last executing test programs: 1m31.73046686s ago: executing program 3 (id=1708): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="a86d56d99648ac2569763069bf1b02c57c630174680bfed5d9558d5f3a03f638ffa3a34c13363da7525b70495c35f52665f7f51dc110789ae17f54578ca8c70c701d926b24409847722068c6fa058cc9572461812d210b04341d20aacbbf97822164c7bb8ef380f2eeb515f1ac49b326e5403040b60b031ef0c64cb598b797207af0a76bae854a6ecb0fd846e7cd9d5fd0561cf0b1d009b82050403e3c", @ANYRESHEX=r0, @ANYRES32=r0], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, &(0x7f0000000200)="7f", 0x0}, 0x50) 1m31.4535374s ago: executing program 3 (id=1712): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x450, 0xffffffff, 0xffffffff, 0x450, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @empty, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3}}, [0x0, 0x0, 0xffffff00], [0xff, 0x0, 0x0, 0xffffff00], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x380, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'gre0\x00', {0x3, 0x0, 0x41, 0xd2c, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x5, 'system_u:object_r:getty_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x580) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711067000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) 1m31.193421086s ago: executing program 3 (id=1717): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x3, 0x6}, 0xc) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000200)="ab", 0x1, 0x40000, &(0x7f0000000240)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)='.', 0x1}], 0x1, 0x0, 0x0, 0x4048800}, 0x10) r3 = socket(0x1d, 0x2, 0x6) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000340), 0x4) sendmsg$kcm(r4, &(0x7f0000000380)={&(0x7f00000003c0)=@qipcrtr={0x2a, 0x4, 0x2}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000480)="27031c00160016000000001106afacf706e1054000006558", 0x18}, {&(0x7f00000004c0)="22ea7e2bb1b280b1718a70a8f814e3ba81f4d19edcce18b75bf5034bb80875257d68b199f247eac81ab52f03e698103d9d05000000000000007017285d0e1b1dabc9ec2d341f383840698a3fb95e9b1aaf2bb8cb0191e7e392db050fa06124f73d1c36daaca9921f207f88516871989276bad26884d4208acc499b17a4d62f2bbb14db3e0007478df45cff3aa28b8e92621be927ca29819dee3285effdab982e387002c3d38fb39d0c01de235b9f10e0ca40f84bf2d57e92fff34cc8c27d81acd4665c91d4d8cb8b843e996c598047b5c3e3572b3a3012ad63fd354f546f", 0xde}], 0x2}, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1d, './file0\x00'}, 0x6e) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 1m30.33690868s ago: executing program 0 (id=1728): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000240)='%ps \x00'}, 0x20) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000300)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, 'veth1_to_bond\x00'}}, 0x1e) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSMRU(r2, 0x40047452, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0x1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000a00)=[{&(0x7f0000000a40)="b77375e5dc1d74becd2fcc787b022dde75b63baa3a1b0623fb995e7f920ae8cf8a62f0f5225b223c6909a502bd4ec883fc49a915457b75ce789aa2cc9005fcebea2ef8b9fb2f79a284ca83e4ea6bd9f60e3d3572bcad4cced362aafec924f8a4d7d6cbb6dd8f0aa3c1ff1b980b4959d85a2924c48690d6b7f7cb1ebf03a2504dfe421bdf2d34e49d508865146527b64c77b123973248a81b658a2a4009fefee24bdc659901db56a08c264f0975db868e63", 0xb1}, {&(0x7f0000000b00)="71863ebba534e060bd39e4f6692c84c08a63b64ac56c694ef54a47d3ba2f226be8861c48495c1721de513739e949ca4456c704767db81fa6f2c03b1db7df459a57e6b83e6f4d5f5dd11caaccff87143af4f5fcec8ee13f2fe93697c1a334323edb74a423b352b58208ef5894173ed8022b7b739b73e7f7f3a65ba5e3ef3a0b90d42146e1eb9b9dba0e1e3c106fd0f5c84cf17ef1c8e0fa6e54d8df63ae341b3c83abbe70423084a847d835720886ec3645dcc240b6577a1a7d828b1fc576c942286bd05974db6e7182fca8fc26449e3d370083dd07e4d6bde6c732e9762196e2ca29aa694ffae640be0979e7b5da43606e573a325097f544683d302e3c1462c40be3725d603d7f0bdfb8c1fede018a4007cd89bfbc1944df174ff8c72245403ce1b8523cd620fbdc64682c5a1b5c3bad73e033d09bb0de8065bbac983b3dbaad29c0ca9eac69b242f164552b8f03a1462282035ff2ced1c94c5e7335e7cbb8d3fe489490d94b5b67a02eb0a5ed02db239a24414442ec30b088d405b1aff4cfe784ec9beb6d9155769442b6cf197198e7c0426117b0714b7a5d36908ef899c1453b2c2a926e2af59ddbaf8996d7231af75af8698ca00ea800ab75b6aa29443126514c00beda15d70c2465521582b66cec9d4ba839621ade2bbf4b80a546cf59e3b9adcffb77aab166c3e2b21d176fda911144cb2e34d2ded0ab98ff8724eb4d000dbb250e94fa95be6961e2080407ca3f541687335c7bd68b5439901b2802c611d1de85808adad84882679df6093e246d70c656a2c53b3461031bb4a40b3ef36ef51bfc995bc5f1e87e649ef774a0d6bb897f6056c5fc73281d78f2b830624e12cc613ea894d22e8e023155dc616b8c4237b4925afd439a51b2e8026ad40f6ec4aab66d8ba0590d0f02bf0deffa7a3925ae896318a38c374736cf606daf5f0bf0ce7981d0650fce1c9608028f160cd4b63a3718b974ad5aded472702ccb0962f56cfe1b1cdf5591b1ef040acee901465ca2c5e773a6d1097d68ca4941508d47410de42d93d5ffd4ec49fc5bef753b97a6d5379f97db7219063ea246605132ab5e3cd0b40d5eb87b26a9e00b080e112192ddcffbdc660f151241f481a87ece4af3ab246ffb0fcbed5887fd36b760c640fd1154bb8c656098bf0fb55014179f20ef971a2fa59dab7cf36a7d02697f4e9e61c5304e4c30500a5a26ae93da0bd665e29ffbddc094440752e0df77d0babba355e05520fbc1d8b245defaf87721a2a76efb89f1687af81ffeb9df421dc70fbde1a4dd87083c7ed973caae57492cb42762e57827108156ce29ab8cfaef7150a62e73d1d8739e36d91b7b0a3de95bcee0d2fecfc8f204d015fa0d84185d2fa72dfc1aae435e0910061986f5b5b9c2b9e8cb483db15405fb489dbf1e9a62b2e87407846efbde0520793222da8b53893780d3d2ffc90ec1d10ff4b5c8391d846b2a0656a65d541c07b8279c5f8b344c3f3873dedd8dd5f23d1b39789409035eebbae83e535ed116edf6ada407a27d86b9aaf9abe050333716c75ba2c1d26883f2313233634863787c7c288b69052754cc4eab1deb3fe247c60f73bc09b698e2d616b9f8262f3a3c6ad05c8c71fb9fd380cc743465d6aad69a2034ad7bf101b546101734512cb6a4ae5a231a6e834e5cba7eb2fda176e2ce2d6758d868a6ccea036fb1e246cfed0cf47eeca19e452b52c062728fb17a6d46ccc5db4cd0e79f54e81117879129c5359e21c7e310efec6d9d6bd7b38739e3b8171f08d993e4af33fbdf9754ac5555e13c427e6c1f8c49c2bed94381053e60eed33d103a256aa1605dedbb0beab93dbb1cb0e46725f50427e660960572c23caaadb9a82ba62d7535939bda39c65033a7fbba8403c1d55a90a62cc7cc6ce733d1eada40a9fff718b81e607f304a782ca5501c05fde822239a2f506e03e771a71cf3a2250996721338765f2b7b19c8a5f15cd950673db135662cc9c1dd68213e0529c35759c3285b65147eddc8eff23c0b6e592fe9fe8f09a1d636a83164f7c96220a2c4a01cd7029cfb1c44e34beda733d8878e066b42b2a34fe60facc007643214475fcb196fffe6f51643c8afad3b45f912a3d645470942fc560ca078f9a3bd559ddba6262db6fc2a7f10b53b8f7562918aeab631dd11635b5ec4107cbdd7abb066ed0a670ffd9968ec4c145a79dd97c7efb81b780ec56f4030eb8ad3ddbd0dd117be697f8324ab55e37a4448d0cc4cb0c73f9de05ff02e1e5fe417ea1b552eef9879a29d24884305adb036c74aec534b1dfc1b3453804f39f2327ffa5839fdb544d2ce3606a68fc435a714603c8dafd51a3e8594cabe5370e93e0908eebae20d9651e571401020211408153b39382bfcd6675ffc40af15100e29be18222953d2c9fbf1bc6613fbd208690b7ac86f45df492d2ea5442ccfeba7392f222e356d434b4397bd032488b908de35dcfa44ce0270d4d0c6b84380b2694aa89f5a83d6662ec01ec746fd5052138b5ecd2f9e521878b7492a748a707add7db12b1e5da2c9ea63525dfdc714d30c410be069c9cc2a9c088c4f9361befcdb7bfe8ec7bfa95ca23c88021863ad8157b87cb498125c2f99face586bf0c2162c96017d2b88e36bb8a0d2819093ec0db6b4916d3ffc92706d05992ee7e7461c482eb5742838c0905c572285d5b3de3df5fd1d38371456ae99acf7c33b2d8cef5b3a19d79ce63b687d46e5b20a0052ef4a23045a3c96b59d919a13bbcbd1b64de9e174fc6f0b22053d80675715f9ce758f3e743644c87970d8c7e413df01424c410c517d22e563e80552c4a0b97da32e172252f7c720924693b38149f36a51517be646571a006d925aca98f9211e57ff9032399adc65f12f9617bfaed0e8d386fb45f0559692bff4dc19d4212c11858dbfc0c89fd351362a58f1ce950fa116fbe2b90213449cde14896721fb4f7957d43fa42aabca0db8bc007981d00c5a60048ef83076585667fa0a3f20fb0f681b4226e1d291f38d1a6e566fd1b093f3ee4bd2c7304e44eaacf95e786da82c805033695d882e51c0ffaf4977d0304a45f30f287fd0faf645e66d6c022b7ae8e682706a9f83eaa3e89702a71a2645a3381fb1d4620d20af6b854e16343838430fd764fe1fa9bee9c2563f0258b5bad76532c0a80e39cd6f427dbe42a6fdeab96ec577f4556c8e0ad1ba7d268ae78f5f0dee8c6c212b41b1aa2e29987925c25a148c65599122808f46fc44f9bac7d8a8372e65294e4b5cc32f38bb2b87d425c1ccbbdcf006c0b8c5db7108220abe194dfcfd2cc6eee3f7d44094816ef0aed2ba975b1fd91895fc57139e4fe9592dda3ed02cc11ee743852fa073e77d1f40c7cd5cad738fecc56015aa6ee0b25469958680e2f8bfd70df0ef965704d1a8cdcf77a8c7fb8cdda79a1811144801ebc8000aea7c2bae67ec50eefb1da2ebd17ae894f8c74bc7a534680d53757f673a5b976babfdaf076c1daf73875450a37a9cb6d88f46d56665cf4c1d42dcf354b0621f1f8a2b1f93b494d1f6a953b39724dd8b6eb6a227bec64770e2c6f0176a39693818465e21b20d2c0875463937c40c3df190b1fc39b0717b67d76747bfc3ab34f19411617546cd8e918cb14c39c46011dcd177adbea49d8490243d9f10820f9bb3260419fce84283e29d28c3765ae7ab7896f02a144e19e6ab1866872835f039a13d0be8d706206fb0fcc4a5f81981534ff996cfbcf457821fea20d009ff3ccd11b0a1e3a8b97f425cf2d49f4af9877596a60b0da2b98876e04225c0b0f6a03edc718ea3aab58ff0ec36f6269eb023e7187962bebccfd913b65da7b81d1b6da18743f4fc5543f71c8cbe754d7fbe88366aff86ed2391d9fe103c8ef5aac0752a2faac7da189c96b41437ca3b3a6cc1588fa06fbd947d1ce3e692f5589c2a685528d061c5cba78ec13db6c8335d1a96b4521f9bb7c9c136f8cff00c49e051ea51e129af63d09bbd922bd25db55ef4fce377006b755f95f08b7754e2f14e917a1be841043755ccdd6bf4d3a2fce2b680fa5422ec7c0d5155d08eb358a6ea0142770a85847d9735795b985546901fa15ab294b5c971426828a1fef6f9099fb2e05afb8728fbf80a3fb3464f23dcfc91d3628fdd6b7ed3af7938073863ddc255b8a0c393a438d4909c7f4b21d7a72fa0a473f973ccad7cc34a8b4800d54510f8ddfd26e8a623dca3135e4257d08e363c5b356fe3f0688c41095831372d5500d4281ebceae27facfb9ecaeda79493c7538d45a1d772c267f64431cc254c123d2634c163791d9a6cfc696cd2e2af97446ea551ea2197ac8c70dbf7ce902b479b97752d1ffd1c4abe36dee56c57455cec5aeea12a706f85c9356a0aaf6dae50090f561c03022b8b09142ac18120a89689736f05899fe42cf61c134e4dbac4b9661b20b9129