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.582320][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 97.582387][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.582649][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.625173][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.625757][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.642548][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.661946][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.687830][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.688653][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.689377][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.725588][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.725859][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.726142][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.726391][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.726741][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.726982][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.727216][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.727465][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.727698][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.728062][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.728304][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.728559][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.728796][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.729106][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.729388][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.729638][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.729940][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.730221][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.730444][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.730659][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.730902][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.741938][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.744065][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.745899][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.747779][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.750068][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.753703][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.754347][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.755287][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.755543][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.757875][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.758666][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.759487][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.762204][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.762844][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.765886][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.766877][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.767609][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.770105][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.771089][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.774915][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.775976][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.777874][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.778114][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.779100][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.779385][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.779639][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.782599][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.783461][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 99.444084][ T6047] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.769770][ T6147] tipc: Started in network mode [ 99.769810][ T6147] tipc: Node identity cacad490fb82, cluster identity 4711 [ 99.770731][ T6147] tipc: Enabled bearer , priority 0 [ 99.869772][ T6147] syzkaller0: entered promiscuous mode [ 99.869796][ T6147] syzkaller0: entered allmulticast mode [ 99.870736][ T6147] tipc: Resetting bearer [ 99.924587][ T6145] tipc: Resetting bearer [ 99.996804][ T6157] ip_tables: iptables: counters copy to user failed while replacing table [ 100.020595][ T6155] xt_bpf: check failed: parse error [ 101.171009][ T6145] tipc: Disabling bearer [ 101.190399][ T5744] tipc: Node number set to 826856592 [ 102.300993][ T6225] tipc: Started in network mode [ 102.301027][ T6225] tipc: Node identity aaaaaaaaaa1f, cluster identity 4711 [ 102.301278][ T6225] tipc: Enabled bearer , priority 0 [ 102.421242][ T6225] tipc: Enabling of bearer rejected, already enabled [ 102.547694][ T6241] netlink: 'syz.4.101': attribute type 2 has an invalid length. [ 102.840804][ T6250] x_tables: duplicate underflow at hook 1 [ 103.132708][ T6264] smc: net device lo applied user defined pnetid SYZ0 [ 103.142931][ T6266] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 103.159108][ T6264] __nla_validate_parse: 62 callbacks suppressed [ 103.159128][ T6264] netlink: 156 bytes leftover after parsing attributes in process `syz.0.110'. [ 103.413459][ T5757] tipc: Node number set to 11905706 [ 103.429098][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.112'. [ 103.438501][ T6273] batman_adv: batadv0: Adding interface: syz_tun [ 103.438571][ T6273] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.438643][ T6273] batman_adv: batadv0: Interface activated: syz_tun [ 103.512325][ T6271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.807668][ T6294] netlink: 60 bytes leftover after parsing attributes in process `syz.1.118'. [ 103.903910][ T6308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.121'. [ 104.080433][ T6315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.122'. [ 104.191788][ T6319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.126'. [ 104.220060][ T6319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.126'. [ 104.233851][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'. [ 104.290990][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 104.291025][ T6331] netlink: 'syz.1.126': attribute type 5 has an invalid length. [ 104.291041][ T6331] netlink: 20 bytes leftover after parsing attributes in process `syz.1.126'. [ 104.392540][ T6331] geneve2: entered promiscuous mode [ 104.392565][ T6331] geneve2: entered allmulticast mode [ 104.423275][ T62] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 104.440009][ T62] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 104.440483][ T62] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 104.440585][ T62] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 104.634943][ T6352] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 104.646875][ T6353] netlink: 'syz.3.131': attribute type 1 has an invalid length. [ 104.658577][ T6354] netlink: 'syz.3.131': attribute type 1 has an invalid length. [ 104.770934][ T6357] ip6t_rt: unknown flags 36 [ 104.941159][ T6368] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 105.042845][ T6345] bond1 (unregistering): Released all slaves [ 105.231517][ T6337] bond1: (slave gretap2): making interface the new active one [ 105.232729][ T6337] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 105.258155][ T6357] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.328090][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.345834][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.610531][ T6385] syz.3.143 (6385) used greatest stack depth: 18056 bytes left [ 105.612122][ T6393] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 105.641225][ T6393] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 106.018335][ C0] Illegal XDP return value 16128 on prog (id 69) dev lo, expect packet loss! [ 106.310092][ T6437] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 106.829928][ T6464] netlink: 'syz.4.165': attribute type 6 has an invalid length. [ 106.832697][ T6465] netlink: 'syz.0.166': attribute type 6 has an invalid length. [ 107.254720][ T6488] netlink: 'syz.1.171': attribute type 2 has an invalid length. [ 107.300241][ T6492] tc_dump_action: action bad kind [ 107.469812][ T4948] Bluetooth: hci1: Malformed Event: 0x2f [ 107.688419][ T6516] vcan0: entered allmulticast mode [ 107.693761][ T6517] bond0: invalid NS target ff00:: specified for addition [ 107.693792][ T6517] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 108.305749][ T6549] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 108.511821][ T6559] netlink: 'syz.0.190': attribute type 3 has an invalid length. [ 108.851324][ T6583] syzkaller0: entered promiscuous mode [ 108.851348][ T6583] syzkaller0: entered allmulticast mode [ 109.279265][ T6607] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 109.470692][ T6614] __nla_validate_parse: 50 callbacks suppressed [ 109.470716][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 109.504569][ T6619] netlink: 16 bytes leftover after parsing attributes in process `syz.0.205'. [ 109.527715][ T6614] ip_tables: iptables: counters copy to user failed while replacing table [ 110.129495][ T6642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.209'. [ 110.132008][ T4948] block nbd0: Receive control failed (result -107) [ 110.498743][ T6663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.214'. [ 110.530499][ T6666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.215'. [ 110.657940][ T6672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.698242][ T6674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.217'. [ 110.698446][ T6675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.217'. [ 110.768405][ T6680] ieee802154 phy0 wpan0: encryption failed: -22 [ 110.771815][ T6680] netlink: 'syz.4.221': attribute type 1 has an invalid length. [ 110.771837][ T6680] netlink: 96 bytes leftover after parsing attributes in process `syz.4.221'. [ 110.802222][ T6681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.890808][ T6687] netlink: 64 bytes leftover after parsing attributes in process `syz.4.224'. [ 110.890831][ T6687] netlink: 20 bytes leftover after parsing attributes in process `syz.4.224'. [ 110.895479][ T6689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.630836][ T6734] bond1: Unable to set up delay as MII monitoring is disabled [ 111.632948][ T6734] bond1 (unregistering): Released all slaves [ 111.658029][ T6740] x_tables: duplicate underflow at hook 1 [ 112.128143][ T6761] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 112.423179][ T6773] syzkaller0: entered promiscuous mode [ 112.423205][ T6773] syzkaller0: entered allmulticast mode [ 112.635388][ T6791] netlink: 'syz.0.254': attribute type 4 has an invalid length. [ 112.931284][ T3344] IPVS: starting estimator thread 0... [ 113.043209][ T6812] IPVS: using max 26 ests per chain, 62400 per kthread [ 114.186375][ T6818] gre0: entered allmulticast mode [ 114.305640][ T6816] syzkaller0: entered promiscuous mode [ 114.305664][ T6816] syzkaller0: entered allmulticast mode [ 114.661227][ T6838] batman_adv: batadv0: Interface deactivated: syz_tun [ 114.696704][ T6838] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.697969][ T6838] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.728290][ T6844] netlink: 'syz.0.269': attribute type 11 has an invalid length. [ 114.730471][ T6844] __nla_validate_parse: 7 callbacks suppressed [ 114.730489][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.269'. [ 114.918843][ T6838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.937963][ T6838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.004577][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.272'. [ 115.266845][ T6838] gretap1: left promiscuous mode [ 115.266864][ T6838] gretap1: left allmulticast mode [ 115.311806][ T6870] netlink: 666 bytes leftover after parsing attributes in process `syz.4.275'. [ 115.325464][ T146] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.326606][ T1331] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.326650][ T1331] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.326695][ T1331] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.327488][ T6856] syzkaller1: entered promiscuous mode [ 115.327612][ T6856] syzkaller1: entered allmulticast mode [ 115.329069][ T6870] IPVS: length: 24 != 51798840120 [ 115.509906][ T6874] netlink: ct family unspecified [ 115.672938][ T6879] openvswitch: netlink: Tunnel attr 229 out of range max 16 [ 115.726699][ T6887] netlink: 9 bytes leftover after parsing attributes in process `syz.2.282'. [ 115.728549][ T6885] netlink: 260 bytes leftover after parsing attributes in process `syz.0.281'. [ 115.731530][ T6887] gretap0: entered promiscuous mode [ 115.756592][ T6887] netlink: 5 bytes leftover after parsing attributes in process `syz.2.282'. [ 115.757312][ T6887] 0ªî{X¹¦: renamed from gretap0 [ 115.787370][ T6887] 0ªî{X¹¦: left promiscuous mode [ 115.787404][ T6887] 0ªî{X¹¦: entered allmulticast mode [ 115.809146][ T6887] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 116.192766][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'. [ 116.215477][ T6915] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.291'. [ 116.215610][ T6915] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.291'. [ 116.255750][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.255970][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.322492][ T6926] netlink: 'syz.4.293': attribute type 75 has an invalid length. [ 116.334209][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.293'. [ 117.293932][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.294095][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.013679][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.333595][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.333774][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.921986][ T6895] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 119.278846][ T6955] xt_CT: You must specify a L4 protocol and not use inversions on it [ 119.840368][ T6986] __nla_validate_parse: 2 callbacks suppressed [ 119.840408][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.308'. [ 120.114440][ T7008] netlink: 56 bytes leftover after parsing attributes in process `syz.3.315'. [ 120.165202][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 120.677095][ T7043] netlink: 36 bytes leftover after parsing attributes in process `syz.4.325'. [ 120.724601][ T7045] netlink: 'syz.1.326': attribute type 2 has an invalid length. [ 120.745118][ T5766] net_ratelimit: 4 callbacks suppressed [ 120.745140][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.746353][ T156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.746659][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.782623][ T7046] netlink: 'syz.1.326': attribute type 2 has an invalid length. [ 120.818585][ T7050] veth1_macvtap: left promiscuous mode [ 120.818617][ T7050] macsec0: entered promiscuous mode [ 121.020366][ T7054] netlink: 16 bytes leftover after parsing attributes in process `syz.4.329'. [ 121.078525][ T7054] netlink: 32 bytes leftover after parsing attributes in process `syz.4.329'. [ 121.151394][ T7061] netlink: 'syz.2.330': attribute type 9 has an invalid length. [ 121.151419][ T7061] netlink: 'syz.2.330': attribute type 4 has an invalid length. [ 121.373926][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.453356][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.453561][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.652065][ T7079] vlan0: entered promiscuous mode [ 121.652088][ T7079] bridge0: entered promiscuous mode [ 121.663872][ T7079] vlan0: entered allmulticast mode [ 121.663892][ T7079] bridge0: entered allmulticast mode [ 121.888196][ T7087] netlink: 'syz.0.338': attribute type 21 has an invalid length. [ 122.158242][ T7108] IPVS: set_ctl: invalid protocol: 59 172.20.20.13:20004 [ 122.221743][ T7113] sctp: [Deprecated]: syz.3.343 (pid 7113) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.221743][ T7113] Use struct sctp_sack_info instead [ 122.493537][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.493717][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.670134][ T7130] netlink: 32 bytes leftover after parsing attributes in process `syz.4.348'. [ 122.704792][ T7131] netlink: 32 bytes leftover after parsing attributes in process `syz.4.348'. [ 122.708303][ T7130] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 122.815860][ T7148] netlink: 76 bytes leftover after parsing attributes in process `syz.1.350'. [ 122.856837][ T7157] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 122.886151][ T7149] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 122.907966][ T7149] bond2: (slave lo): Enslaving as an active interface with an up link [ 122.908441][ T7149] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 123.021032][ T7164] sctp: [Deprecated]: syz.4.354 (pid 7164) Use of int in max_burst socket option deprecated. [ 123.021032][ T7164] Use struct sctp_assoc_value instead [ 123.078775][ T7164] sctp: [Deprecated]: syz.4.354 (pid 7164) Use of int in maxseg socket option. [ 123.078775][ T7164] Use struct sctp_assoc_value instead [ 123.161106][ T7169] netlink: 40 bytes leftover after parsing attributes in process `syz.3.357'. [ 123.287157][ T7176] x_tables: duplicate underflow at hook 1 [ 123.291848][ T7176] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 123.379652][ T7180] bridge1: entered promiscuous mode [ 123.379693][ T7180] bridge1: entered allmulticast mode [ 123.843303][ T7211] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 123.852023][ T7211] bond3 (unregistering): Released all slaves [ 126.494065][ T51] net_ratelimit: 10 callbacks suppressed [ 126.494110][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.494301][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.611797][ T7201] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.657955][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.658160][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.813493][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.882115][ T7276] __nla_validate_parse: 1 callbacks suppressed [ 126.882137][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.378'. [ 126.913220][ T1331] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.913269][ T1331] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.913304][ T1331] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.913339][ T1331] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.923904][ T7276] tipc: Started in network mode [ 126.923936][ T7276] tipc: Node identity aeedfcc06207, cluster identity 4711 [ 126.948823][ T7276] tipc: Enabled bearer , priority 10 [ 127.006492][ T7280] netlink: 40 bytes leftover after parsing attributes in process `syz.0.381'. [ 127.173523][ T7284] netlink: 'syz.2.383': attribute type 16 has an invalid length. [ 127.173547][ T7284] netlink: 20 bytes leftover after parsing attributes in process `syz.2.383'. [ 127.253708][ T7292] netlink: 666 bytes leftover after parsing attributes in process `syz.3.385'. [ 127.344462][ T7300] Bluetooth: hci0: load_link_keys: too big key_count value 5120 [ 127.538031][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.394'. [ 127.698508][ T1224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.698758][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.732340][ T7315] ip_tables: iptables: counters copy to user failed while replacing table [ 127.742870][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 127.801425][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 127.861072][ T7315] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.909983][ T7337] Cannot find add_set index 0 as target [ 127.937573][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 128.046724][ T5735] tipc: Node number set to 3437952192 [ 128.192901][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.407'. [ 128.203587][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.407'. [ 128.231395][ T7357] tipc: Trying to set illegal importance in message [ 128.282525][ T7352] syzkaller0: entered promiscuous mode [ 128.282552][ T7352] syzkaller0: entered allmulticast mode [ 128.681111][ T7383] netlink: 'syz.1.412': attribute type 1 has an invalid length. [ 128.734116][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.734298][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.795009][ T7383] bond2: entered promiscuous mode [ 128.795481][ T7383] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.829177][ T7388] vlan2: entered allmulticast mode [ 128.829204][ T7388] bond2: entered allmulticast mode [ 128.950640][ T7383] bond2: (slave bridge1): making interface the new active one [ 128.950670][ T7383] bridge1: entered promiscuous mode [ 128.950867][ T7383] bridge1: entered allmulticast mode [ 128.981829][ T7383] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 129.158439][ T7406] ip6t_srh: unknown srh match flags 4000 [ 129.178081][ T7407] ip6t_srh: unknown srh match flags 4000 [ 129.921760][ T7450] netlink: 'syz.2.432': attribute type 4 has an invalid length. [ 130.244122][ T7461] netlink: 'syz.2.440': attribute type 1 has an invalid length. [ 130.276312][ T7466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 130.276332][ T7466] IPv6: NLM_F_CREATE should be set when creating new route [ 130.301152][ T7461] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.418817][ T7470] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 130.452682][ T7461] bond1: (slave veth0_to_bond): making interface the new active one [ 130.470440][ T7461] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 130.494817][ T7469] bond1: entered promiscuous mode [ 130.494842][ T7469] veth0_to_bond: entered promiscuous mode [ 130.495124][ T7469] bond1: entered allmulticast mode [ 130.495141][ T7469] veth0_to_bond: entered allmulticast mode [ 130.497723][ T7479] netlink: 'syz.3.442': attribute type 30 has an invalid length. [ 130.568873][ T7461] macvlan2: entered promiscuous mode [ 130.568897][ T7461] macvlan2: entered allmulticast mode [ 130.571359][ T7461] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 130.592311][ T7461] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 130.770297][ T7494] netlink: 'syz.4.446': attribute type 1 has an invalid length. [ 130.772704][ T7494] bridge0: port 3(veth1_to_bridge) entered blocking state [ 130.772847][ T7494] bridge0: port 3(veth1_to_bridge) entered disabled state [ 130.789029][ T7494] veth1_to_bridge: entered allmulticast mode [ 130.810915][ T7494] veth1_to_bridge: entered promiscuous mode [ 130.811084][ T7494] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 130.812944][ T7494] bridge0: port 3(veth1_to_bridge) entered blocking state [ 130.813128][ T7494] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 131.581068][ T7544] vlan2: entered promiscuous mode [ 131.581101][ T7544] erspan0: entered promiscuous mode [ 131.616985][ T146] net_ratelimit: 7 callbacks suppressed [ 131.617006][ T146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.617215][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.853368][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.853562][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.907054][ T7568] __nla_validate_parse: 23 callbacks suppressed [ 131.907076][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.464'. [ 131.960292][ T7559] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.965696][ T51] bridge0: port 3(veth1_to_bridge) entered disabled state [ 132.048956][ T7574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.049425][ T7574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.051770][ T7574] sctp: [Deprecated]: syz.0.468 (pid 7574) Use of int in max_burst socket option deprecated. [ 132.051770][ T7574] Use struct sctp_assoc_value instead [ 132.329586][ T7589] netlink: 28 bytes leftover after parsing attributes in process `syz.0.470'. [ 132.567709][ T7602] netlink: 'syz.3.476': attribute type 3 has an invalid length. [ 132.638767][ T7608] netlink: 'syz.3.479': attribute type 1 has an invalid length. [ 132.638792][ T7608] netlink: 224 bytes leftover after parsing attributes in process `syz.3.479'. [ 132.686782][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.479'. [ 132.686806][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.479'. [ 132.896852][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.896913][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.897720][ T1224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.897873][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.213513][ T53] Bluetooth: hci0: command 0x0c3a tx timeout [ 133.213678][ T4948] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 133.297621][ T7649] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 133.358021][ T7655] netlink: 80 bytes leftover after parsing attributes in process `syz.0.490'. [ 133.390822][ T7656] netlink: 20 bytes leftover after parsing attributes in process `syz.0.490'. [ 133.391110][ T7656] netlink: 20 bytes leftover after parsing attributes in process `syz.0.490'. [ 133.391382][ T7656] netlink: 20 bytes leftover after parsing attributes in process `syz.0.490'. [ 133.391617][ T7656] netlink: 20 bytes leftover after parsing attributes in process `syz.0.490'. [ 133.933533][ T1224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.942008][ T7691] vlan2: entered allmulticast mode [ 133.942033][ T7691] bond0: entered allmulticast mode [ 133.942047][ T7691] bond_slave_0: entered allmulticast mode [ 133.942064][ T7691] bond_slave_1: entered allmulticast mode [ 134.525494][ T7719] batman_adv: batadv0: Adding interface: syz_tun [ 134.525518][ T7719] batman_adv: batadv0: Interface activated: syz_tun [ 134.890775][ T7743] netlink: 'syz.4.516': attribute type 1 has an invalid length. [ 134.989351][ T7751] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 135.480871][ T7774] xt_l2tp: missing protocol rule (udp|l2tpip) [ 135.483969][ T7774] netlink: 'syz.3.527': attribute type 2 has an invalid length. [ 135.848657][ T7793] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 136.161248][ T7824] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 136.529674][ T7855] syzkaller0: entered promiscuous mode [ 136.529701][ T7855] syzkaller0: entered allmulticast mode [ 137.059215][ T5632] net_ratelimit: 10 callbacks suppressed [ 137.059238][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.062427][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.062598][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.373497][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.373732][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.376455][ T1331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.376699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.097149][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.097390][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.226265][ T7974] bridge0: port 3(dummy0) entered blocking state [ 138.226643][ T7974] bridge0: port 3(dummy0) entered disabled state [ 138.226814][ T7974] dummy0: entered allmulticast mode [ 138.255350][ T7974] dummy0: entered promiscuous mode [ 138.364315][ T7978] dummy0: left allmulticast mode [ 138.364345][ T7978] dummy0: left promiscuous mode [ 138.365685][ T7978] bridge0: port 3(dummy0) entered disabled state [ 138.481046][ T7985] __nla_validate_parse: 43 callbacks suppressed [ 138.481067][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.580'. [ 138.481082][ T7985] netlink: 24 bytes leftover after parsing attributes in process `syz.2.580'. [ 138.600788][ T7994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.584'. [ 138.601161][ T7994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.584'. [ 138.916436][ T8015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.588'. [ 138.916471][ T8015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.588'. [ 139.133782][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.355240][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'. [ 139.377061][ T8051] bridge_slave_0: left allmulticast mode [ 139.377089][ T8051] bridge_slave_0: left promiscuous mode [ 139.377497][ T8051] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.489777][ T8060] netlink: 13 bytes leftover after parsing attributes in process `syz.4.598'. [ 139.606664][ T8065] netlink: 'syz.1.599': attribute type 2 has an invalid length. [ 139.730983][ T8079] netlink: 'syz.2.604': attribute type 1 has an invalid length. [ 139.839415][ T8082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.604'. [ 139.947103][ T8079] tipc: Enabling of bearer rejected, failed to enable media [ 139.994104][ T8093] netlink: 'syz.3.607': attribute type 21 has an invalid length. [ 139.994129][ T8093] netlink: 152 bytes leftover after parsing attributes in process `syz.3.607'. [ 140.001406][ T8089] sctp: [Deprecated]: syz.3.607 (pid 8089) Use of int in maxseg socket option. [ 140.001406][ T8089] Use struct sctp_assoc_value instead [ 140.080433][ T8090] erspan0: entered promiscuous mode [ 140.175779][ T8098] netlink: 'syz.3.611': attribute type 29 has an invalid length. [ 140.238227][ T8102] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 140.241375][ T8103] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 