b810e2f1b7d5d46d4ed8f6af73f3307bc81bd2d09b1e132009d0654cbd64b46a5173fb80ff6b92db04232ce00c4bd2c7234e6a0968fcfd883ef335e0c2c868993f7686716325cd630fbda38aa003036b4bdb886ee774897b2a800dc1fda46b0045ca3b39d32fa880ca6ce5f924b2df7bcb76217342633496328da8d720a6de510c798220b84654a06d7784e8749bfc5c8f8843835727f0c13674589689169b6307b1d78f6e73168c24ceac3600d4c3bc538d96a450f1fca799acdb2b1102c94df1dedf0848c68b644deab0624cee02ca6eb40db9734ef22fa4def1d62851e4bf14a882260e97e4179a9e9bdcb68e6bc72bfc00825f71054777944c1f2c998d5eb64afd384dd510516ed21d3fcd073d8ad534bcf65144d4e531dcde15448205cb71f5258eb9bdcb48fb6fcfa50af4e4bb21a77d5a89b6d0e10a291c4481bacfe31aa8ab27d0184a37a7fd1eadf0681a9760f04b9bce7c1102ed6e6dc7a220bb6ba3255ee0049109ede42c8a236d26efc7a769e0cdc3e31f1821645813fec47b41fb8b06d57e86c826c3f246b60d59a4a518e9b479c438c9dade49acd06270c526900cc15d5b4bea1e3ba97e52edb8add83ddf8e0c2822f313e085ce3a05e3335e1e9157d7ea452779a08d10a0ee67f108548aa2ff9dcbe9fe399de7f2f428acb0f25973b7a612296b78e1442aaa727f6beb4b27e6792b6a48e8ce610f18dcb60da0d2cbc7292c9f3040fbeb36643b3b96d98f11faf7bace2305e89b9482af070f4f81181ad4a80a493b00a28d0f67290cc3de988c2f54a4962e0bf0b516db250773d238bff6a1c8eb6a62c04344da44ce25da0a6c6cc4f3e6733e6ed0b98191d2b843e2037192d96fdbd40dd1bad2ac738775f5e9fe27b103ce496937882181313ba2fad02956ce133b5e44545fd19bae9055846fd27c0f0729f9e3198e75e2e42b9f6b17af81abc99881c44ce375dc1102186ba8c1d4c704ae397b7bf748c8f3927919512bd0b3cd80c67ee2ece55efed44004aa3b1edb69f759644147bcc90d81d6ab5b35f26c4765be865c9ef0752c3935dccaefa6e36fefc177dd4135e5771db2ca86598fb79f1794f471d3ec89198b37871cc91", 0xf50}], 0x2) close(r4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b00)={&(0x7f0000001b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001b80)={r5, 0x20, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001c00)=r6, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001fc0)={0x18, 0x24, &(0x7f0000001c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @jmp={0x5, 0x0, 0xa, 0x9, 0x0, 0xffffffffffffffff, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @alu={0x7, 0x0, 0xb, 0x8, 0x5, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x6}, @ldst={0x3, 0x1, 0x1, 0x0, 0x9, 0x18, 0x10}, @cb_func={0x18, 0x5}]}, &(0x7f0000001d80)='GPL\x00', 0x552, 0xc9, &(0x7f0000001dc0)=""/201, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001ec0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001f00)={0x3, 0x6, 0x8, 0x5b}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001f40)=[r1, r0, r0, r1, r1], &(0x7f0000001f80)=[{0x2, 0x5, 0xc, 0x4}, {0x4, 0x1, 0xd, 0x3}], 0x10, 0xffffff96}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x20, 0x8, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3faa3ab8, 0x0, 0x0, 0x0, 0x5ce}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000880)='GPL\x00', 0x7, 0xd4, &(0x7f00000008c0)=""/212, 0x41100, 0x10, '\x00', 0x0, @fallback=0x34, r4, 0x8, &(0x7f0000001a80)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001ac0)={0x2, 0x10, 0x3, 0x7fff}, 0x10, r6, r7, 0x1, &(0x7f0000002080)=[r0, r1, r1, r1, r0, r1, r0, r0], &(0x7f00000020c0)=[{0x0, 0x1}], 0x10, 0xb0bcd2c}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f7ffffffb703000018000000b704000000000000850000000100000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@RTM_DELMDB={0x18, 0x55, 0x93d, 0x2, 0x25dfdbfc, {0x7, r13}}, 0x18}}, 0x4090) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x1, 0x0, r8, 0x0, '\x00', r13, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 1m30.104960919s ago: executing program 3 (id=1732): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) (async) 1m30.02986307s ago: executing program 0 (id=1734): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0e01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_pedit={0x30, 0x3, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0) 1m29.843235749s ago: executing program 3 (id=1737): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4c}, {0x80000006}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x8010}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x8, 0x0, 0x0, 0x1}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x48094) 1m29.721560587s ago: executing program 4 (id=1740): r0 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) bind$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) listen(r1, 0x2) socket$kcm(0xa, 0x3, 0x73) (async) r2 = socket$kcm(0xa, 0x3, 0x73) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x29, 0x37}], 0x10}, 0x0) shutdown(r0, 0x1) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = accept(r1, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000002240)='\x00', 0x1, 0x400440e9, 0x0, 0x0) 1m29.668483705s ago: executing program 0 (id=1741): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1400000013000100dffffffffffffff607"], 0x14}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000050025bd7000fadbdf2500000000", @ANYRES32=r3, @ANYBLOB="00000000010400000a0001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 1m29.604184314s ago: executing program 3 (id=1743): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="001178584c"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0xd, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000008f00000095"], &(0x7f0000000940)='GPL\x00', 0x9}, 0x94) setsockopt$inet_tcp_int(r0, 0x6, 0xd, &(0x7f0000000540), 0x4) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000640)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000680)={r3, r3, 0x7, 0x7, &(0x7f0000000740)="39593c897f0798", 0xb, 0x2, 0x18, 0x63aa, 0x56, 0x2, 0x5, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000780)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000580)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000a0000010000000000000000180200000400000000000000000000ffffb903000040000000b7040000ff0000008500000045000000950000000000000056a544c5e8014a18324cbd1f2a946d61d0a228e16d85852b4e07710a8dd41a817dd07acbac56a944408de632939bcbc8b56c93d32e97896c050d65cc"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r5, 0x0, 0x22, 0x0, &(0x7f0000000500)="001122334455001122334456080045000028000000004006f8ce0a0000010a000002", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x2c, r7, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x803}, 0xc0) r8 = socket$netlink(0x10, 0x3, 0xc) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f00000005c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000600)={0x0, 0x0}, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x4fa9, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB="000013f82e"], 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000140)='nv', 0x2) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 1m29.554122634s ago: executing program 4 (id=1745): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast1, @in=@empty, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x6}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) close(r1) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000240)=0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}]}}}]}, 0x3c}}, 0x0) 1m29.379303081s ago: executing program 2 (id=1746): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000800)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x8, 0x20, 0xffffffff, 0x1, 0x1, 0xfffffffe}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000900), 0x5, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980), &(0x7f00000009c0), 0x8, r2}, 0x38) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x9, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xe, 0x380000, 0x7fff, 0x400, 0x40, 0x1, 0x4}, 0x50) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1e000000000000006cae85d0da06e5c0c13faeb5cf290000000700000000000000482fd1901b69da25a09b79007c8dc20a19099e22e804f40b5b30d3f953c67153b92101b8a55a926b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r5, 0x0, &(0x7f00000005c0)=""/53}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_emit_ethernet(0x46, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000004e61bd619baabdb408000000040000000c0016"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x8084) 1m29.275098301s ago: executing program 0 (id=1747): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0xc6e9f000) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000080)=""/102, 0x66}, {&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000200)=""/228, 0xe4}], 0x3) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x6, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r2, 0x100000000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x503, 0x4, 0xffffffff, {}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_NET_NS_FD={0x8}]}, 0x30}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x503, 0x4, 0xffffffff, {}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_NET_NS_FD={0x8}]}, 0x30}}, 0x0) 1m29.271775721s ago: executing program 4 (id=1748): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000080)=0x1, 0x4) (async) readv(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/205, 0xcd}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000000200)=""/144, 0x90}, {&(0x7f00000002c0)=""/15, 0xf}, {&(0x7f00000003c0)=""/234, 0xea}, {&(0x7f00000004c0)=""/180, 0xb4}, {&(0x7f0000000580)=""/101, 0x65}], 0x7) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000006c0)={'syzkaller1\x00', 0x5001}) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) socket$packet(0x11, 0xa, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="03031b003000320006006300000000442fff00000000000000000000ffffac141419ff020000000000000000000000000001"], 0x76) (async) syz_emit_ethernet(0xf1, 0x0, &(0x7f0000000780)={0x0, 0x2, [0xc6c, 0xfdd, 0x853, 0xac]}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a00000000000061118400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 1m29.258019982s ago: executing program 0 (id=1749): r0 = socket(0x2c, 0x2, 0x81) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000001640)={&(0x7f00000001c0), 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x20, 0x0, 0x400, 0x70bd26, 0x7fffffff, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x13}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r5, 0x29, 0x1e, &(0x7f0000000140), 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="070000000400000004080000e000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000400"/28], 0x50) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f00000016c0)=ANY=[@ANYBLOB="180000000011780b5aed4926d3588da389fa6458", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r6, 0x20, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f00000005c0)=""/4096, 0x1000}}, 0x10) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x0, 0x4) (async) socket$igmp6(0xa, 0x3, 0x2) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000001680)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) write$bt_hci(r7, 0x0, 0x16) socket(0x10, 0x803, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r8, &(0x7f0000002cc0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r8, &(0x7f0000002d00)={0x1a, 0x302, 0x0, 0x9, 0x2, 0x91, @random="4c01f00a4bb3"}, 0x10) (async) connect$llc(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) (rerun: 64) bind$llc(r9, &(0x7f0000002d40)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) (async) close(r9) 1m29.04452989s ago: executing program 2 (id=1750): unshare(0x2040000) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_ENCODED_WRITE(r1, 0x40809440, &(0x7f00000007c0)={&(0x7f0000000740)=[{&(0x7f00000001c0)="02", 0x1}, {&(0x7f00000002c0)="3c2abf814562f940243d5159503917e7c7ec2707f1660a4c203cc2aa58151c20fa18f506b99b", 0x26}, {&(0x7f0000000300)="4bb29b60f1f0d75d50e28465c5fcaf2669f5e35d0f5a50463983091edbfa4df756f9e309ad6bd443e84a4d14210e0345e3573356cca126fc7beeaa47704046fb50306f8fcb8022781b72ac0a372d22d6c2b8836956e58ac28d02f2a49671818b4228e3b042e16e29b4248c920c5f1f6effa7583adda88789f627106863eed8adbdb0b2a2a730126231e9a0f8979c643cb381bba45d7edaa9afb0d0fd8353df9fd91d3dfe3622daead490e5ec35785692b9f7e815844c52592f", 0xb9}, {&(0x7f00000003c0)="657e3c57c108a791ace7d055d7f7a0db20db2cc5b661e55f705478f84fe4dd796084efe794e2438b7f2fa7b89dc62358639687f92d5dd5995d92e5a3d2ce83379b5c7a8018824efcdcce24b14ac1709d88fcf17b4c87308897a098531b5f737d5831716b78e5eea2223b673f0be4125d36c4e84e9927ef58a2981b50a5e1d521c896e12e3336412f477fd218bc08f1be80569164318956bcd21f96c714b71ca9905ec1b80b44f4b364b9fe35d256a9921859c3099efa031ede22e1ed6b3f5498d6466491a0dccd5544aa09b71f165f6e25a69a4bfea7c9aa535bbe629c3338b277baa28122958ebfff0457f4535edf883ef76a", 0xf3}, {&(0x7f00000004c0)="636e78e57ee49a65a9649f7beeba2ec5f781ebeea8192253ba6c57abd5248e8f33b2ff6d2b002f8765f2bc2b5959451f2325dc8d5edd33be371b711e4ff2df1773f7b4dbac7e2c36d83989e41fcef7701686aae5e9d77aba81fc2b69de051351ab88c45f6486632587f820d07bf8aa8427d71967fe2770e772bec12593e0347ae7581b497891ff8c29745776e826a0f377296f8a600877add23c2c15b61e", 0x9e}, {&(0x7f0000000580)="574b6779eb0dc2c28d371f0fdc16cce947adaa7de7aa981ce1a540852aadefa1040db50037b8dc75858c665019028204b089b366ca37b85375a6da8c47e8d33299f76ba685a6c95dcfaf6ca1ea7c6d37952a76d3dad5493d70e09990643aa5ffe4a58ac6e4f7450376fac083adda824ea550e60f330827f8b5c3beeaee6187ffd52973779f4133bb1e5a305893d5", 0x8e}, {&(0x7f0000000640)="e312d05de9d080fd8f20670cdb00c480a4b7360e8d04bcba6f51bd280f1d15a9198ec5800f12230eb2e076d8c6df869bd3fd3e193384ade67a67c09f0dbbe2577095b53b7e0400a8d44d95315a90e4972c925f4e0c4d61d242b00d28c378066787c201155822e58d0bdf701583758cd5bc542d33d6fbe46e99a795cfa13eda6a257019c4ad7e5f4b89299b5b64475581e845fe98471d16751316abfe0f9c92c44074f50b1cca39ab4975b5ea41f2daa649a4030cab0dda1c0b8808bf7e2a037919ca83628e9788de2640d0d374d22a09b5c13de791f1f2cecea1", 0xda}], 0x7, 0x7fff, 0x0, 0x0, 0xa, 0x7fffffffffffffff, 0x1}) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000000000000000000000000000000000000000000000000000000fc020000000000000000000000000000030006000000000002000000e0000001"], 0x80}}, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) 1m28.74422083s ago: executing program 2 (id=1751): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0e01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0) 1m28.61494683s ago: executing program 4 (id=1752): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x4076cbba9945d516, &(0x7f0000000380)={0x0, 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000440)=""/228, 0x2e, 0xe4, 0x1}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) getsockname$packet(r4, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r6, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r6}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xd6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r0, 0x1, 0x70bd25, 0x25dffbfc, {{0x12}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40c4840}, 0x24048044) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000010000003800018006000100e2fffff7080005"], 0x4c}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r8, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200048c0}, 0x480c0) 1m28.557971965s ago: executing program 2 (id=1753): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000240)={0x24, @long={0x3, 0xfffe, {0xaaaaaaaaaaaa0102}}}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f00000004c0)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x6, 0x0, 0x0, 0x574aca18db6b83aa, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={{0x14}, [], {0x14}}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000840)}, 0x9a) sendmsg$802154_dgram(r0, &(0x7f00000002c0)={&(0x7f0000000300)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x440480d0}, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) pread64(r1, &(0x7f00000015c0)=""/4109, 0x100d, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000008a0000009500"/32], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001040", 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "345f8cf949a01b515682f44cecac91ba"}, @md5sig={0x1d, 0x12, "d243471da14ff23d079da4ca814b7d7b"}]}}}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x50, &(0x7f0000000400)={0x10, 0x0}, 0x3c) ioctl$FICLONE(r3, 0x40049409, r1) 1m28.235158318s ago: executing program 2 (id=1755): getsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x2, @in={{0x2, 0x4e23, @loopback}}, 0x81}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={r0, 0x4594b5a7}, &(0x7f0000000140)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r1, 0x8}, 0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) ioctl$BTRFS_IOC_ENCODED_WRITE(r2, 0x40809440, &(0x7f00000003c0)={&(0x7f0000000380)=[{0xfffffffffffffffe}, {&(0x7f0000000200)="2eddaab486734837de14021ed8baf15a18682ddd16196384a9978ad3bf73a8c60b6c6b9b3c13c72bb8a790a562502b72cb771d566f6d3e501ce30c6c319a3b8dd49dc733a9a0e40c14a77227a63b4b6729871c05ed1c5463cd6704eb1048b5b9858d17c86d62d1bb57e5b88c32eb39a209e241fbdb438088ea23006d1419fc7f196715f210e536c5d98719cd7bb51a8a80d5fbcd1f12add176ced820d678f3cbbdc199586513bbb11bf7af0502e3522858677d02b7184eba3212c3491b72121b0c8cf27f18a1f05c", 0xc8}, {&(0x7f0000000300)="2d059205f1341dad81a8d23c83ab84990d689e518a41b7bc48b584c0d0173fc3afafeae92b0898f40087564497d9f9be6fffdd3643c050dc301e6709265e53931d25de16440e810ed539bd5d70d8a970cbd0ecd4fa73aa63b5afd0603f8d784c520d0ae19582ba75f6cde13818b9406ede519124ff9cb787ee14ab02f4c0", 0x7e}], 0x3, 0x8fd1, 0x0, 0x2946, 0x0, 0x7fffffffffffffff, 0x0, 0x8}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_ifreq(r2, 0x8924, &(0x7f0000000480)={'batadv0\x00', @ifru_flags=0x400}) r4 = socket(0x10, 0x5, 0x3) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000004c0)={r2}) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f0000000540)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e22, @local}, 0xc0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)='rose0\x00', 0x5, 0xffffffffffffffff, 0x3}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000600), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xac, r7, 0x428, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6015c5dc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4db234bf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x459a8e07}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42311200}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21ed2bb9}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2cc0dfad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb45}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1951}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaf0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x834e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6825669d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xba8a}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x20000090) connect$inet6(r4, &(0x7f0000000780)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000800)={'vcan0\x00'}) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r2, 0x84, 0x83, &(0x7f0000000840)={r0, 0x1}, &(0x7f0000000880)=0x8) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) getsockopt$inet_sctp_SCTP_ECN_SUPPORTED(r4, 0x84, 0x82, &(0x7f00000008c0)={r0, 0x8}, &(0x7f0000000900)=0x8) setsockopt$inet6_tcp_int(r4, 0x6, 0x7, &(0x7f0000000940)=0x8a4b, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet6(r2, &(0x7f0000000ac0)={&(0x7f0000000980)={0xa, 0x4e24, 