140.480012][ T8115] C: renamed from lo (while UP) [ 140.887974][ T8138] netlink: 'syz.3.620': attribute type 4 has an invalid length. [ 141.013672][ T8142] bridge1: entered promiscuous mode [ 141.013704][ T8142] bridge1: entered allmulticast mode [ 141.019599][ T8142] team0: Port device bridge1 added [ 141.021509][ T8142] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 141.088841][ T8146] hsr_slave_0: left promiscuous mode [ 141.091197][ T8146] hsr_slave_1: left promiscuous mode [ 142.253534][ T5735] net_ratelimit: 9 callbacks suppressed [ 142.253555][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.253740][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.504008][ T156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.504210][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.534356][ T8203] netlink: 'syz.1.637': attribute type 29 has an invalid length. [ 142.567339][ T8202] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.567379][ T8202] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 142.665410][ T156] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.665448][ T156] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.665474][ T156] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.134293][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.293771][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.293994][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.136256][ T8149] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.319256][ T8218] tipc: Failed to remove unknown binding: 66,0,0/0:3812393463/3812393464 [ 144.319494][ T8218] tipc: Failed to remove unknown binding: 66,0,0/0:3812393463/3812393464 [ 144.348514][ T1224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.348728][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.418655][ T8220] netlink: 'syz.4.643': attribute type 1 has an invalid length. [ 144.481529][ T8230] __nla_validate_parse: 40 callbacks suppressed [ 144.481552][ T8230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.648'. [ 144.591351][ T8235] netlink: 256 bytes leftover after parsing attributes in process `syz.0.650'. [ 144.614831][ T8235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.640495][ T8240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.651'. [ 144.918746][ T8261] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 145.002999][ T5766] hid-generic 0005:0008:0007.0001: item fetching failed at offset 0/1 [ 145.005788][ T5766] hid-generic 0005:0008:0007.0001: probe with driver hid-generic failed with error -22 [ 145.176091][ T8277] netlink: 248 bytes leftover after parsing attributes in process `syz.3.659'. [ 145.176137][ T8277] netlink: 52 bytes leftover after parsing attributes in process `syz.3.659'. [ 145.268631][ T8284] netlink: 'syz.0.658': attribute type 1 has an invalid length. [ 145.309603][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.660'. [ 145.321943][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.660'. [ 145.325970][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.660'. [ 145.340638][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.660'. [ 145.361407][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.660'. [ 145.784547][ T5292] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 146.351217][ T8343] netlink: 'syz.4.677': attribute type 4 has an invalid length. [ 146.464326][ T8346] veth1_to_bond: entered allmulticast mode [ 146.485699][ T8344] veth1_to_bond: left allmulticast mode [ 146.603421][ T156] IPVS: starting estimator thread 0... [ 146.621656][ T8356] pim6reg527: entered allmulticast mode [ 146.671936][ T8359] xt_hashlimit: size too large, truncated to 1048576 [ 146.693548][ T8367] IPVS: using max 24 ests per chain, 57600 per kthread [ 146.812997][ T8373] xt_hashlimit: size too large, truncated to 1048576 [ 147.300069][ T8395] netlink: 'syz.2.691': attribute type 1 has an invalid length. [ 147.386636][ T8369] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 147.386757][ T8372] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 147.454069][ T5744] net_ratelimit: 149 callbacks suppressed [ 147.454093][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.454334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.509002][ T8402] ip6gre1: entered allmulticast mode [ 147.540392][ T8402] netlink: 'syz.0.693': attribute type 1 has an invalid length. [ 148.043963][ T8434] Cannot find set identified by id 0 to match [ 148.255581][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.256441][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.256654][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.494697][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.494900][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.733267][ T4948] Bluetooth: hci0: command 0x0c3a tx timeout [ 148.851819][ T8487] ip_tables: iptables: counters copy to user failed while replacing table [ 148.953582][ T8494] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 148.958128][ T8494] block nbd1: Unsupported socket: should be TCP or UNIX. [ 149.253476][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.278209][ T8510] syzkaller1: entered promiscuous mode [ 149.278307][ T8510] syzkaller1: entered allmulticast mode [ 149.411389][ T8504] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 149.422591][ T8504] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 150.117100][ T8548] netlink: 'syz.3.734': attribute type 1 has an invalid length. [ 150.154821][ T8548] __nla_validate_parse: 46 callbacks suppressed [ 150.154842][ T8548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'. [ 150.187483][ T8548] bond3: (slave bridge1): making interface the new active one [ 150.187966][ T8548] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 150.205325][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'. [ 150.228894][ T8551] bond3: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 150.230356][ T8551] bond3 (unregistering): Released all slaves [ 150.272523][ T8552] bond3: (slave bridge2): Enslaving as a backup interface with an up link [ 150.356905][ T8560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.737'. [ 150.460056][ T8564] syzkaller0: entered promiscuous mode [ 150.460081][ T8564] syzkaller0: entered allmulticast mode [ 150.476380][ T8564] IPVS: ip_vs_edit_dest(): server weight less than zero [ 150.477085][ T156] IPVS: starting estimator thread 0... [ 150.564595][ T8568] IPVS: using max 27 ests per chain, 64800 per kthread [ 150.773385][ T8581] netlink: 36 bytes leftover after parsing attributes in process `syz.4.745'. [ 150.782266][ T8581] syzkaller0: entered promiscuous mode [ 150.782290][ T8581] syzkaller0: entered allmulticast mode [ 150.792468][ T8581] syzkaller0: Caught tx_queue_len zero misconfig [ 150.814905][ T4948] Bluetooth: hci0: command 0x0c3a tx timeout [ 150.913382][ T8587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.749'. [ 150.913769][ T8587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.749'. [ 150.991229][ T8587] batman_adv: batadv0: Adding interface: macvtap1 [ 150.991248][ T8587] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.991276][ T8587] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 151.050894][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'. [ 151.198721][ T8604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.752'. [ 151.198763][ T8604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.752'. [ 151.227756][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.753'. [ 151.881990][ T8642] xt_IDLETIMER: timeout value is too big [ 151.948638][ T8642] netlink: 'syz.0.764': attribute type 11 has an invalid length. [ 152.289081][ T8659] netlink: 'syz.0.768': attribute type 1 has an invalid length. [ 152.472443][ T8670] xt_IDLETIMER: timeout value is too big [ 152.653564][ T5744] net_ratelimit: 14 callbacks suppressed [ 152.653585][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.653792][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.735663][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.839462][ T8685] netlink: 'syz.0.777': attribute type 2 has an invalid length. [ 153.139225][ T8715] syzkaller0: left promiscuous mode [ 153.139251][ T8715] syzkaller0: left allmulticast mode [ 153.176797][ T8715] ip_tables: iptables: counters copy to user failed while replacing table [ 153.449400][ T8734] x_tables: duplicate entry at hook 4 [ 153.700630][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.700847][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.019215][ T6562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.019437][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.192448][ T8775] netlink: 'syz.2.798': attribute type 32 has an invalid length. [ 154.236652][ T8775] bond2: option coupled_control: invalid value (52) [ 154.263447][ T8775] bond2 (unregistering): Released all slaves [ 154.604932][ T8805] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 154.715974][ T8800] gtp0: entered promiscuous mode [ 154.715997][ T8800] gtp0: entered allmulticast mode [ 154.734124][ T1224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.734323][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.765867][ T8816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.060482][ T8823] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.060523][ T8823] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.060553][ T8823] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 155.145642][ T8832] syzkaller0: entered promiscuous mode [ 155.145669][ T8832] syzkaller0: entered allmulticast mode [ 155.171331][ T8832] __nla_validate_parse: 10 callbacks suppressed [ 155.171363][ T8832] netlink: 44 bytes leftover after parsing attributes in process `syz.4.809'. [ 155.218071][ T8823] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.218111][ T8823] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.218140][ T8823] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 155.270188][ T8836] batman_adv: batadv0: Adding interface: dummy0 [ 155.270212][ T8836] batman_adv: batadv0: Interface activated: dummy0 [ 155.270971][ T8838] netlink: 'syz.2.810': attribute type 10 has an invalid length. [ 155.270988][ T8838] netlink: 40 bytes leftover after parsing attributes in process `syz.2.810'. [ 155.271826][ T8838] batadv0: entered promiscuous mode [ 155.271854][ T8838] batadv0: entered allmulticast mode [ 155.272572][ T8838] bridge0: port 3(batadv0) entered blocking state [ 155.272760][ T8838] bridge0: port 3(batadv0) entered disabled state [ 155.282261][ T8838] bridge0: port 3(batadv0) entered blocking state [ 155.282554][ T8838] bridge0: port 3(batadv0) entered forwarding state [ 155.486239][ T8823] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.486280][ T8823] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.486309][ T8823] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 155.561415][ T8846] netlink: 'syz.2.813': attribute type 1 has an invalid length. [ 155.683407][ T156] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 155.683428][ T156] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 155.987164][ T156] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.987196][ T156] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 155.987218][ T156] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 156.010230][ T6562] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.010266][ T6562] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 156.010294][ T6562] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 156.121775][ T6562] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.121845][ T6562] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 156.121873][ T6562] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 156.127437][ T6562] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.127545][ T6562] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 156.127612][ T6562] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 156.253143][ T53] Bluetooth: hci0: command 0x0c3a tx timeout [ 156.253187][ T4948] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 156.257581][ T8876] netlink: 52 bytes leftover after parsing attributes in process `syz.0.823'. [ 156.257914][ T8876] netlink: 'syz.0.823': attribute type 10 has an invalid length. [ 156.307297][ T8876] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 156.326869][ T8876] team0: Port device wlan0 added [ 156.372150][ T8886] netlink: 52 bytes leftover after parsing attributes in process `syz.0.823'. [ 156.393519][ T8889] netlink: 'syz.1.825': attribute type 1 has an invalid length. [ 156.422078][ T8880] netlink: 44 bytes leftover after parsing attributes in process `syz.3.822'. [ 156.440160][ T8893] netlink: 'syz.0.823': attribute type 10 has an invalid length. [ 156.597748][ T8889] bond4: (slave gretap2): making interface the new active one [ 156.599582][ T8889] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 156.927436][ T8918] lo: entered promiscuous mode [ 156.930517][ T8918] tunl0: entered promiscuous mode [ 156.940062][ T8918] gre0: entered promiscuous mode [ 156.975519][ T8918] gretap0: entered promiscuous mode [ 157.036157][ T8918] erspan0: entered promiscuous mode [ 157.066597][ T8918] ip_vti0: entered promiscuous mode [ 157.366377][ T8941] netlink: 'syz.3.835': attribute type 4 has an invalid length. [ 157.641807][ T8956] netlink: 'syz.0.838': attribute type 3 has an invalid length. [ 157.641830][ T8956] netlink: 666 bytes leftover after parsing attributes in process `syz.0.838'. [ 157.847212][ T8965] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.840'. [ 158.474836][ T8996] netlink: 'syz.2.847': attribute type 1 has an invalid length. [ 158.659862][ T9006] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.680883][ T9005] netlink: 'syz.2.849': attribute type 28 has an invalid length. [ 158.680908][ T9005] netlink: 'syz.2.849': attribute type 3 has an invalid length. [ 158.680921][ T9005] netlink: 132 bytes leftover after parsing attributes in process `syz.2.849'. [ 158.963830][ T9029] netlink: 72 bytes leftover after parsing attributes in process `syz.4.853'. [ 159.575036][ T9059] Bluetooth: ISO socket layer initialized [ 159.657022][ T5292] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 159.661469][ T9064] netlink: 40 bytes leftover after parsing attributes in process `syz.3.860'. [ 159.789663][ T9072] xt_hl: Unknown Hop Limit match mode: 206 [ 159.827771][ T9062] netlink: 'syz.1.861': attribute type 4 has an invalid length. [ 160.079247][ T9093] net_ratelimit: 37 callbacks suppressed [ 160.079269][ T9093] netlink: ct family unspecified [ 160.212515][ T9091] bond4: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 160.222880][ T9091] bond4 (unregistering): Released all slaves [ 160.452310][ T9118] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 160.460449][ T9118] __nla_validate_parse: 2 callbacks suppressed [ 160.460470][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 160.828019][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.880'. [ 160.828251][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.880'. [ 160.828656][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.880'. [ 160.828882][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.880'. [ 160.829103][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.880'. [ 160.829331][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.880'. [ 160.834273][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.880'. [ 160.834921][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.880'. [ 160.859031][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.880'. [ 161.326839][ T9171] netlink: 'syz.0.886': attribute type 16 has an invalid length. [ 161.326862][ T9171] netlink: 'syz.0.886': attribute type 3 has an invalid length. [ 161.330696][ T9171] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 161.362704][ T9172] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 161.394581][ T9172] bond1: (slave veth0_to_bond): Releasing active interface [ 161.394612][ T9172] veth0_to_bond: left promiscuous mode [ 161.394806][ T9172] veth0_to_bond: left allmulticast mode [ 161.547038][ T9175] netlink: 'syz.0.888': attribute type 1 has an invalid length. [ 161.631711][ T9175] bond1: entered promiscuous mode [ 161.632218][ T9175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.113252][ T9214] ip_tables: iptables: counters copy to user failed while replacing table [ 162.212790][ T9214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.319526][ T9219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.449163][ T9226] syzkaller1: entered promiscuous mode [ 162.449187][ T9226] syzkaller1: entered allmulticast mode [ 162.462632][ T9226] syzkaller1: left promiscuous mode [ 162.462696][ T9226] syzkaller1: left allmulticast mode [ 162.893751][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 162.947494][ T9254] netlink: 'syz.3.912': attribute type 3 has an invalid length. [ 163.147964][ T9258] bridge3: entered allmulticast mode [ 163.567821][ T9279] pim6reg: entered allmulticast mode [ 163.592120][ T9274] netlink: 'syz.3.920': attribute type 3 has an invalid length. [ 163.592241][ T9274] netlink: 'syz.3.920': attribute type 3 has an invalid length. [ 163.592362][ T9274] netlink: 'syz.3.920': attribute type 3 has an invalid length. [ 163.592480][ T9274] netlink: 'syz.3.920': attribute type 3 has an invalid length. [ 163.592597][ T9274] netlink: 'syz.3.920': attribute type 3 has an invalid length. [ 163.592713][ T9274] netlink: 'syz.3.920': attribute type 3 has an invalid length. [ 163.614901][ T9274] netlink: 'syz.3.920': attribute type 3 has an invalid length. [ 163.615332][ T9274] netlink: 'syz.3.920': attribute type 3 has an invalid length. [ 163.615640][ T9274] netlink: 'syz.3.920': attribute type 3 has an invalid length. [ 164.927985][ T30] audit: type=1804 audit(1793133295.104:2): pid=9354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.936" name="/newroot/203/cgroup.controllers" dev="tmpfs" ino=1044 res=1 errno=0 [ 164.941818][ T30] audit: type=1800 audit(1793133295.114:3): pid=9354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.936" name="cgroup.controllers" dev="tmpfs" ino=1044 res=0 errno=-22 [ 165.512302][ T9379] __nla_validate_parse: 34 callbacks suppressed [ 165.512326][ T9379] netlink: 20 bytes leftover after parsing attributes in process `syz.2.944'. [ 165.592607][ T9381] netlink: 56 bytes leftover after parsing attributes in process `syz.2.945'. [ 165.683738][ T9384] sctp: [Deprecated]: syz.4.946 (pid 9384) Use of int in max_burst socket option. [ 165.683738][ T9384] Use struct sctp_assoc_value instead [ 165.684266][ T9384] sctp: [Deprecated]: syz.4.946 (pid 9384) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.684266][ T9384] Use struct sctp_sack_info instead [ 165.751762][ T9387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.948'. [ 166.227207][ T9419] batman_adv: batadv0: Interface activated: syz_tun [ 166.245731][ T9419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.247976][ T9419] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.272391][ T9419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.350056][ T9419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.361937][ T9419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.395830][ T9419] veth1_vlan: left promiscuous mode [ 166.397920][ T9419] veth0_vlan: left promiscuous mode [ 166.400464][ T9419] veth0_vlan: entered promiscuous mode [ 166.421629][ T9419] veth1_vlan: entered promiscuous mode [ 166.439230][ T9419] veth1_macvtap: left promiscuous mode [ 166.440959][ T9419] veth0_macvtap: left promiscuous mode [ 166.442894][ T9419] veth0_macvtap: entered promiscuous mode [ 166.462928][ T9419] veth1_macvtap: entered promiscuous mode [ 166.481173][ T9419] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 166.496109][ T9419] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 166.498714][ T9419] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 166.501066][ T9419] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 166.536568][ T9419] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.541040][ T9419] syzkaller0: left promiscuous mode [ 166.560873][ T9419] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.572247][ T9419] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 166.593037][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.593163][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.598338][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.598450][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.754576][ T156] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.754626][ T156] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.754664][ T156] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.754754][ T156] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.803745][ T9422] geneve2: entered promiscuous mode [ 166.906534][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'. [ 166.906561][ T9431] netlink: 24 bytes leftover after parsing attributes in process `syz.2.961'. [ 166.907049][ T9431] netlink: 17 bytes leftover after parsing attributes in process `syz.2.961'. [ 167.171782][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.966'. [ 167.325257][ T9454] netlink: 28 bytes leftover after parsing attributes in process `syz.1.968'. [ 167.739461][ T9480] dvmrp1: entered allmulticast mode [ 167.770841][ T9479] netlink: 28 bytes leftover after parsing attributes in process `syz.0.975'. [ 167.770881][ T9479] netlink: 28 bytes leftover after parsing attributes in process `syz.0.975'. [ 167.896305][ T9489] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.007779][ T9491] veth1_macvtap: left promiscuous mode [ 168.007809][ T9491] macsec0: entered allmulticast mode [ 168.087144][ T9496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.118792][ T9498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.424674][ T9518] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 169.218432][ T9563] validate_nla: 59 callbacks suppressed [ 169.218456][ T9563] netlink: 'syz.2.996': attribute type 97 has an invalid length. [ 169.218474][ T9563] netlink: 'syz.2.996': attribute type 97 has an invalid length. [ 169.892202][ T9590] netlink: 'syz.0.1005': attribute type 2 has an invalid length. [ 170.522129][ T9623] sctp: [Deprecated]: syz.2.1016 (pid 9623) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.522129][ T9623] Use struct sctp_sack_info instead [ 170.547509][ T9623] __nla_validate_parse: 6 callbacks suppressed [ 170.547528][ T9623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1016'. [ 170.547561][ T9623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1016'. [ 170.844387][ T9628] team0 (unregistering): Port device team_slave_0 removed [ 170.884833][ T9628] team0 (unregistering): Port device team_slave_1 removed [ 171.059450][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1022'. [ 171.370279][ T9659] ip_tables: iptables: counters copy to user failed while replacing table [ 171.440412][ T9665] netlink: 'syz.2.1028': attribute type 4 has an invalid length. [ 171.466597][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1027'. [ 171.546549][ T9667] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1027'. [ 172.403927][ T9710] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1032'. [ 172.410756][ T9719] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1036'. [ 172.470638][ T9731] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1036'. [ 172.505122][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1037'. [ 172.741589][ T9743] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 172.870113][ T9748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'. [ 173.631998][ T9782] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 174.109658][ T9810] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 174.378226][ T9821] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.392473][ T9809] netlink: ct family unspecified [ 174.405986][ T9819] pimreg3: entered allmulticast mode [ 174.519705][ T9836] veth0: entered promiscuous mode [ 174.523282][ T3391] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.523319][ T3391] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.662765][ T9830] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 174.681664][ T9830] bond2 (unregistering): Released all slaves [ 174.810430][ T9828] veth0: left promiscuous mode [ 174.960085][ T9863] xt_hashlimit: size too large, truncated to 1048576 [ 175.944429][ T9897] bridge5: entered promiscuous mode [ 175.944459][ T9897] bridge5: entered allmulticast mode [ 176.004426][ T9908] __nla_validate_parse: 6 callbacks suppressed [ 176.004447][ T9908] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1078'. [ 176.343585][ T9914] udevd[9914]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 176.350052][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1081'. [ 176.377238][ T9913] udevd[9913]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 176.408000][ T9920] openvswitch: netlink: Actions may not be safe on all matching packets [ 176.487833][ T9928] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1082'. [ 176.487872][ T9928] netlink: 21 bytes leftover after parsing attributes in process `syz.0.1082'. [ 176.487888][ T9928] netlink: 21 bytes leftover after parsing attributes in process `syz.0.1082'. [ 176.577561][ T9933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1084'. [ 176.856941][ T9947] syzkaller0: entered promiscuous mode [ 176.856967][ T9947] syzkaller0: entered allmulticast mode [ 176.919243][ T9949] tc_dump_action: action bad kind [ 176.947824][ T9953] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1090'. [ 177.125471][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1095'. [ 177.270177][ T9967] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 177.325216][ T9971] ip_tables: iptables: counters copy to user failed while replacing table [ 178.199205][T10019] netlink: 16816 bytes leftover after parsing attributes in process `syz.4.1111'. [ 178.354743][T10021] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1113'. [ 178.490326][T10030] netlink: 'syz.2.1117': attribute type 10 has an invalid length. [ 178.490730][T10029] netlink: 'syz.2.1117': attribute type 10 has an invalid length. [ 178.519028][T10030] team0: Device wg2 is of different type [ 178.547579][T10029] team0: Device wg2 is of different type [ 178.580251][T10033] tipc: Trying to set illegal importance in message [ 178.623979][T10042] netlink: 'syz.1.1120': attribute type 7 has an invalid length. [ 178.651090][T10029] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 178.671313][T10029] syzkaller0: entered promiscuous mode [ 178.671339][T10029] syzkaller0: entered allmulticast mode [ 178.807698][ T156] IPVS: starting estimator thread 0... [ 178.903354][T10050] IPVS: using max 29 ests per chain, 69600 per kthread [ 178.937045][T10058] netlink: 'syz.0.1126': attribute type 8 has an invalid length. [ 179.049186][T10066] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 179.066243][T10064] bridge7: entered promiscuous mode [ 179.150255][T10070] netlink: 'syz.0.1130': attribute type 4 has an invalid length. [ 179.168269][T10070] .