0xf, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, &(0x7f0000000a80)=[{&(0x7f00000009c0)="e03cb20d5b6e9c5f0205e56df2f9b857f759f21d4ce5117f4a3de4955ecf2924acaa", 0x22}, {&(0x7f0000000a00)="ec6de872b9b9140410aba97199764925fdc663a92a8d1bcf831960631db3920f9ff1a7e00aaee9c01f49753b80eed743e1729cab88803e97762fee84883384e13602df11ea6bbcea", 0x48}], 0x2}, 0x48000) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000b00)=@assoc_value={r8, 0x6}, 0x8) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000bc0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000c00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r9, &(0x7f0000000dc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0xc0, r10, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_KEY={0x74, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1c19be06dbef95a263f9fd0b0db6e01d"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "0f9c8ea5f6013eefaf27fe50a2c74c2ee2dfcc58ef10732fbd126ee90088a660"}, @NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffb}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xd}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xa844}]}]}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 1m28.105015447s ago: executing program 4 (id=1756): r0 = socket$igmp6(0xa, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000035c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003640)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000003680)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000024}, 0x4000800) 1m27.996891523s ago: executing program 1 (id=1757): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a0007"], 0x5c}}, 0x0) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x11, r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) pipe(&(0x7f0000000300)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x25a5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000840)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000000)=0x2, 0x4) listen(r2, 0x0) mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x4188031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a0007"], 0x5c}}, 0x0) (async) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x11, r0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) pipe(&(0x7f0000000300)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) (async) splice(r4, 0x0, r5, 0x0, 0x25a5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000840)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000000)=0x2, 0x4) (async) listen(r2, 0x0) (async) mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x4188031, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) 1m26.411517201s ago: executing program 0 (id=1758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 1m26.410481911s ago: executing program 4 (id=1759): sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000010000000000000000007110b500000000009500000000000000a282cb8ecd0d254d03d44df656abed5011c51ed827438a464f0b0000ea8d4765d847ed7b45e44c2cf1d547595d12d986d5ad7f6f3399a109b3b8e3b287f14844d9231b179588f77bff8932de820630bb62e5f3d2293b3c1745ff4ef48ca55b608a4b303a0ea7e467acf15d3aa394b4d0a007ad46963de72c59651f5e4a34b44f95c9beacd193eac4640ecff86c3267b405d516b4293d20df01c27d9c081a8f04b101e57029ded08052df2ad551884d14b15a99cce8e2fa81f83a"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xffff, 0xa}, {0x1, 0x3}}}, 0x24}}, 0x40080) r3 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2d}]}, 0x0}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r5, 0x10, 0xa46, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5b2, 0x60}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x4042015) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x718}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7ff}, {}, {}, {0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 1m15.666424292s ago: executing program 2 (id=1760): r0 = socket(0x400000000010, 0x3, 0x0) (async) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x541b, &(0x7f0000000300)) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r4, 0x111, 0x3, 0x1, 0x4) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000000c0), 0x40000000000009f, 0x0) (async) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newlinkprop={0x34, 0x6c, 0x8, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x0, 0x2520}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffffb, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 1m13.648371668s ago: executing program 1 (id=1761): sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001940)={&(0x7f0000000140)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x30}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x35}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}]}, 0x44}}, 0x2400c010) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000001900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20402010}, 0xc, &(0x7f00000018c0)={&(0x7f0000000380)={0x1508, 0x0, 0x5, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [{{0x254, 0x1, {{0x0, 0x8c}, 0x1, 0x6, 0x6, 0x5, 0x7, 'syz1\x00', "be510907faa37859b0a814577f810494c6244ea0436d476eaa47904f0b227787", "c60ed7bd9ab52c9cc2737f64cd97ed9425abe153c4350088eea4255976d3d462", [{0x800, 0x4, {0x1, 0x5}}, {0x9, 0x9, {0x1, 0x7}}, {0x1000, 0x8, {0x2, 0x7}}, {0x1, 0x8, {0x1, 0x8}}, {0xd, 0x8, {0x0, 0x3ff}}, {0x2, 0x4, {0x0, 0x6}}, {0x4c, 0x6, {0x1, 0x6}}, {0x7fff, 0xf, {0x0, 0x943}}, {0x8, 0x8, {0x3, 0x1}}, {0x9, 0x7, {0x3, 0x9}}, {0x186, 0x0, {0x3, 0x7fffffff}}, {0x5, 0x3, {0x0, 0x6}}, {0x1, 0x0, {0x1, 0xff}}, {0x5, 0xf99, {0x1, 0x869a}}, {0x1, 0x3, {0x3, 0x8737}}, {0x9, 0x9, {0x2, 0x7}}, {0x3, 0x2e43, {0x3, 0xd}}, {0x0, 0x4, {0x1, 0x3ff}}, {0x3, 0x81, {0x3, 0xd}}, {0x9, 0x38, {0x2, 0x4}}, {0xb28, 0x10c7, {0x1, 0x5}}, {0x92, 0x8, {0x2, 0x3}}, {0xff, 0x2, {0x1, 0x3}}, {0x5, 0x8000}, {0x9, 0x4, {0x3, 0x6}}, {0x7db, 0x0, {0x3, 0x29b4}}, {0xf, 0x6, {0x3, 0x6150}}, {0x8000, 0x2, {0x1, 0x8000}}, {0xd5ff, 0x7, {0x3, 0x8}}, {0xc, 0x7f, {0x1, 0xffffffff}}, {0x0, 0x0, {0x1, 0x43a6}}, {0x5, 0x7, {0x2, 0x7}}, {0x3, 0x10, {0x1, 0x3}}, {0x1, 0x1, {0x1}}, {0xfff3, 0x668, {0x1, 0x7}}, {0x2, 0x1, {0x0, 0xc}}, {0xe, 0xfffc, {0x1}}, {0x4, 0x4, {0x2, 0xf7d}}, {0x3ff, 0x6, {0x1, 0x2}}, {0x76d, 0x4, {0x3, 0x9}}]}}}, {{0x254, 0x1, {{0x0, 0xb}, 0x9, 0xb9, 0xfc00, 0x7fff, 0x12, 'syz1\x00', "8d185d2c0de21e11e99564cc6eff979dd99607ad73001aa13fac8e0f753775c0", "f6e32295391f652b58cf3494c2b8c00a24b3132116e9ce9cfbb7c33ab8aa029d", [{0x8, 0x7ff, {0x1, 0x1}}, {0x3, 0x2, {0x0, 0x3}}, {0xfd67, 0x3, {0x2, 0xfffff951}}, {0xc, 0xc7b1, {0x1, 0x4}}, {0x5, 0x5, {0x2, 0x4}}, {0x6ef, 0x100, {0x0, 0x8}}, {0x7, 0x2, {0x3, 0x26}}, {0x5, 0x7, {0x0, 0x8}}, {0xa41, 0x8, {0x1, 0xa08f}}, {0x978, 0x2, {0x1, 0x1}}, {0x1, 0xffff, {0x0, 0x6}}, {0xee, 0x3, {0x1, 0xffff}}, {0x200, 0x6, {0x0, 0x2}}, {0x1, 0x2, {0x1, 0x200}}, {0x1, 0x7, {0x2, 0x8}}, {0xd, 0x8000, {0x1, 0x80000}}, {0x8, 0x7, {0x3, 0x7fffffff}}, {0x2, 0x7, {0x1, 0x7}}, {0x9, 0x5, {0x0, 0x5}}, {0xfffc, 0x1, {0x1, 0x9}}, {0x1, 0x3, {0x2, 0x527}}, {0x5, 0x4, {0x1, 0x9d2}}, {0x8, 0x7f, {0x0, 0x7}}, {0x828e, 0x1, {0x3, 0x3}}, {0xdd83, 0x3ff, {0x1, 0x10001}}, {0x8, 0x8, {0x3}}, {0x9, 0x7fff, {0x2, 0x5}}, {0x2, 0x7, {0x1, 0x101}}, {0x1, 0x6, {0x3, 0x6}}, {0x100, 0x3, {0x3, 0x401}}, {0x7, 0x7ff, {0x2, 0x7}}, {0x8, 0x10, {0x3, 0x92}}, {0x1, 0x3, {0x0, 0x40}}, {0x4, 0x9, {0x2, 0x7}}, {0xfffa, 0xfffc, {0x0, 0x3ff}}, {0x1, 0x1000, {0x2, 0x1000}}, {0x6, 0x7, {0x1, 0xb5e}}, {0x3ff, 0x7, {0x3, 0x4}}, {0x0, 0x7, {0x0, 0x8}}, {0x5, 0xd92, {0x3, 0xffff}}]}}}, {{0x254, 0x1, {{0x1}, 0x6, 0x0, 0x1, 0x30, 0xf, 'syz1\x00', "0b5cb2856e22f44ab8f222d21ff2967bf28682e3a6173755c8c1832710967356", "fb72deb116c57fb13730c6f1b7965327eb9972a5295aaf2afc74431b08a91412", [{0x5, 0x9, {0x1, 0x9}}, {0x2, 0xf2b0, {0x0, 0x3}}, {0x9, 0x7800, {0x1, 0x80000001}}, {0xb, 0x2, {0x2, 0x7}}, {0x1, 0x8001, {0x0, 0xfffffffb}}, {0x1, 0x1, {0x1, 0x4}}, {0x3, 0x8000, {0x1, 0x10000}}, {0x3, 0x40, {0x2, 0x6}}, {0x401, 0x57, {0x3, 0x9}}, {0x7ff, 0x4, {0x0, 0xffffffff}}, {0x8001, 0x1, {0x3, 0x97}}, {0x4, 0x200, {0x3, 0x4}}, {0x9, 0x5, {0x0, 0x9}}, {0x0, 0xe7a2, {0x2, 0x5}}, {0x8, 0x7, {0x2, 0x9}}, {0x9, 0x8, {0x2, 0x5}}, {0x3, 0x1ff, {0x3, 0x4203}}, {0x0, 0xf02, {0x1, 0x81}}, {0x5, 0x0, {0x1, 0x6}}, {0x7, 0x64d, {0x2, 0x401}}, {0x81, 0x6, {0x3, 0x6}}, {0x2, 0x9, {0x3, 0x6}}, {0x800, 0x4, {0x0, 0x8}}, {0x800, 0x6, {0x0, 0x8}}, {0x747, 0x9, {0x2, 0x3ff}}, {0xa2, 0x401, {0x3, 0x1}}, {0x4, 0x8, {0x3, 0x1}}, {0xeec7, 0x9, {0x2, 0x2}}, {0x0, 0x2758, {0x2, 0x6}}, {0xfff9, 0x2, {0x1, 0x9}}, {0x8, 0x40, {0x0, 0x8001}}, {0x5, 0xffb0, {0x1, 0x7}}, {0x1, 0xff, {0x1, 0xfffffd3e}}, {0x8, 0x2, {0x1, 0xfffff001}}, {0x6, 0x6, {0x1, 0x2}}, {0xe0, 0x1, {0x2, 0xffffffff}}, {0x0, 0x6, {0x3, 0x9}}, {0x9, 0x9, {0x1, 0x4}}, {0x7f, 0x2, {0x3, 0x3}}, {0x800, 0xfff9, {0x1, 0xff}}]}}}, {{0x254, 0x1, {{0x1, 0x400}, 0x5, 0x8, 0x7, 0x0, 0x7, 'syz1\x00', "5efa8ba443202f645f8177dad46c9ea450bf0cd170681327e1fa26bc4ae7513e", "4bdbc19595c852901bcd5f1517e04d5420a64a0ee4a783bebb424d94aabc73c2", [{0x8, 0xf000, {0x0, 0x401}}, {0x7, 0xc7, {0x0, 0x1}}, {0x0, 0x1, {0x0, 0x8}}, {0x5, 0x5, {0x3, 0x1}}, {0x0, 0x800, {0x3, 0x4}}, {0x1, 0x4, {0x3, 0xed}}, {0x6, 0x7, {0x0, 0x6a}}, {0x60b6, 0x1, {0x2, 0x1}}, {0x3, 0x2, {0x0, 0x1ff}}, {0x3, 0x40, {0x1}}, {0x5, 0x4, {0x1, 0x401}}, {0x7, 0x5, {0x1, 0x6}}, {0x0, 0xb000, {0x1, 0x7f}}, {0x6, 0x0, {0x0, 0xfffffffa}}, {0x7, 0x8, {0x0, 0x7f}}, {0x101, 0x5, {0x0, 0x6}}, {0x40, 0x5, {0x3, 0x9}}, {0x9, 0x3, {0x2, 0x1}}, {0x8, 0x1ff, {0x7, 0xbf}}, {0x3b43, 0xfeff, {0x0, 0x7}}, {0x3, 0x3, {0x2a218c83408a9fc6, 0x200}}, {0x401, 0x6, {0x0, 0x6}}, {0x1000, 0x8, {0x3, 0x40}}, {0xabc1, 