`: renamed from bond0 (while UP) [ 179.316239][T10081] sctp: [Deprecated]: syz.0.1132 (pid 10081) Use of int in max_burst socket option. [ 179.316239][T10081] Use struct sctp_assoc_value instead [ 179.597915][T10098] syzkaller1: entered promiscuous mode [ 179.597941][T10098] syzkaller1: entered allmulticast mode [ 180.278310][T10120] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 180.640814][T10132] netlink: 'syz.3.1146': attribute type 1 has an invalid length. [ 180.833474][ T53] Bluetooth: hci1: Unexpected cc 0x2753 with no status [ 180.949189][T10144] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 180.949239][T10144] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 181.361914][T10155] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.385992][T10155] bridge_slave_0 (unregistering): left allmulticast mode [ 181.386022][T10155] bridge_slave_0 (unregistering): left promiscuous mode [ 181.386116][T10155] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.524063][T10166] openvswitch: netlink: Actions may not be safe on all matching packets [ 181.600139][T10173] netlink: 'syz.3.1158': attribute type 2 has an invalid length. [ 181.617923][T10173] syzkaller0: left allmulticast mode [ 181.819154][ C1] vxcan0: j1939_xtp_rx_rts_session_active: 0xffff88807ae47400: connection exists (fe ff). last cmd: 20 [ 181.819470][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88807ae44800: connection exists (fe ff). last cmd: 20 [ 181.848332][T10180] __nla_validate_parse: 9 callbacks suppressed [ 181.848351][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1164'. [ 181.919182][T10180] batman_adv: batadv0: Interface deactivated: syz_tun [ 181.970568][T10190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1166'. [ 181.984172][T10180] batman_adv: batadv0: Removing interface: syz_tun [ 182.048278][T10195] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1167'. [ 182.062790][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880379a0000: rx timeout, send abort [ 182.069078][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880690e2400: rx timeout, send abort [ 182.088900][T10190] bond4: entered promiscuous mode [ 182.089354][T10190] 8021q: adding VLAN 0 to HW filter on device bond4 [ 182.564733][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880379a0000: abort rx timeout. Force session deactivation [ 182.569200][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880690e2400: abort rx timeout. Force session deactivation [ 182.652347][T10217] tipc: Enabling of bearer rejected, failed to enable media [ 182.920995][T10245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1175'. [ 182.921022][T10245] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1175'. [ 182.921071][T10245] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1175'. [ 183.060655][T10235] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.881962][T10271] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 3, id = 0 [ 184.095182][ T53] Bluetooth: hci4: unexpected event 0x04 length: 17 > 10 [ 184.095216][ T53] Bluetooth: unknown link type 128 [ 184.127662][ T53] Bluetooth: hci4: unexpected event 0x04 length: 17 > 10 [ 184.127691][ T53] Bluetooth: unknown link type 128 [ 184.408040][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1193'. [ 184.948557][T10341] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 184.948607][T10341] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 185.327798][T10357] syzkaller1: entered promiscuous mode [ 185.327824][T10357] syzkaller1: entered allmulticast mode [ 185.332192][T10357] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1210'. [ 185.332231][T10357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1210'. [ 185.581068][T10375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1214'. [ 185.652463][T10378] netlink: 'syz.3.1217': attribute type 32 has an invalid length. [ 185.929422][T10260] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.929538][T10260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.183351][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 186.201179][T10408] netlink: 'syz.2.1225': attribute type 1 has an invalid length. [ 186.239051][T10408] bond5: entered promiscuous mode [ 186.239539][T10408] 8021q: adding VLAN 0 to HW filter on device bond5 [ 186.281603][T10408] vlan4: entered allmulticast mode [ 186.281628][T10408] bond5: entered allmulticast mode [ 186.318344][T10408] bond5: (slave bridge2): making interface the new active one [ 186.318368][T10408] bridge2: entered promiscuous mode [ 186.318522][T10408] bridge2: entered allmulticast mode [ 186.320602][T10408] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 186.503441][T10423] xt_IDLETIMER: timeout value is zero [ 186.890006][T10444] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 186.890039][T10444] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 186.950622][T10447] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 187.045291][T10451] __nla_validate_parse: 8 callbacks suppressed [ 187.045322][T10451] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1241'. [ 187.220311][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1243'. [ 187.220587][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1243'. [ 187.220776][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1243'. [ 187.220971][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1243'. [ 187.224689][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1243'. [ 187.234960][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1243'. [ 187.235369][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1243'. [ 187.235574][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1243'. [ 187.236708][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1243'. [ 187.441747][T10466] ip_tables: iptables: counters copy to user failed while replacing table [ 187.441754][T10440] infiniband syz0: set active [ 187.441855][T10440] infiniband syz0: added bond_slave_1 [ 187.519449][T10440] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 187.519490][T10440] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 187.519535][T10440] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 187.661934][T10440] RDS/IB: syz0: added [ 187.661991][T10440] smc: adding ib device syz0 with port count 1 [ 187.662013][T10440] smc: ib device syz0 port 1 has no pnetid [ 187.710203][T10474] netlink: 'syz.3.1250': attribute type 1 has an invalid length. [ 187.710234][T10474] netlink: 'syz.3.1250': attribute type 2 has an invalid length. [ 188.008824][T10495] sctp: [Deprecated]: syz.2.1252 (pid 10495) Use of int in max_burst socket option deprecated. [ 188.008824][T10495] Use struct sctp_assoc_value instead [ 188.253561][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 188.405773][T10512] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 189.702142][T10557] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.702231][T10557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.734718][T10562] bond6: Unable to set up delay as MII monitoring is disabled [ 189.737239][T10562] bond6 (unregistering): Released all slaves [ 190.171612][T10576] team0: Device ipvlan0 failed to register rx_handler [ 190.197276][T10580] xt_socket: unknown flags 0x4 [ 190.228034][T10583] bridge_slave_1: left allmulticast mode [ 190.228064][T10583] bridge_slave_1: left promiscuous mode [ 190.228289][T10583] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.257461][T10583] bond0: (slave bond_slave_0): Releasing backup interface [ 190.275743][T10583] bond0: (slave bond_slave_1): Releasing backup interface [ 190.327379][T10583] team0: Port device team_slave_0 removed [ 190.350507][T10583] team0: Port device team_slave_1 removed [ 190.360111][T10583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.360130][T10583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.379967][T10583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.379992][T10583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.408962][T10583] bond2: (slave bridge1): Releasing backup interface [ 190.408991][T10583] bridge1: left promiscuous mode [ 190.409242][T10583] bridge1: left allmulticast mode [ 190.449496][T10583] bond4: (slave gretap2): Releasing backup interface [ 190.503952][ T5735] syz0: Port: 1 Link DOWN [ 190.907546][T10609] syzkaller0: entered promiscuous mode [ 190.907572][T10609] syzkaller0: entered allmulticast mode [ 191.100443][T10620] : entered promiscuous mode [ 191.181123][ T13] tipc: Subscription rejected, illegal request [ 191.274759][T10632] : renamed from bond0 (while UP) [ 191.436638][T10643] xt_hashlimit: size too large, truncated to 1048576 [ 191.610810][T10651] xt_hashlimit: size too large, truncated to 1048576 [ 191.681083][T10649] rxe_eth0 speed is unknown, defaulting to 1000 [ 192.221163][T10684] netlink: 'syz.2.1304': attribute type 1 has an invalid length. [ 192.316319][T10688] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 192.416722][T10694] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 192.576196][T10700] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING [ 192.583454][T10700] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING [ 192.788525][T10708] netlink: 'syz.3.1312': attribute type 1 has an invalid length. [ 192.788548][T10708] __nla_validate_parse: 77 callbacks suppressed [ 192.788562][T10708] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1312'. [ 193.375396][T10736] netlink: 'syz.0.1319': attribute type 3 has an invalid length. [ 193.489836][T10746] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1322'. [ 193.585807][T10750] netlink: 'syz.3.1323': attribute type 1 has an invalid length. [ 193.647656][T10748] netlink: 'syz.0.1322': attribute type 8 has an invalid length. [ 193.927665][T10765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1328'. [ 193.962847][T10766] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.973490][T10766] ip6t_rt: too many addresses specified [ 193.980924][T10768] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1329'. [ 194.049326][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d238000: rx timeout, send abort [ 194.061968][T10772] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1329'. [ 194.345219][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.432874][T10780] can: request_module (can-proto-5) failed. [ 194.549319][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d23bc00: rx timeout, send abort [ 194.549397][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d238000: abort rx timeout. Force session deactivation [ 194.829851][T10801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1336'. [ 194.829875][T10801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1336'. [ 195.049377][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d23bc00: abort rx timeout. Force session deactivation [ 195.262791][T10831] syzkaller0: entered promiscuous mode [ 195.262817][T10831] syzkaller0: entered allmulticast mode [ 195.520480][T10854] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1354'. [ 195.555514][T10854] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1354'. [ 195.718476][T10865] tipc: Enabling of bearer rejected, media not registered [ 195.728369][T10867] netlink: 'syz.2.1357': attribute type 1 has an invalid length. [ 195.914000][T10878] bridge6: entered promiscuous mode [ 195.914093][T10878] bridge6: entered allmulticast mode [ 195.941053][T10884] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 196.001607][T10877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1362'. [ 196.317078][T10905] pimreg3: entered allmulticast mode [ 196.461863][T10912] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 197.037958][T10948] netlink: 'syz.0.1381': attribute type 1 has an invalid length. [ 197.601995][T10951] syzkaller1: entered promiscuous mode [ 197.602019][T10951] syzkaller1: entered allmulticast mode [ 198.023863][T10995] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 198.356820][T11007] netlink: 'syz.2.1393': attribute type 9 has an invalid length. [ 198.356844][T11007] __nla_validate_parse: 3 callbacks suppressed [ 198.356857][T11007] netlink: 134780 bytes leftover after parsing attributes in process `syz.2.1393'. [ 198.401144][T11009] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1395'. [ 198.401174][T11009] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1395'. [ 198.426525][T11009] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 198.491886][T11013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1394'. [ 198.803059][T11035] netlink: 'syz.4.1402': attribute type 1 has an invalid length. [ 198.803081][T11035] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1402'. [ 199.099545][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1403'. [ 199.113542][T11049] syzkaller0: left promiscuous mode [ 199.113565][T11049] syzkaller0: left allmulticast mode [ 199.172582][ T24] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 199.182443][T11042] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 199.438129][T11064] openvswitch: netlink: IP tunnel dst address not specified [ 199.489443][T11058] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1406'. [ 199.505267][T11064] ip6gre1: entered allmulticast mode [ 199.643925][T11058]  (unregistering): Released all slaves [ 199.715098][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1410'. [ 199.764011][T11078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1410'. [ 199.824084][T11081] xt_cluster: node mask cannot exceed total number of nodes [ 199.955360][T11090] openvswitch: netlink: IP tunnel dst address not specified [ 200.241746][T11093] syzkaller1: entered promiscuous mode [ 200.241770][T11093] syzkaller1: entered allmulticast mode [ 200.269775][T11107] netlink: 'syz.2.1418': attribute type 2 has an invalid length. [ 200.337643][T11113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1420'. [ 200.555510][T11126] netlink: 'syz.4.1424': attribute type 1 has an invalid length. [ 200.622157][T11126] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.691551][T11126] xt_HMARK: proto mask must be zero with L3 mode [ 200.691890][T11126] netlink: 'syz.4.1424': attribute type 10 has an invalid length. [ 200.774789][T11130] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 201.177442][T11174] netlink: 'syz.4.1437': attribute type 16 has an invalid length. [ 201.288554][T11174] IPVS: ip_vs_edit_dest(): server weight less than zero [ 201.299412][T11185] netlink: 'syz.4.1437': attribute type 16 has an invalid length. [ 201.334630][T11184] IPVS: ip_vs_edit_dest(): server weight less than zero [ 201.758306][T11222] netlink: 'syz.3.1448': attribute type 1 has an invalid length. [ 201.815801][T11222] 8021q: adding VLAN 0 to HW filter on device bond4 [ 201.858030][T11222] bond4: (slave bridge8): making interface the new active one [ 201.859905][T11222] bond4: (slave bridge8): Enslaving as an active interface with an up link [ 202.071876][T11229] syzkaller1: entered promiscuous mode [ 202.071899][T11229] syzkaller1: entered allmulticast mode [ 202.359703][T11248] geneve0: entered allmulticast mode [ 202.368753][T11249] netlink: 'syz.3.1457': attribute type 21 has an invalid length. [ 202.491285][T11249] netlink: 'syz.3.1457': attribute type 21 has an invalid length. [ 202.643459][T11272] syzkaller1: entered promiscuous mode [ 202.643483][T11272] syzkaller1: entered allmulticast mode [ 202.891383][T11287] ip_tables: iptables: counters copy to user failed while replacing table [ 203.178618][T11308] openvswitch: netlink: VXLAN extension message has 20 unknown bytes. [ 203.412654][T11320] __nla_validate_parse: 14 callbacks suppressed [ 203.412678][T11320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1469'. [ 203.562807][T11326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1471'. [ 203.583995][T11338] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1470'. [ 203.619172][ T53] Bluetooth: hci4: link tx timeout [ 203.619193][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 203.622689][ T4948] Bluetooth: hci4: link tx timeout [ 203.622707][ T4948] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 203.658195][T11337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1472'. [ 203.658231][T11337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1472'. [ 203.658300][T11337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1472'. [ 203.808393][T11340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1470'. [ 203.997972][ T4948] Bluetooth: hci4: link tx timeout [ 203.997992][ T4948] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 204.034742][ T4948] Bluetooth: hci4: link tx timeout [ 204.034764][ T4948] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 204.093475][ T4948] Bluetooth: hci4: link tx timeout [ 204.093497][ T4948] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 204.178817][ T4948] Bluetooth: hci4: link tx timeout [ 204.178839][ T4948] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 205.217802][ T5636] Bluetooth: hci4: link tx timeout [ 205.217830][ T5636] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 205.694439][ T5636] Bluetooth: hci4: command 0x0405 tx timeout [ 205.935545][ T53] Bluetooth: hci4: link tx timeout [ 206.528645][T11345] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 206.548908][T11327] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 206.662908][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 206.662959][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 206.663041][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 206.858001][T11398] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1482'. [ 206.983893][T11404] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 206.983922][T11404] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 207.163402][T11409] validate_nla: 2 callbacks suppressed [ 207.163424][T11409] netlink: 'syz.3.1485': attribute type 9 has an invalid length. [ 207.343851][T11429] veth1_macvtap: entered promiscuous mode [ 207.343876][T11429] veth1_macvtap: entered allmulticast mode [ 207.344010][T11429] macsec0: left allmulticast mode [ 207.344023][T11429] veth1_macvtap: left allmulticast mode [ 207.394572][T11434] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1489'. [ 207.395384][T11431] netlink: 'syz.4.1488': attribute type 1 has an invalid length. [ 207.446806][T11431] bond4: entered promiscuous mode [ 207.448806][T11431] 8021q: adding VLAN 0 to HW filter on device bond4 [ 207.530110][T11438] bond4: (slave bridge5): making interface the new active one [ 207.530137][T11438] bridge5: entered promiscuous mode [ 207.531211][T11438] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 207.531271][T11431] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1488'. [ 207.850289][ T30] audit: type=1800 audit(1793133338.024:4): pid=11456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1492" name="memory.events" dev="tmpfs" ino=1526 res=0 errno=-22 [ 208.070238][ T5640] Bluetooth: hci4: link tx timeout [ 208.133855][T11469] ip_tables: iptables: counters copy to user failed while replacing table [ 208.214992][T11469] syzkaller0: entered promiscuous mode [ 208.215016][T11469] syzkaller0: entered allmulticast mode [ 208.478304][T11486] __nla_validate_parse: 3 callbacks suppressed [ 208.478326][T11486] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1502'. [ 208.480236][T11486] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1502'. [ 208.527956][T11488] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 208.679542][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.679567][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.679585][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.679601][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.679616][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.679650][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.679667][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.679698][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.679715][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.679730][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.679746][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.679762][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.679802][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.679818][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.679834][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.679851][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.679867][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.679883][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.679899][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.679916][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.679931][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.679947][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.679963][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.679979][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.679995][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680011][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680028][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680044][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680060][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680076][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680093][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680110][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680126][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680143][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680159][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680489][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680509][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680526][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680543][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680560][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680578][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680595][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680611][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680627][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680643][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680660][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680677][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680694][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680711][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680728][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680745][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680762][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680787][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680804][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680821][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680838][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680855][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680871][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680888][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680905][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680921][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680938][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680955][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.680971][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.686517][T11498] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1507'. [ 208.688153][T11495] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.826686][T11498] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1507'. [ 208.845531][ T5640] Bluetooth: hci4: link tx timeout [ 209.272116][T11509] netlink: 'syz.3.1509': attribute type 2 has an invalid length. [ 209.272141][T11509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1509'. [ 209.359185][T11515] netlink: 'syz.2.1511': attribute type 1 has an invalid length. [ 209.749196][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1517'. [ 209.777142][T11547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1520'. [ 209.791706][T11547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1520'. [ 209.792317][T11547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1520'. [ 209.835722][T11544] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1521'. [ 210.729430][T11594] ip_tables: iptables: counters copy to user failed while replacing table [ 210.774506][T11597] netlink: 'syz.4.1533': attribute type 16 has an invalid length. [ 210.774531][T11597] netlink: 'syz.4.1533': attribute type 17 has an invalid length. [ 210.971487][T11597] geneve0: left allmulticast mode [ 211.040265][T11597] vlan0: left promiscuous mode [ 211.040289][T11597] bridge0: left promiscuous mode [ 211.040592][T11597] vlan0: left allmulticast mode [ 211.040609][T11597] bridge0: left allmulticast mode [ 211.073417][T11597] bridge1: left promiscuous mode [ 211.073443][T11597] bridge1: left allmulticast mode [ 211.094091][T11597] syzkaller0: left promiscuous mode [ 211.094116][T11597] syzkaller0: left allmulticast mode [ 211.101974][T11597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.137056][T11597] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 211.138761][T11597] batman_adv: batadv0: Interface activated: macvtap1 [ 211.161200][T11597] geneve2: left promiscuous mode [ 211.181888][T11597] 8021q: adding VLAN 0 to HW filter on device bond2 [ 211.195937][T11597] bond4: left promiscuous mode [ 211.195962][T11597] bridge5: left promiscuous mode [ 211.237599][ T8695] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.237721][ T8695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.242005][ T8695] bridge0: port 3(veth1_to_bridge) entered blocking state [ 211.242141][ T8695] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 212.753890][ T5640] Bluetooth: hci4: link tx timeout [ 213.689127][ T5640] Bluetooth: hci4: link tx timeout [ 214.828471][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (0); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 214.833732][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (0); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 215.291731][ C0] sched: DL replenish lagged too much [ 218.077838][T11636] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 257.938048][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.441517][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 337.704451][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (0); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 347.954866][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (0); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 363.845877][ T33] INFO: task kworker/0:5:5758 blocked for more than 143 seconds. [ 363.845906][ T33] Not tainted syzkaller #0 [ 363.845918][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 363.845935][ T33] task:kworker/0:5 state:D stack:24448 pid:5758 tgid:5758 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 363.846002][ T33] Workqueue: events switchdev_deferred_process_work [ 363.846286][ T33] Call Trace: [ 363.846332][ T33] [ 363.846378][ T33] __schedule+0x17dd/0x5820 [ 363.846603][ T33] ? do_raw_spin_unlock+0xf5/0x200 [ 363.846729][ T33] ? __pfx___schedule+0x10/0x10 [ 363.846775][ T33] ? schedule+0x90/0x2b0 [ 363.846814][ T33] schedule+0x164/0x2b0 [ 363.846851][ T33] schedule_preempt_disabled+0x13/0x30 [ 363.846886][ T33] __mutex_lock+0x7c4/0x15a0 [ 363.846927][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 363.846955][ T33] ? switchdev_deferred_process_work+0xe/0x20 [ 363.846984][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 363.847007][ T33] ? lock_acquire+0x115/0x350 [ 363.847042][ T33] ? rcu_is_watching+0x16/0xb0 [ 363.847081][ T33] ? process_scheduled_works+0x97a/0x1630 [ 363.847131][ T33] switchdev_deferred_process_work+0xe/0x20 [ 363.847155][ T33] process_scheduled_works+0xc3d/0x1630 [ 363.847221][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 363.847260][ T33] ? assign_work+0x3cf/0x5d0 [ 363.847296][ T33] worker_thread+0xa47/0xfb0 [ 363.847343][ T33] ? __kthread_parkme+0x71/0x1f0 [ 363.847388][ T33] kthread+0x38b/0x480 [ 363.847411][ T33] ? __pfx_worker_thread+0x10/0x10 [ 363.847439][ T33] ? __pfx_kthread+0x10/0x10 [ 363.847464][ T33] ret_from_fork+0x514/0xb70 [ 363.847513][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 363.847538][ T33] ? __switch_to+0xc78/0x1410 [ 363.847574][ T33] ? __pfx_kthread+0x10/0x10 [ 363.847598][ T33] ret_from_fork_asm+0x1a/0x30 [ 363.847689][ T33] [ 363.847753][ T33] INFO: task kworker/u8:17:8695 blocked for more than 143 seconds. [ 363.847770][ T33] Not tainted syzkaller #0 [ 363.847782][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 363.847792][ T33] task:kworker/u8:17 state:D stack:25256 pid:8695 tgid:8695 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 363.847865][ T33] Workqueue: events_unbound linkwatch_event [ 363.847997][ T33] Call Trace: [ 363.848004][ T33] [ 363.848018][ T33] __schedule+0x17dd/0x5820 [ 363.848086][ T33] ? __pfx___schedule+0x10/0x10 [ 363.848140][ T33] ? schedule+0x90/0x2b0 [ 363.848178][ T33] schedule+0x164/0x2b0 [ 363.848215][ T33] schedule_preempt_disabled+0x13/0x30 [ 363.848248][ T33] __mutex_lock+0x7c4/0x15a0 [ 363.848277][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 363.848306][ T33] ? linkwatch_event+0xe/0x60 [ 363.848335][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 363.848359][ T33] ? lock_acquire+0x115/0x350 [ 363.848396][ T33] ? rcu_is_watching+0x16/0xb0 [ 363.848428][ T33] ? process_scheduled_works+0x97a/0x1630 [ 363.848459][ T33] linkwatch_event+0xe/0x60 [ 363.848485][ T33] process_scheduled_works+0xc3d/0x1630 [ 363.848553][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 363.848593][ T33] ? assign_work+0x3cf/0x5d0 [ 363.848630][ T33] worker_thread+0xa47/0xfb0 [ 363.848694][ T33] kthread+0x38b/0x480 [ 363.848718][ T33] ? __pfx_worker_thread+0x10/0x10 [ 363.848748][ T33] ? __pfx_kthread+0x10/0x10 [ 363.848773][ T33] ret_from_fork+0x514/0xb70 [ 363.848795][ T33] ? save_fpregs_to_fpstate+0x176/0x200 [ 363.848828][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 363.848853][ T33] ? __switch_to+0xc78/0x1410 [ 363.848890][ T33] ? __pfx_kthread+0x10/0x10 [ 363.848914][ T33] ret_from_fork_asm+0x1a/0x30 [ 363.848957][ T33] [ 363.848974][ T33] INFO: task kworker/u8:25:10260 blocked for more than 143 seconds. [ 363.848990][ T33] Not tainted syzkaller #0 [ 363.849014][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 363.849023][ T33] task:kworker/u8:25 state:D stack:25672 pid:10260 tgid:10260 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 363.849089][ T33] Workqueue: ipv6_addrconf addrconf_dad_work [ 363.849173][ T33] Call Trace: [ 363.849180][ T33] [ 363.849193][ T33] __schedule+0x17dd/0x5820 [ 363.849259][ T33] ? __pfx___schedule+0x10/0x10 [ 363.849304][ T33] ? schedule+0x90/0x2b0 [ 363.849340][ T33] schedule+0x164/0x2b0 [ 363.849375][ T33] schedule_preempt_disabled+0x13/0x30 [ 363.849408][ T33] __mutex_lock+0x7c4/0x15a0 [ 363.849436][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 363.849464][ T33] ? addrconf_dad_work+0x116/0x15c0 [ 363.849490][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 363.849537][ T33] addrconf_dad_work+0x116/0x15c0 [ 363.849573][ T33] ? __pfx_addrconf_dad_work+0x10/0x10 [ 363.849607][ T33] ? rcu_is_watching+0x16/0xb0 [ 363.849639][ T33] ? process_scheduled_works+0x97a/0x1630 [ 363.849669][ T33] process_scheduled_works+0xc3d/0x1630 [ 363.849736][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 363.849774][ T33] ? assign_work+0x3cf/0x5d0 [ 363.849809][ T33] worker_thread+0xa47/0xfb0 [ 363.849871][ T33] kthread+0x38b/0x480 [ 363.849894][ T33] ? __pfx_worker_thread+0x10/0x10 [ 363.849922][ T33] ? __pfx_kthread+0x10/0x10 [ 363.849947][ T33] ret_from_fork+0x514/0xb70 [ 363.849974][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 363.849997][ T33] ? __switch_to+0xc78/0x1410 [ 363.850034][ T33] ? __pfx_kthread+0x10/0x10 [ 363.850058][ T33] ret_from_fork_asm+0x1a/0x30 [ 363.850106][ T33] [ 363.850134][ T33] [ 363.850134][ T33] Showing all locks held in the system: [ 363.850175][ T33] locks held by kthreadd/2: 2, last CPU#0: [ 363.850256][ T33] #0: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 363.850373][ T33] #1: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 363.850440][ T33] locks held by kworker/u8:0/12: 4, last CPU#0: [ 363.850456][ T33] #0: ffff8880767aa948 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 363.850552][ T33] #1: ffffc90000117c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 363.850613][ T33] #2: ffff8880372e1480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 363.850708][ T33] #3: ffff888027d9bea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 363.850770][ T33] locks held by kworker/u8:1/13: 6, last CPU#1: [ 363.850786][ T33] #0: ffff888037474948 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 363.850852][ T33] #1: ffffc90000127c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 363.850913][ T33] #2: ffff888076481480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 363.850976][ T33] #3: ffff88802fe120e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 363.851038][ T33] #4: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 363.851172][ T33] #5: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: trace_drop_common+0xfc/0x480 [ 363.851255][ T33] locks held by kworker/1:0/24: 4, on CPU#1: [ 363.851271][ T33] #0: ffff888056851948 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 363.851336][ T33] #1: ffffc900001e7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 363.851416][ T33] #2: ffff888076485480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 363.851479][ T33] #3: ffff88802fe13ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 363.851543][ T33] locks held by kworker/u8:2/31: 4, last CPU#0: [ 363.851557][ T33] #0: ffff88807d8df948 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 363.851618][ T33] #1: ffffc90000a77c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 363.851679][ T33] #2: ffff888034a55480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 363.851741][ T33] #3: ffff88802fe16640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 363.851804][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 363.851819][ T33] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 363.851888][ T33] locks held by kworker/u8:3/51: 2, last CPU#0: [ 363.851903][ T33] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 363.851964][ T33] #1: ffffc90000bb7c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 363.852026][ T33] locks held by kworker/u8:5/64: 4, last CPU#0: [ 363.852041][ T33] #0: ffff888037476948 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 363.852109][ T33] #1: ffffc9000206fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 363.852170][ T33] #2: ffff888036975480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 363.852233][ T33] #3: ffff88807edf7028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 363.852299][ T33] locks held by kworker/u8:6/146: 4, last CPU#0: [ 363.852315][ T33] #0: ffff888037476948 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 363.852375][ T33] #1: ffffc90002ef7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 363.852436][ T33] #2: ffff888036975480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 363.852499][ T33] #3: ffff88802fe15c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 363.852562][ T33] locks held by kworker/0:2/194: 3, last CPU#0: [ 363.852578][ T33] #0: ffff88807f6c6948 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 363.852644][ T33] #1: ffffc90002f67c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 363.852725][ T33] #2: ffff88807edf6640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 363.852791][ T33] locks held by kworker/1:2/1224: 2, last CPU#1: [ 363.852807][ T33] #0: ffff88807f6c6548 ((wq_completion)wg-crypt-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 363.852873][ T33] #1: ffffc9000581fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.930236][ T33] locks held by kworker/u8:8/1331: 4, last CPU#0: [ 365.930256][ T33] #0: ffff88807d395948 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.930326][ T33] #1: ffffc90005a1fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.930390][ T33] #2: ffff88807676d480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 365.930466][ T33] #3: ffff88802fe11700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 365.930544][ T33] locks held by kworker/u8:9/3344: 3, last CPU#0: [ 365.930560][ T33] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.930632][ T33] #1: ffffc9000f1a7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.930697][ T33] #2: ffff888028530258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 365.930882][ T33] locks held by kworker/u8:10/3391: 3, last CPU#0: [ 365.930898][ T33] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.930961][ T33] #1: ffffc9000f157c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.931025][ T33] #2: ffff888023f67258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 365.931097][ T33] locks held by klogd/4986: 2, last CPU#0: [ 365.931113][ T33] #0: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 365.931173][ T33] #1: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x6c/0x430 [ 365.931254][ T33] locks held by udevd/4997: 4, last CPU#0: [ 365.931270][ T33] #0: ffffffff8fe33fd0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x470 [ 365.931335][ T33] #1: ffff88807ed4b440 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 365.931398][ T33] #2: ffff88807c639bc0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 365.931468][ T33] #3: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 365.931528][ T33] locks held by dhcpcd/5292: 1, on CPU#0: [ 365.931543][ T33] #0: ffffffff8fe33fd0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x470 [ 365.931603][ T33] locks held by crond/5369: 3, last CPU#0: [ 365.931618][ T33] #0: ffffffff904f5a78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 365.931707][ T33] #1: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 365.931765][ T33] #2: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 365.931827][ T33] locks held by getty/5388: 2, on CPU#0: [ 365.931842][ T33] #0: ffff8880381070a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 365.931922][ T33] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 365.931979][ T33] locks held by syz-executor/5618: 1, last CPU#0: [ 365.931995][ T33] #0: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 365.932055][ T33] locks held by syz-executor/5629: 1, last CPU#0: [ 365.932071][ T33] #0: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 365.932131][ T33] locks held by syz-executor/5630: 3, last CPU#0: [ 365.932146][ T33] #0: ffff8880798d4080 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 365.932202][ T33] #1: ffff88807429d178 (&anon_vma->rwsem){++++}-{4:4}, at: unlink_anon_vmas+0x119/0x720 [ 365.932259][ T33] #2: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 365.932320][ T33] locks held by kworker/0:3/5632: 5, last CPU#0: [ 365.932336][ T33] #0: ffff888056851948 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.932404][ T33] #1: ffffc900043f7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.932495][ T33] #2: ffff88802fe13ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 365.932560][ T33] #3: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 365.932618][ T33] #4: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 365.932679][ T33] locks held by syz-executor/5639: 2, last CPU#0: [ 365.932694][ T33] #0: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 365.932754][ T33] #1: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 365.932814][ T33] locks held by syz-executor/5642: 2, last CPU#0: [ 365.932830][ T33] #0: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 365.932889][ T33] #1: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 365.948108][ T33] locks held by kworker/1:4/5735: 3, last CPU#1: [ 365.948127][ T33] #0: ffff888037236948 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.948199][ T33] #1: ffffc90004b47c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.948281][ T33] #2: ffff888076769480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 365.948348][ T33] locks held by kworker/1:5/5744: 3, last CPU#1: [ 365.948365][ T33] #0: ffff88807b7f3548 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.948431][ T33] #1: ffffc90004bc7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.948523][ T33] #2: ffff888027d9dc58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 365.948590][ T33] locks held by kworker/0:4/5757: 4, on CPU#0: [ 365.948606][ T33] #0: ffff88807b7f3548 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.948673][ T33] #1: ffffc90004d67c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.948756][ T33] #2: ffff8880372e5480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 365.948822][ T33] #3: ffff888027d9dc58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 365.948887][ T33] locks held by kworker/0:5/5758: 3, on CPU#0: [ 365.948903][ T33] #0: ffff88801c06ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.948964][ T33] #1: ffffc90004d77c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.949026][ T33] #2: ffffffff91276ea0 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 365.949085][ T33] locks held by kworker/1:6/5765: 4, last CPU#1: [ 365.949101][ T33] #0: ffff88805685f548 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.949168][ T33] #1: ffffc90004df7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.949251][ T33] #2: ffff88807d1c5480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 365.949317][ T33] #3: ffff88802fe10d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 365.949381][ T33] locks held by kworker/0:6/5766: 3, last CPU#0: [ 365.949397][ T33] #0: ffff888056847d48 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.949472][ T33] #1: ffffc90004e07c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.949556][ T33] #2: ffff888076481480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x214/0xbf0 [ 365.949622][ T33] locks held by kworker/1:7/5770: 4, on CPU#1: [ 365.949638][ T33] #0: ffff88807f6c6948 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.949705][ T33] #1: ffffc90004e37c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.949787][ T33] #2: ffff88807676d480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 365.949852][ T33] #3: ffff88802fe11700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 365.949917][ T33] locks held by kworker/u8:11/6562: 4, on CPU#0: [ 365.949933][ T33] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.949995][ T33] #1: ffffc9000df57c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.950057][ T33] #2: ffff888055070800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 365.950244][ T33] #3: ffffffff8fd60328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x388/0x760 [ 365.950312][ T33] locks held by kworker/u8:12/6563: 4, last CPU#0: [ 365.950328][ T33] #0: ffff888037474948 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.950395][ T33] #1: ffffc9000ed17c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.950466][ T33] #2: ffff888076481480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 365.950531][ T33] #3: ffff88802fe12ad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 365.950599][ T33] locks held by kworker/u8:14/8692: 2, last CPU#0: [ 365.950616][ T33] #0: ffff88807d8df948 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.950678][ T33] #1: ffffc90005b0fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.950741][ T33] locks held by kworker/u8:15/8693: 6, last CPU#1: [ 365.950757][ T33] #0: ffff8880348aa148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.950819][ T33] #1: ffffc9001b597c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.950882][ T33] #2: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 365.950945][ T33] #3: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 365.965336][ T33] #4: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 365.965481][ T33] #5: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 365.965544][ T33] locks held by kworker/u8:17/8695: 3, on CPU#0: [ 365.965560][ T33] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.965622][ T33] #1: ffffc9000cf47c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.965682][ T33] #2: ffffffff91276ea0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 365.965738][ T33] locks held by kworker/u8:18/8697: 4, last CPU#0: [ 365.965754][ T33] #0: ffff88807d394148 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.965819][ T33] #1: ffffc9000740fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.965880][ T33] #2: ffff888076769480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 365.965943][ T33] #3: ffff888027d9e640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 365.966006][ T33] locks held by kworker/u8:19/8698: 3, last CPU#0: [ 365.966021][ T33] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.966100][ T33] #1: ffffc9001b847c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.966164][ T33] #2: ffff888033d99258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 365.966233][ T33] locks held by kworker/u8:20/8701: 2, last CPU#0: [ 365.966249][ T33] #0: ffff88801c0ab948 ((wq_completion)events_dfl_long){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.966312][ T33] #1: ffffc9001b9a7c40 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.966376][ T33] locks held by kworker/u8:21/8702: 3, last CPU#0: [ 365.966392][ T33] #0: ffff888029e22948 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.966469][ T33] #1: ffffc9000b6d7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.966533][ T33] #2: ffff888027d9acb0 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x3e/0x1a0 [ 365.966593][ T33] locks held by kworker/u8:22/8704: 5, last CPU#0: [ 365.966609][ T33] #0: ffff88807edd9148 ((wq_completion)krds_cp_wq#9/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.966671][ T33] #1: ffffc9000b6b7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.966733][ T33] #2: ffff888068949280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 365.966843][ T33] #3: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 365.966903][ T33] #4: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 365.966964][ T33] locks held by kworker/u8:23/8705: 4, last CPU#0: [ 365.966981][ T33] #0: ffff88807d393948 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.967048][ T33] #1: ffffc9000b6a7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.967112][ T33] #2: ffff88807677d480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 365.967176][ T33] #3: ffff88807edf5c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 365.967242][ T33] locks held by kworker/u8:24/10259: 4, last CPU#0: [ 365.967258][ T33] #0: ffff888037474148 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.967326][ T33] #1: ffffc90007c7fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.967390][ T33] #2: ffff8880372e5480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 365.967461][ T33] #3: ffff888027d9d270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 365.967526][ T33] locks held by kworker/u8:25/10260: 3, on CPU#0: [ 365.967542][ T33] #0: ffff88801c17b948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.967604][ T33] #1: ffffc900080b7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.967667][ T33] #2: ffffffff91276ea0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 365.967722][ T33] locks held by kworker/u8:26/10261: 4, last CPU#0: [ 365.967738][ T33] #0: ffff888037476148 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.967800][ T33] #1: ffffc9000df7fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.967863][ T33] #2: ffff888036971480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 365.967928][ T33] #3: ffff88802fe14888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 365.967994][ T33] locks held by kworker/u8:27/10262: 3, last CPU#0: [ 365.968010][ T33] #0: ffff888037475148 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.968077][ T33] #1: ffffc9000df6fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.968141][ T33] #2: ffff88802fe13698 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x3e/0x1a0 [ 365.968204][ T33] locks held by kworker/1:8/11385: 2, last CPU#1: [ 365.968220][ T33] #0: ffff88805685f148 ((wq_completion)wg-crypt-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.968288][ T33] #1: ffffc90006e27c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.968380][ T33] locks held by kworker/1:9/11386: 4, on CPU#1: [ 365.968396][ T33] #0: ffff888056847d48 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.968469][ T33] #1: ffffc90006d37c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 365.968549][ T33] #2: ffff888076481480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 365.968612][ T33] #3: ffff88802fe12ad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 365.968675][ T33] locks held by syz.0.1535/11593: 2, last CPU#0: [ 365.968691][ T33] #0: ffff88807f799bc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 365.968745][ T33] #1: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 365.968798][ T33] locks held by syz.3.1536/11595: 2, on CPU#0: [ 365.968814][ T33] #0: ffffffff91276ea0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 365.968894][ T33] #1: ffffffff8fd60328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x388/0x760 [ 365.968958][ T33] locks held by syz.1.1541/11634: 2, on CPU#0: [ 365.968974][ T33] #0: ffff888049b45c88 (&uprobe->register_rwsem){+.+.}-{4:4}, at: uprobe_unregister_nosync+0x2f/0x1b0 [ 365.969050][ T33] #1: ffffffff8fe33fd0 (dup_mmap_sem){++++}-{0:0}, at: register_for_each_vma+0x31/0xc80 [ 365.969102][ T33] locks held by dhcpcd/11644: 3, last CPU#0: [ 365.969117][ T33] #0: ffff888053e42260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: sk_setsockopt+0xe6c/0x2fe0 [ 365.969244][ T33] #1: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 365.969321][ T33] #2: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: is_module_text_address+0x1d/0x1e0 [ 365.969386][ T33] locks held by dhcpcd/11646: 1, on CPU#0: [ 365.969403][ T33] #0: ffff8880555c4180 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 368.331352][ T33] [ 368.331364][ T33] ============================================= [ 368.331364][ T33] [ 368.331395][ T33] NMI backtrace for cpu 0 [ 368.331483][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 368.331523][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 368.331544][ T33] Call Trace: [ 368.331556][ T33] [ 368.331571][ T33] dump_stack_lvl+0xe8/0x150 [ 368.331624][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 368.331695][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 368.331731][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 368.331767][ T33] sys_info+0x135/0x170 [ 368.331819][ T33] watchdog+0xfd2/0x1030 [ 368.331870][ T33] ? watchdog+0x1c7/0x1030 [ 368.331905][ T33] kthread+0x38b/0x480 [ 368.331928][ T33] ? __pfx_watchdog+0x10/0x10 [ 368.331951][ T33] ? __pfx_kthread+0x10/0x10 [ 368.331974][ T33] ret_from_fork+0x514/0xb70 [ 368.332001][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 368.332024][ T33] ? __switch_to+0xc78/0x1410 [ 368.332058][ T33] ? __pfx_kthread+0x10/0x10 [ 368.332082][ T33] ret_from_fork_asm+0x1a/0x30 [ 368.332130][ T33] [ 368.332139][ T33] Sending NMI from CPU 0 to CPUs 1: [ 368.332183][ C1] NMI backtrace for cpu 1 [ 368.332198][ C1] CPU: 1 UID: 0 PID: 146 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 368.332219][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 368.332231][ C1] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 368.332254][ C1] RIP: 0010:lock_release+0x270/0x3c0 [ 368.332277][ C1] Code: 89 f6 48 8b 54 24 18 e8 6e 31 00 00 48 8b 5c 24 08 48 c7 c7 8c ff 70 8e e8 bd c7 50 0a b8 ff ff ff ff 65 0f c1 05 48 ea f7 12 <83> f8 01 75 2e 9c 58 a9 00 02 00 00 75 42 f7 c3 00 02 00 00 75 47 [ 368.332294][ C1] RSP: 0018:ffffc90000a07ab8 EFLAGS: 00000057 [ 368.332309][ C1] RAX: 0000000000000001 RBX: 0000000000000206 RCX: 8000000000000101 [ 368.332321][ C1] RDX: ffffc90000a07c01 RSI: ffffffff8e70ff8c RDI: ffffffff8c6e1780 [ 368.332335][ C1] RBP: ffff888021712bb8 R08: ffffc90000a08890 R09: 0000000000000000 [ 368.332348][ C1] R10: ffffc90000a07c18 R11: fffff52000140f85 R12: 0000000000000005 [ 368.332361][ C1] R13: 0000000000000005 R14: ffffffff8fd59ca0 R15: ffff888021711f40 [ 368.332375][ C1] FS: 0000000000000000(0000) GS:ffff888123b6b000(0000) knlGS:0000000000000000 [ 368.332390][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.332402][ C1] CR2: 00007f1094bf4158 CR3: 000000007f8fc000 CR4: 00000000003526f0 [ 368.332419][ C1] Call Trace: [ 368.332426][ C1] [ 368.332434][ C1] ? unwind_next_frame+0x8f/0x2550 [ 368.332460][ C1] ? unwind_next_frame+0x8f/0x2550 [ 368.332484][ C1] unwind_next_frame+0x1baa/0x2550 [ 368.332510][ C1] ? br_nf_pre_routing_ipv6+0x382/0x6f0 [ 368.332584][ C1] ? unwind_next_frame+0x8f/0x2550 [ 368.332609][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 368.332639][ C1] arch_stack_walk+0x11b/0x150 [ 368.332664][ C1] ? br_handle_frame+0x1329/0x1600 [ 368.332723][ C1] stack_trace_save+0xa9/0x100 [ 368.332743][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 368.332767][ C1] ? __lock_acquire+0x747/0x2de0 [ 368.332789][ C1] kasan_save_track+0x3e/0x80 [ 368.332820][ C1] ? kasan_save_track+0x3e/0x80 [ 368.332842][ C1] ? kasan_save_free_info+0x40/0x50 [ 368.332862][ C1] ? __kasan_slab_free+0x5c/0x80 [ 368.332886][ C1] ? kmem_cache_free+0x182/0x650 [ 368.332910][ C1] ? ip6_mc_input+0x878/0xc80 [ 368.332939][ C1] ? ip_sabotage_in+0x1e1/0x270 [ 368.332994][ C1] ? nf_hook_slow+0xc5/0x220 [ 368.333086][ C1] ? NF_HOOK+0x21f/0x3c0 [ 368.333113][ C1] ? netif_receive_skb+0x278/0xbf0 [ 368.333169][ C1] ? NF_HOOK+0xa4/0x3a0 [ 368.333199][ C1] ? br_handle_frame_finish+0x1219/0x1ae0 [ 368.333231][ C1] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 368.333262][ C1] ? br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 368.333284][ C1] ? br_nf_pre_routing_ipv6+0x382/0x6f0 [ 368.333336][ C1] ? ip6_mc_input+0x878/0xc80 [ 368.333364][ C1] kasan_save_free_info+0x40/0x50 [ 368.333388][ C1] __kasan_slab_free+0x5c/0x80 [ 368.333420][ C1] kmem_cache_free+0x182/0x650 [ 368.333454][ C1] ip6_mc_input+0x878/0xc80 [ 368.333488][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 368.333522][ C1] ? ip6_rcv_finish+0x265/0x280 [ 368.333551][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 368.333578][ C1] ip_sabotage_in+0x1e1/0x270 [ 368.333611][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 368.333654][ C1] nf_hook_slow+0xc5/0x220 [ 368.333691][ C1] NF_HOOK+0x21f/0x3c0 [ 368.333720][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 368.333748][ C1] ? NF_HOOK+0x9e/0x3c0 [ 368.333774][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 368.333800][ C1] ? ip6_rcv_core+0xa1/0x1870 [ 368.333830][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 368.333863][ C1] ? netif_receive_skb+0x102/0xbf0 [ 368.333891][ C1] netif_receive_skb+0x278/0xbf0 [ 368.333919][ C1] ? lock_acquire+0x115/0x350 [ 368.333944][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 368.333975][ C1] ? br_netif_receive_skb+0x126/0x190 [ 368.334011][ C1] NF_HOOK+0xa4/0x3a0 [ 368.334041][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 368.334074][ C1] ? NF_HOOK+0xfa/0x3a0 [ 368.334104][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 368.334133][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 368.334164][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 368.334197][ C1] ? br_handle_vlan+0x60/0x580 [ 368.334256][ C1] ? br_pass_frame_up+0x277/0x420 [ 368.334291][ C1] br_handle_frame_finish+0x1219/0x1ae0 [ 368.334333][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 368.334368][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 368.334449][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 368.334475][ C1] ? nf_hook_slow+0x176/0x220 [ 368.334509][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 368.334542][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 368.334575][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 368.334662][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 368.334697][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 368.334731][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 368.334762][ C1] ? lock_acquire+0x115/0x350 [ 368.334789][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 368.334813][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 368.334850][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 368.334874][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 368.334896][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 368.334921][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 368.334943][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 368.334982][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 368.335015][ C1] br_handle_frame+0x1329/0x1600 [ 368.335056][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 368.335091][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 368.335123][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 368.335152][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 368.335178][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 368.335209][ C1] __netif_receive_skb_core+0x989/0x30c0 [ 368.335253][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 368.335282][ C1] ? ip6_rcv_finish+0x265/0x280 [ 368.335312][ C1] ? NF_HOOK+0x336/0x3c0 [ 368.335354][ C1] ? process_backlog+0x3de/0x18b0 [ 368.335384][ C1] ? process_backlog+0x3de/0x18b0 [ 368.335415][ C1] process_backlog+0x727/0x18b0 [ 368.335449][ C1] ? process_backlog+0x3de/0x18b0 [ 368.335495][ C1] __napi_poll+0xaa/0x330 [ 368.335544][ C1] net_rx_action+0x61d/0xf50 [ 368.335584][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 368.335644][ C1] handle_softirqs+0x265/0x8d0 [ 368.335681][ C1] ? wg_timers_any_authenticated_packet_traversal+0x82/0x2f0 [ 368.335719][ C1] do_softirq+0x77/0xd0 [ 368.335746][ C1] [ 368.335753][ C1] [ 368.335762][ C1] __local_bh_enable_ip+0x100/0x140 [ 368.335790][ C1] wg_packet_handshake_send_worker+0x1b2/0x370 [ 368.335815][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 368.335848][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 368.335912][ C1] ? rcu_is_watching+0x16/0xb0 [ 368.335944][ C1] ? process_scheduled_works+0x97a/0x1630 [ 368.335975][ C1] process_scheduled_works+0xc3d/0x1630 [ 368.336030][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 368.336066][ C1] ? assign_work+0x3cf/0x5d0 [ 368.336098][ C1] worker_thread+0xa47/0xfb0 [ 368.336149][ C1] kthread+0x38b/0x480 [ 368.336172][ C1] ? __pfx_worker_thread+0x10/0x10 [ 368.336202][ C1] ? __pfx_kthread+0x10/0x10 [ 368.336225][ C1] ret_from_fork+0x514/0xb70 [ 368.336251][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 368.336274][ C1] ? __switch_to+0xc78/0x1410 [ 368.336309][ C1] ? __pfx_kthread+0x10/0x10 [ 368.336333][ C1] ret_from_fork_asm+0x1a/0x30 [ 368.336367][ C1] [ 368.346519][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 372.071943][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 372.081097][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 372.091192][ T33] Call Trace: [ 372.094499][ T33] [ 372.097457][ T33] vpanic+0x56d/0xa60 [ 372.101484][ T33] ? __pfx___schedule+0x10/0x10 [ 372.106389][ T33] ? __pfx_vpanic+0x10/0x10 [ 372.110955][ T33] panic+0xc5/0xd0 [ 372.114713][ T33] ? __pfx_panic+0x10/0x10 [ 372.119197][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 372.124709][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 372.130122][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 372.136327][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 372.142539][ T33] watchdog+0x102b/0x1030 [ 372.146924][ T33] ? watchdog+0x1c7/0x1030 [ 372.151389][ T33] kthread+0x38b/0x480 [ 372.155514][ T33] ? __pfx_watchdog+0x10/0x10 [ 372.160227][ T33] ? __pfx_kthread+0x10/0x10 [ 372.164859][ T33] ret_from_fork+0x514/0xb70 [ 372.169490][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 372.174636][ T33] ? __switch_to+0xc78/0x1410 [ 372.179361][ T33] ? __pfx_kthread+0x10/0x10 [ 372.183992][ T33] ret_from_fork_asm+0x1a/0x30 [ 372.188812][ T33] [ 372.192539][ T33] Kernel Offset: disabled [ 372.196928][ T33] Rebooting in 86400 seconds..