0x7, {0x0, 0x2}}, {0x4f, 0x6, {0x0, 0x1}}, {0x4, 0x47, {0x1}}, {0x200, 0x4, {0x2, 0x4}}, {0x9, 0x0, {0x1, 0xe}}, {0x40, 0x5, {0x3, 0x4}}, {0x8003, 0x7, {0x2, 0x200}}, {0x6, 0xfff, {0x2}}, {0x59, 0x6, {0x3, 0xfffffffd}}, {0x7, 0x6, {0x2, 0x3}}, {0x8, 0x80, {0x2, 0x2}}, {0x5, 0x8000, {0x1}}, {0x8001, 0x1, {0x2, 0xb5c}}, {0x800, 0x6, {0x1, 0x4}}, {0x0, 0x17ad, {0x1, 0xfff}}, {0xfff8, 0x4, {0x1, 0x2}}, {0xa, 0x9457, {0x2, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x3c6}, 0xd, 0xe, 0x9538, 0x9, 0x15, 'syz0\x00', "32bccbe629a59c7de7560769d0d5e889906816e51d5bef4c504441d2ecc41a35", "bdb3bfdf74375ff4ac7a869973265f7c537923e28c8ccc53d1daf4e26e1bf103", [{0x7e4, 0xfff, {0x0, 0xd}}, {0x1ff, 0x3, {0x3, 0x8}}, {0x8, 0x1, {0x3, 0x5}}, {0x6, 0x79, {0x2, 0x9}}, {0x7ff, 0x4, {0x3, 0x5}}, {0x2, 0xfff1, {0x1, 0x800000}}, {0xa0dc, 0x45ac, {0x3, 0x1}}, {0x7b, 0xe, {0x2, 0x404}}, {0xf, 0x86c, {0x3}}, {0xdb7f, 0x5, {0x1, 0xefd}}, {0x6f, 0x83, {0x0, 0x3}}, {0x401, 0x5, {0x1, 0x7}}, {0x4c9e, 0x9, {0x0, 0x9}}, {0x7, 0x1, {0x0, 0x200}}, {0x224, 0x0, {0x0, 0xa03}}, {0x0, 0xff5e, {0x2, 0x34}}, {0x9, 0x5, {0x1, 0x6}}, {0xff7f, 0x7b84, {0x0, 0x800}}, {0x3, 0x1, {0x2, 0x7}}, {0x2, 0xa, {0x1, 0x25cd}}, {0x3, 0x5, {0x0, 0x4}}, {0x0, 0x278, {0x2, 0x3}}, {0x1, 0x0, {0x3, 0x6}}, {0x1, 0xfff0, {0x1, 0x1000}}, {0x969, 0x7, {0x3, 0xffffffe1}}, {0x401, 0x9, {0x1, 0x4}}, {0x7, 0x7, {0x1, 0x1}}, {0x5, 0x6, {0x2, 0xd71}}, {0x6, 0x6ea2, {0x3, 0x100}}, {0xa, 0x4, {0x3, 0x2}}, {0xff, 0x9, {0x3, 0x2}}, {0x800, 0x1, {0x0, 0x2}}, {0x1, 0x2, {0x0, 0x80}}, {0xea, 0x0, {0x1, 0x6}}, {0x324c, 0x9, {0x3, 0xfff}}, {0x6be, 0x8, {0x3, 0x3}}, {0x2, 0x4800, {0x2, 0x7fff}}, {0x1000, 0xc, {0x3, 0xee95}}, {0x3, 0x7ff, {0x2, 0x10000}}, {0x81, 0x3, {0x0, 0x7}}]}}}, {{0x254, 0x1, {{0x1, 0x278}, 0x3, 0x6b, 0x1ff, 0xf2d, 0x19, 'syz1\x00', "13335409fa6d30088b180f83f187582781aa083bc41a58a55db1d560e197aab8", "585c5a9525c756e05438720430f61e8d1f1cb63bf4332941903cdf59697ed996", [{0x5, 0x0, {0x0, 0x7}}, {0xc000, 0xf8, {0x2, 0x3}}, {0x100, 0x9, {0x0, 0x6}}, {0x8, 0x101, {0x3, 0x7fffffff}}, {0x8, 0x8e22, {0x2, 0x5}}, {0x7ff, 0x2, {0x1, 0xd7}}, {0x8, 0x6b7, {0x0, 0x7ff}}, {0x8, 0xf, {0x0, 0xffffffff}}, {0x7, 0x0, {0x2, 0x100}}, {0x0, 0x647, {0x2, 0xa2}}, {0xbf, 0x5, {0x0, 0x85ac}}, {0x1, 0x7, {0x0, 0x2}}, {0x924, 0x1, {0x1, 0x4}}, {0x0, 0x7f, {0x1, 0xfffffff8}}, {0x5, 0x9, {0x3, 0x4}}, {0xfffa, 0x61, {0x3, 0x5}}, {0xc07, 0xf, {0x2, 0x7}}, {0x8a, 0x54c4, {0x1, 0xb}}, {0x4, 0xd, {0x3, 0x1000}}, {0x4f87, 0x0, {0x3, 0x3}}, {0x9, 0x1, {0x2, 0xffffffff}}, {0xffff, 0xfffa, {0x1, 0x6}}, {0x83a4, 0xdfa, {0x0, 0x7}}, {0xfff8, 0x3ff, {0x0, 0x8}}, {0x2, 0x2, {0x0, 0x18}}, {0x7, 0x8e3b, {0x0, 0x8001}}, {0x4, 0x78, {0x2, 0x5}}, {0x0, 0x2}, {0x4, 0x0, {0x0, 0xfffffffd}}, {0x800, 0x8, {0x1, 0x6}}, {0xff, 0x9, {0x1, 0x400075c8}}, {0xd6cc, 0x6629, {0x3, 0xfffffff8}}, {0x1, 0x7, {0x1, 0x8}}, {0x9, 0x9, {0x0, 0xeb}}, {0x8, 0xff81, {0x2, 0x3f97009d}}, {0x3, 0x7, {0x0, 0xfffffffc}}, {0x6, 0x1, {0x3, 0x8da3}}, {0x8, 0x800, {0x1, 0x6}}, {0x7f, 0xae8c, {0x3}}, {0x4, 0x6, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x3, 0xd}, 0xd, 0x6, 0xf5d, 0xb24, 0x8, 'syz1\x00', "11b112c319b91298793144568a3c57ee664c94da0151795d0bfb2a2bff1af04b", "b70bdf2dcf9b08176a343d66acce33a32569690c11b7d70efd974b3930805987", [{0x6, 0x7f, {0x1, 0x2}}, {0x8, 0x4, {0x0, 0x2}}, {0xb, 0x0, {0x1, 0xffffffff}}, {0x8, 0x3, {0x2, 0x81}}, {0x5, 0xf1e, {0x1, 0x6}}, {0x3, 0xbe, {0x3, 0x3}}, {0xc662, 0x8001, {0x1, 0x7}}, {0xd, 0x1, {0x2, 0x1}}, {0x3, 0x8000, {0x2, 0x3ff}}, {0x6, 0x4ad, {0x0, 0x8b}}, {0xf000, 0xd, {0x3, 0x4}}, {0xfff, 0x1, {0x3, 0x2}}, {0xa, 0x9, {0x3, 0x4}}, {0x8, 0x7fff, {0x2, 0x81}}, {0x0, 0x7, {0x2, 0xd38}}, {0xa863, 0x34c, {0x0, 0x6}}, {0x4, 0x4, {0x2, 0x5}}, {0x9, 0xfc9, {0x0, 0x4}}, {0x4, 0xfffb, {0x1, 0xfffffffe}}, {0xfffd, 0x0, {0x3, 0x2}}, {0x1, 0x3, {0x0, 0xcc0a}}, {0x6, 0x81, {0x3, 0x9}}, {0x5, 0xff, {0x3, 0x40}}, {0x6, 0x2d3, {0x2, 0x2}}, {0x8, 0x8, {0x3, 0x2}}, {0x1000, 0x7fff, {0x2, 0x4}}, {0xf1ca, 0x5, {0x3, 0x5}}, {0xfffd, 0x5, {0x3, 0xc}}, {0x7, 0x1, {0x1, 0x40}}, {0x10, 0xf21, {0x0, 0x1}}, {0x3a, 0x9, {0x3, 0xf4}}, {0x1, 0x0, {0x3, 0x2}}, {0x9, 0x3, {0x2}}, {0x200, 0x400, {0x2, 0x49}}, {0x2, 0x0, {0x3, 0x3c69}}, {0x3, 0xa, {0x2, 0x3}}, {0x9, 0x7, {0x2, 0x3}}, {0x3, 0x1000, {0x0, 0x7fffffff}}, {0x1, 0x7, {0x3, 0x6}}, {0x8, 0x1b, {0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x100}, 0x3, 0x9, 0x3ff, 0x5, 0x9, 'syz0\x00', "ac9542305ce49159fb3118b0a357b9ff78c9f98b87a4faee2ae49fd0266ae647", "08761f2a167e99e1a3dabfbe36eb26bfa71e9a43723edec4fde532e47d966301", [{0x9, 0x9, {0x2, 0x5}}, {0xd44, 0x2, {0x1, 0x7}}, {0x101, 0x8, {0x1, 0x2}}, {0x8, 0xf, {0x1, 0x22b}}, {0x5, 0x1ff, {0x1}}, {0x10, 0x5c0, {0x3, 0x5}}, {0x4, 0x8, {0x3, 0x5471}}, {0xe93, 0x9, {0x2, 0x5}}, {0x0, 0xa, {0x1}}, {0xfffd, 0x8001, {0x0, 0x6}}, {0x1, 0x4, {0x1, 0x5}}, {0x3, 0x8, {0x3, 0x6}}, {0x8000, 0x400, {0x2, 0x8}}, {0x5, 0x1, {0x2, 0xfffffffc}}, {0x8, 0x7, {0x1, 0xfffffffb}}, {0x9, 0xb6, {0x1, 0xf}}, {0x585, 0x1, {0x0, 0x1}}, {0x2, 0x4, {0x3, 0x81}}, {0x0, 0xc0, {0x1, 0x2}}, {0x2, 0x3ff, {0x3, 0x80000000}}, {0x0, 0x1fa, {0x3, 0x7f6}}, {0x1, 0x9, {0x2, 0x4ead}}, {0x18, 0xb, {0x1, 0x2}}, {0x3, 0x8, {0x3, 0xfffffff7}}, {0xd, 0x502, {0x2, 0x9}}, {0xb, 0x1, {0x2, 0x80000000}}, {0x6, 0x7ff, {0x2, 0xd4d}}, {0xffff, 0x7ed, {0x3, 0x3}}, {0xc000, 0x7, {0x3, 0x8}}, {0x3, 0x9, {0x2, 0xa}}, {0x2, 0x2, {0x3, 0xfffffffb}}, {0xfff, 0x8001, {0x1}}, {0x3, 0x401, {0x1, 0x40000000}}, {0x0, 0x0, {0x1, 0xfffffff9}}, {0x9, 0x1, {0x2, 0x7ff}}, {0x4, 0x8, {0x1, 0x2}}, {0x0, 0x8, {0x1, 0x1}}, {0x0, 0x2, {0x2, 0x9}}, {0x2, 0x83d, {0x3, 0x10}}, {0x5, 0x0, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x0, 0x5}, 0x7, 0x3, 0x5, 0x7, 0x1d, 'syz1\x00', "863eb5ae49369c69cee1ebea2ec724de257d0f287d4453f5ee5262ce418fff21", "0c0ed987cdd8870613e197c052a0a452534734e8e7e0c691e12059b684500967", [{0x8, 0xfff7, {0x1, 0xa3d2}}, {0x6, 0x50, {0x2, 0x40}}, {0x1, 0x5, {0x1, 0x7fff}}, {0x169, 0x0, {0x1, 0x3}}, {0x4, 0x36d1, {0x1, 0x83}}, {0x3, 0xa, {0x1, 0x9}}, {0xf, 0x0, {0x1, 0x306}}, {0x9, 0x8, {0x2}}, {0x200, 0x8, {0x2, 0x83a3}}, {0x5, 0x1, {0x2, 0x5}}, {0xf699, 0x0, {0x0, 0x7}}, {0x7, 0x100, {0x2, 0x2}}, {0x6, 0x76, {0x0, 0x80000001}}, {0x6, 0x7, {0xf51d67c71f71441, 0x1}}, {0x4, 0x400, {0x3, 0x3e15}}, {0x8, 0x101, {0x0, 0x1}}, {0x1ff, 0x6, {0x3, 0xec4}}, {0x3, 0x7fff, {0x0, 0x58}}, {0x1, 0x2, {0x0, 0x8}}, {0x9, 0x9, {0x2}}, {0x3, 0x5, {0x1, 0x3}}, {0x2, 0x1, {0x1, 0xfffffffa}}, {0x0, 0x9, {0x2, 0x6}}, {0x51d, 0xe, {0x1, 0x3ff}}, {0x7, 0x8, {0x3, 0xfffffffe}}, {0x4, 0x9, {0x2, 0x8}}, {0x3, 0xd, {0x1, 0xffff}}, {0xa410, 0xde, {0x3}}, {0xddb, 0x0, {0x0, 0x400}}, {0x8, 0x2, {0x3}}, {0x0, 0xfff9, {0x3, 0x6}}, {0x8, 0x3a13, {0x3}}, {0x2, 0x3, {0x0, 0x7fff}}, {0x7, 0x400, {0x0, 0x7}}, {0x6, 0xfc7, {0x0, 0x6}}, {0x3, 0x2, {0x1, 0xffffffff}}, {0x7, 0x864, {0x0, 0xc58}}, {0x1, 0xc2, {0x2, 0x2}}, {0x0, 0xfffa, {0x1, 0x1}}, {0xb, 0x6, {0x2, 0x4}}]}}}]}, 0x1508}, 0x1, 0x0, 0x0, 0x44000040}, 0x20004005) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="e929610faca2000000000000000000060000000000000010"], 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000810}, 0x8880) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ac0)={0x1f, 0x4, &(0x7f0000001b80)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ac00000095"], &(0x7f0000001bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) close(r1) syz_emit_ethernet(0x56, &(0x7f0000000240)={@multicast, @random="5287b22d70e9", @void, {@canfd={0xd, {{0x4, 0x0, 0x1}, 0x15, 0x2, 0x0, 0x0, "f5fdfed63ff9c5da9217a8b80efc70371003bf4eb4226ef4c958dffc9962b00d9f9ad046c40d4329b23d924f6692d3715ea1361cf2093abee196cea6825ba56b"}}}}, &(0x7f00000002c0)={0x1, 0x4, [0xc94, 0xf98, 0xd6, 0x382]}) socket$inet6(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b28, &(0x7f0000000080)={'wlan1\x00', @random="0100"}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000007600010000000000000000000300000000e9"], 0x18}}, 0x0) 1m10.779992202s ago: executing program 32 (id=1743): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="001178584c"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0xd, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000008f00000095"], &(0x7f0000000940)='GPL\x00', 0x9}, 0x94) setsockopt$inet_tcp_int(r0, 0x6, 0xd, &(0x7f0000000540), 0x4) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000640)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000680)={r3, r3, 0x7, 0x7, &(0x7f0000000740)="39593c897f0798", 0xb, 0x2, 0x18, 0x63aa, 0x56, 0x2, 0x5, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000780)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000580)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000a0000010000000000000000180200000400000000000000000000ffffb903000040000000b7040000ff0000008500000045000000950000000000000056a544c5e8014a18324cbd1f2a946d61d0a228e16d85852b4e07710a8dd41a817dd07acbac56a944408de632939bcbc8b56c93d32e97896c050d65cc"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r5, 0x0, 0x22, 0x0, &(0x7f0000000500)="001122334455001122334456080045000028000000004006f8ce0a0000010a000002", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x2c, r7, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x803}, 0xc0) r8 = socket$netlink(0x10, 0x3, 0xc) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f00000005c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000600)={0x0, 0x0}, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x4fa9, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB="000013f82e"], 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000140)='nv', 0x2) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 1m8.000316372s ago: executing program 33 (id=1758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 1m5.004713964s ago: executing program 34 (id=1759): sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000010000000000000000007110b500000000009500000000000000a282cb8ecd0d254d03d44df656abed5011c51ed827438a464f0b0000ea8d4765d847ed7b45e44c2cf1d547595d12d986d5ad7f6f3399a109b3b8e3b287f14844d9231b179588f77bff8932de820630bb62e5f3d2293b3c1745ff4ef48ca55b608a4b303a0ea7e467acf15d3aa394b4d0a007ad46963de72c59651f5e4a34b44f95c9beacd193eac4640ecff86c3267b405d516b4293d20df01c27d9c081a8f04b101e57029ded08052df2ad551884d14b15a99cce8e2fa81f83a"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xffff, 0xa}, {0x1, 0x3}}}, 0x24}}, 0x40080) r3 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2d}]}, 0x0}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r5, 0x10, 0xa46, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5b2, 0x60}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x4042015) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x718}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7ff}, {}, {}, {0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 1m0.698625566s ago: executing program 1 (id=1765): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@newqdisc={0x5c, 0x15, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x8}}, [@TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x16, 0x2, [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0]}}]}]}, 0x5c}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), 0xffffffffffffffff) socket$kcm(0x2, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz0\x00', 0x1ff) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000bc0)={0x7ff, 0x8201, 0x7fff, 0xb, 0x0}, &(0x7f0000000c00)=0x10) setsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r0, 0x84, 0x83, &(0x7f0000000c40)={r1}, 0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000009c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB="62a02a3a340977770a89"], 0xa) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x24008000}, 0xc001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0x200, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x3, 0x4, 0x3, 0x2, 0x3, 0xb, 0x0, 0x0, 0x2, 0x5, 0x2, 0x1, 0x10, 0x0, 0x5, 0x9], 0x2, [0x1, 0x2, 0xfffe, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0xffff, 0x0, 0xfffd, 0x4, 0x0, 0x6, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000200)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000004100010000000000000000000101000000000000040008000400028020000180100004000000000000000000000000000c001c"], 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="010000f6bff00004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000300"/28], 0x50) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000800)=ANY=[@ANYRES64=r1, @ANYRESDEC=r5, @ANYBLOB="76786c616e0000001800028014001d"], 0x48}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000e40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="02d0fc22540215d5db0fee862969ff73f37ccfde4c5c209303ed5932677e7d6895bb8386f6c7bf311807d0d56973e1b10ed9b258b35c7e25bd4857e6a3829d58ef9e736520ea61cc41bb52724b8c4b6eb67284795c48aaa8df8bed5d5631edf78dff21e3", @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="0800340001000000"], 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000b80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)=ANY=[@ANYBLOB="d8494a7e", @ANYRES16=r9, @ANYBLOB="00042dbd7000fcdbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x1000) sendmsg$nl_generic(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400060004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000370000000e0001116e657464657673696d0000000f0002006e657464657673696d30000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030001000000"], 0x64}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r4) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r12, &(0x7f0000000900)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r11, 0x1, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x8005) 58.783934667s ago: executing program 35 (id=1760): r0 = socket(0x400000000010, 0x3, 0x0) (async) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x541b, &(0x7f0000000300)) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r4, 0x111, 0x3, 0x1, 0x4) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000000c0), 0x40000000000009f, 0x0) (async) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newlinkprop={0x34, 0x6c, 0x8, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x0, 0x2520}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffffb, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 47.079500995s ago: executing program 1 (id=1767): r0 = socket(0xa, 0x3, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x6, 0x0, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x68, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, 'peer_node_00001\x00'}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, '01234567890123456789'}}]}]}, 0x68}}, 0x0) 33.588566614s ago: executing program 1 (id=1768): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x800) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r2, 0x29, 0x8, 0x0, &(0x7f0000000200)) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf251f000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4010) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r3, &(0x7f0000000080)='cubic\x00', 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$pppoe(0x18, 0x1, 0x0) getpeername(r5, &(0x7f0000000240)=@isdn, &(0x7f00000002c0)=0x80) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32, @ANYBLOB="180006"], 0x34}}, 0x0) 23.197055455s ago: executing program 1 (id=1769): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r0, 0x180000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x1}]}, {0x0, [0x2e, 0x30]}}, 0x0, 0x28}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16, @ANYBLOB="080029bd7000fddbdf2708000000440003800800030003000000080003000b00000008000300165d000008000300000000000800010000100000080003"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom$rxrpc(r1, &(0x7f0000000680)=""/155, 0x9b, 0x10020, &(0x7f0000000740)=@in4={0x21, 0x5, 0x2, 0x10, {0x2, 0x4e22, @private=0xa010102}}, 0x24) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000004, 0x1010, r8, 0x12504000) write$6lowpan_enable(r8, &(0x7f00000003c0)='1', 0x1) sendmsg$nl_generic(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) bind(r10, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x1, 0x4, 0x0, 0x0, {0xa, 0x4e23, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}}, 0x80) r11 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r11, 0x29, 0xc8, &(0x7f0000000780)=0x1, 0x4) syz_emit_ethernet(0x66, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000800303afffc000000000000000000000000000001ff0200"], 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000023c0)=ANY=[@ANYBLOB="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"], 0x10b8) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x2}, {0xffff}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x400, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x80) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb0, 0x1, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2000200}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1688}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xf}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3e1aaefb}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}, @CTA_LABELS_MASK={0x8, 0x17, [0x6]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x6404}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x4c040) 0s ago: executing program 36 (id=1769): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r0, 0x180000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x1}]}, {0x0, [0x2e, 0x30]}}, 0x0, 0x28}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16, @ANYBLOB="080029bd7000fddbdf2708000000440003800800030003000000080003000b00000008000300165d000008000300000000000800010000100000080003"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom$rxrpc(r1, &(0x7f0000000680)=""/155, 0x9b, 0x10020, &(0x7f0000000740)=@in4={0x21, 0x5, 0x2, 0x10, {0x2, 0x4e22, @private=0xa010102}}, 0x24) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000004, 0x1010, r8, 0x12504000) write$6lowpan_enable(r8, &(0x7f00000003c0)='1', 0x1) sendmsg$nl_generic(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) bind(r10, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x1, 0x4, 0x0, 0x0, {0xa, 0x4e23, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}}, 0x80) r11 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r11, 0x29, 0xc8, &(0x7f0000000780)=0x1, 0x4) syz_emit_ethernet(0x66, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000800303afffc000000000000000000000000000001ff0200"], 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000023c0)=ANY=[@ANYBLOB="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"], 0x10b8) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x2}, {0xffff}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x400, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x80) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb0, 0x1, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2000200}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1688}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xf}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3e1aaefb}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}, @CTA_LABELS_MASK={0x8, 0x17, [0x6]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x6404}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x4c040) kernel console output (not intermixed with test programs): [ T6651] xt_socket: unknown flags 0x4 [ 107.698947][ T6658] netlink: 'syz.3.241': attribute type 1 has an invalid length. [ 107.770667][ T6658] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.813425][ T6664] bond2: (slave veth0_to_bond): making interface the new active one [ 107.856223][ T6664] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 107.898096][ T6673] netlink: 'syz.4.244': attribute type 2 has an invalid length. [ 107.995057][ T6677] openvswitch: netlink: Multiple metadata blocks provided [ 108.423344][ T6698] netlink: 'syz.2.251': attribute type 23 has an invalid length. [ 108.423607][ T6698] netlink: 'syz.2.251': attribute type 23 has an invalid length. [ 108.576244][ T6712] Cannot find add_set index 0 as target [ 109.015018][ T6742] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 109.160592][ T6745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.183365][ T6745] bond1: (slave ip6erspan0): making interface the new active one [ 109.185583][ T6745] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 109.420213][ T6751] syz.0.259 (6751) used greatest stack depth: 18312 bytes left [ 109.483224][ T6756] syz.0.259 (6756) used greatest stack depth: 18088 bytes left [ 109.799406][ T6796] __nla_validate_parse: 82 callbacks suppressed [ 109.799429][ T6796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.265'. [ 109.981511][ T6798] GUP no longer grows the stack in syz.0.266 (6798): 200000003000-20000000a000 (200000001000) [ 109.981564][ T6798] CPU: 1 UID: 0 PID: 6798 Comm: syz.0.266 Not tainted syzkaller #0 PREEMPT(full) [ 109.981607][ T6798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 109.981637][ T6798] Call Trace: [ 109.981650][ T6798] [ 109.981660][ T6798] dump_stack_lvl+0xe8/0x150 [ 109.981700][ T6798] __get_user_pages+0x23b6/0x2750 [ 109.981739][ T6798] ? lock_acquire+0x115/0x350 [ 109.981791][ T6798] ? __gup_longterm_locked+0xc3b/0x15c0 [ 109.981835][ T6798] __gup_longterm_locked+0xd52/0x15c0 [ 109.981873][ T6798] ? lock_acquire+0x115/0x350 [ 109.981917][ T6798] gup_fast_fallback+0x1d92/0x20e0 [ 109.981986][ T6798] ? __pfx_gup_fast_fallback+0x10/0x10 [ 109.982023][ T6798] ? lock_acquire+0x115/0x350 [ 109.982046][ T6798] ? is_valid_gup_args+0x11f/0x200 [ 109.982085][ T6798] ? get_user_pages_fast+0x4d/0xb0 [ 109.982122][ T6798] __iov_iter_get_pages_alloc+0x378/0xa40 [ 109.982165][ T6798] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 109.982197][ T6798] iov_iter_get_pages2+0x5e/0xa0 [ 109.982235][ T6798] __se_sys_vmsplice+0x7b5/0x1660 [ 109.982282][ T6798] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 109.982308][ T6798] ? __pfx_futex_wait+0x10/0x10 [ 109.982406][ T6798] do_syscall_64+0x166/0x520 [ 109.982433][ T6798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.982456][ T6798] ? clear_bhb_loop+0x70/0xc0 [ 109.982484][ T6798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.982507][ T6798] RIP: 0033:0x7fc470d9e1d9 [ 109.982535][ T6798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.982554][ T6798] RSP: 002b:00007fc471cfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 109.982583][ T6798] RAX: ffffffffffffffda RBX: 00007fc471025fa0 RCX: 00007fc470d9e1d9 [ 109.982600][ T6798] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 109.982614][ T6798] RBP: 00007fc470e35888 R08: 0000000000000000 R09: 0000000000000000 [ 109.982628][ T6798] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 109.982642][ T6798] R13: 00007fc471026038 R14: 00007fc471025fa0 R15: 00007ffec375c838 [ 109.982678][ T6798] [ 110.131490][ T6802] validate_nla: 35 callbacks suppressed [ 110.131545][ T6802] netlink: 'syz.4.268': attribute type 1 has an invalid length. [ 110.259876][ T6802] bond1: entered promiscuous mode [ 110.260320][ T6802] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.400444][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 110.451148][ T6814] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 110.527339][ T6815] digital: digital_start_poll: Unknown protocol [ 110.656232][ T6827] Bluetooth: MGMT ver 1.23 [ 110.960485][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'. [ 110.960520][ T6850] netlink: 'syz.2.280': attribute type 10 has an invalid length. [ 110.960535][ T6850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.280'. [ 111.175189][ T6862] netlink: 28 bytes leftover after parsing attributes in process `syz.2.285'. [ 111.189339][ T6862] netlink: 4528 bytes leftover after parsing attributes in process `syz.2.285'. [ 111.362073][ T6874] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 111.440736][ T6872] ipt_REJECT: TCP_RESET invalid for non-tcp [ 111.611041][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.294'. [ 111.611234][ T6891] x_tables: duplicate underflow at hook 1 [ 111.696472][ T6895] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 111.808906][ T6897] xt_MASQUERADE: bad MAP_IPS. [ 111.811460][ T6899] netlink: 44 bytes leftover after parsing attributes in process `syz.2.296'. [ 111.932527][ T6909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.299'. [ 112.096560][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'. [ 112.572642][ T6947] netlink: 'syz.4.311': attribute type 1 has an invalid length. [ 112.573122][ T6944] netlink: 'syz.4.311': attribute type 1 has an invalid length. [ 112.755715][ T6956] sctp: [Deprecated]: syz.3.317 (pid 6956) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.755715][ T6956] Use struct sctp_sack_info instead [ 112.907310][ T6951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.921273][ T6951] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 113.012947][ T6970] syzkaller0: entered promiscuous mode [ 113.012971][ T6970] syzkaller0: entered allmulticast mode [ 113.065777][ T59] IPVS: starting estimator thread 0... [ 113.170144][ T6973] IPVS: using max 28 ests per chain, 67200 per kthread [ 113.386421][ T6991] netlink: 'syz.3.326': attribute type 1 has an invalid length. [ 113.398107][ T6991] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 113.455077][ T6996] syzkaller0: entered promiscuous mode [ 113.455096][ T6996] syzkaller0: entered allmulticast mode [ 113.563502][ T7002] raw_sendmsg: syz.2.329 forgot to set AF_INET. Fix it! [ 113.791697][ T7016] netlink: 'syz.3.335': attribute type 11 has an invalid length. [ 114.048131][ T7032] openvswitch: netlink: IPv6 tunnel dst address is zero [ 114.102446][ T7038] netlink: 'syz.1.340': attribute type 10 has an invalid length. [ 114.123303][ T7038] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 114.147414][ T7038] team0: Port device wlan0 added [ 114.625586][ T7064] veth3: entered promiscuous mode [ 114.976676][ T7087] __nla_validate_parse: 22 callbacks suppressed [ 114.976699][ T7087] netlink: 64 bytes leftover after parsing attributes in process `syz.2.353'. [ 115.255171][ T7100] netlink: 36 bytes leftover after parsing attributes in process `syz.2.357'. [ 115.256004][ T7099] netlink: 36 bytes leftover after parsing attributes in process `syz.2.357'. [ 115.325797][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 115.419650][ T7115] gretap1: entered promiscuous mode [ 115.420675][ T7115] batman_adv: batadv0: Adding interface: gretap1 [ 115.420689][ T7115] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 115.420711][ T7115] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 115.422862][ T7114] ip6tnl0: Caught tx_queue_len zero misconfig [ 115.771580][ T7139] netlink: 44 bytes leftover after parsing attributes in process `syz.0.369'. [ 115.857140][ T7145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.917379][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 115.917402][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 116.223793][ T7166] syzkaller0: entered allmulticast mode [ 116.259042][ T7166] syzkaller0: left allmulticast mode [ 116.444469][ T7188] netlink: 20 bytes leftover after parsing attributes in process `syz.2.381'. [ 116.445102][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 116.661040][ T7198] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.386'. [ 116.683093][ T7198] tipc: Started in network mode [ 116.683123][ T7198] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 116.702781][ T7198] tipc: Enabled bearer , priority 10 [ 116.764496][ T7208] netlink: 'syz.4.389': attribute type 49 has an invalid length. [ 117.005174][ T7208] ip6gretap0: entered promiscuous mode [ 117.005200][ T7208] ip6gretap0: entered allmulticast mode [ 117.804682][ T5744] tipc: Node number set to 4269801488 [ 117.869672][ T7247] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 118.135880][ T7262] netlink: 'syz.4.402': attribute type 2 has an invalid length. [ 118.135902][ T7262] netlink: 'syz.4.402': attribute type 11 has an invalid length. [ 118.620567][ T7300] tipc: Started in network mode [ 118.620595][ T7300] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 118.620807][ T7300] tipc: Enabled bearer , priority 10 [ 118.885990][ T7308] netlink: 'syz.1.409': attribute type 29 has an invalid length. [ 118.932431][ T7308] netlink: 'syz.1.409': attribute type 29 has an invalid length. [ 119.545565][ T7338] netlink: 'syz.1.409': attribute type 29 has an invalid length. [ 119.596705][ T1005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.741976][ T5744] tipc: Node number set to 10136234 [ 119.844100][ T7355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.317775][ T7376] netlink: 'syz.0.428': attribute type 23 has an invalid length. [ 120.318586][ T7375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.447237][ T7385] __nla_validate_parse: 11 callbacks suppressed [ 120.447259][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'. [ 120.447274][ T7385] netlink: 2 bytes leftover after parsing attributes in process `syz.0.431'. [ 120.447528][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'. [ 120.481861][ T7386] netlink: 2 bytes leftover after parsing attributes in process `syz.0.431'. [ 120.484474][ T7385] netlink: 32 bytes leftover after parsing attributes in process `syz.0.431'. [ 120.578081][ T7390] netlink: 64 bytes leftover after parsing attributes in process `syz.2.435'. [ 120.586690][ T7390] syzkaller1: entered promiscuous mode [ 120.586714][ T7390] syzkaller1: entered allmulticast mode [ 120.641287][ T7393] xt_connbytes: Forcing CT accounting to be enabled [ 120.641526][ T7393] Cannot find set identified by id 0 to match [ 120.685388][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 120.697994][ T7393] netlink: 32 bytes leftover after parsing attributes in process `syz.0.434'. [ 120.702401][ T7393] tipc: Started in network mode [ 120.702429][ T7393] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 120.702613][ T7393] tipc: Enabled bearer , priority 0 [ 120.940600][ T7405] ip_tables: iptables: counters copy to user failed while replacing table [ 120.942934][ T7397] syzkaller0: entered promiscuous mode [ 120.942952][ T7397] syzkaller0: entered allmulticast mode [ 121.015694][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 121.409777][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.445'. [ 121.557110][ T7448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.826177][ T7461] ip_tables: iptables: counters copy to user failed while replacing table [ 123.064978][ T5772] tipc: Node number set to 43690 [ 123.312493][ T7489] netlink: 'syz.2.455': attribute type 1 has an invalid length. [ 123.403908][ T7489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.455965][ T7498] netlink: 'syz.0.458': attribute type 39 has an invalid length. [ 123.505853][ T7489] bridge1: entered allmulticast mode [ 123.526374][ T7489] bond0: (slave bridge1): making interface the new active one [ 123.549564][ T7489] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 124.024624][ T7531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.049437][ T7533] batman_adv: batadv0: Adding interface: syzkaller0 [ 124.049458][ T7533] batman_adv: batadv0: Interface activated: syzkaller0 [ 124.299666][ T7542] netlink: 'syz.2.472': attribute type 3 has an invalid length. [ 124.731839][ T7530] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 124.907263][ T7530] batman_adv: batadv0: Removing interface: syzkaller0 [ 125.095899][ T7567] tipc: Enabling of bearer rejected, failed to enable media [ 125.561177][ T7582] __nla_validate_parse: 10 callbacks suppressed [ 125.561199][ T7582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.479'. [ 125.702090][ T7588] netlink: 'syz.2.482': attribute type 25 has an invalid length. [ 125.820876][ T7590] vlan0: entered allmulticast mode [ 125.820899][ T7590] veth0_to_bridge: entered allmulticast mode [ 125.997233][ T7602] netlink: 'syz.3.488': attribute type 2 has an invalid length. [ 126.148614][ T7610] netlink: 9 bytes leftover after parsing attributes in process `syz.3.491'. [ 126.150867][ T7610] gretap0: entered promiscuous mode [ 126.199783][ T7613] syzkaller0: entered promiscuous mode [ 126.199807][ T7613] syzkaller0: entered allmulticast mode [ 126.203865][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.490'. [ 126.264058][ T7613] v: renamed from veth0_vlan (while UP) [ 126.275025][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'. [ 126.275050][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'. [ 126.294428][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 126.646835][ T7636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'. [ 126.919551][ T7649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.504'. [ 126.919889][ T7653] netlink: 96 bytes leftover after parsing attributes in process `syz.3.503'. [ 126.991728][ T7653] vlan2: entered allmulticast mode [ 126.991750][ T7653] gretap0: entered allmulticast mode [ 127.054495][ T7657] netlink: 56 bytes leftover after parsing attributes in process `syz.0.507'. [ 127.205779][ T7670] netlink: 'syz.2.509': attribute type 21 has an invalid length. [ 129.276001][ T7731] netlink: 'syz.1.531': attribute type 2 has an invalid length. [ 129.915175][ T7758] can: request_module (can-proto-0) failed. [ 130.376025][ T7801] ip_tables: iptables: counters copy to user failed while replacing table [ 130.778093][ T7828] __nla_validate_parse: 12 callbacks suppressed [ 130.778114][ T7828] netlink: 128 bytes leftover after parsing attributes in process `syz.3.548'. [ 130.778129][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.548'. [ 130.793801][ T7819] netlink: 16 bytes leftover after parsing attributes in process `syz.1.547'. [ 130.793847][ T7819] netlink: 16 bytes leftover after parsing attributes in process `syz.1.547'. [ 130.830246][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.830336][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.830398][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.830468][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.830522][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.830583][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.830637][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.830697][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.830757][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.830811][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.830872][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.830927][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.830988][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.831035][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.831097][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.831158][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.831284][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.831367][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.831442][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.831504][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.831564][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.831626][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.831686][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.831746][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.943739][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.943829][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.943897][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.943952][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.944011][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.944072][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.944147][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.944211][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.944288][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.944349][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.944457][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.944523][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.947507][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.947590][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.988166][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.988304][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.988372][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.988449][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.988521][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.988592][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.988650][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.988710][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.988768][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.988829][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.988893][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.988946][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.989004][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.989064][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.989131][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.989189][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.989248][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 130.993054][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 131.046653][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 131.046827][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 131.046889][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 131.046955][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 131.047028][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 131.047092][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 131.047156][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 131.047221][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 131.047361][ T7819] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 131.729360][ T7867] bridge2: entered promiscuous mode [ 131.729400][ T7867] bridge2: entered allmulticast mode [ 131.764222][ T7869] netlink: 28 bytes leftover after parsing attributes in process `syz.3.552'. [ 131.764257][ T7869] netlink: 'syz.3.552': attribute type 7 has an invalid length. [ 131.764270][ T7869] netlink: 16 bytes leftover after parsing attributes in process `syz.3.552'. [ 131.876577][ T7871] sctp: Trying to GSO but underlying device doesn't support it. [ 132.128983][ T7887] netlink: 24 bytes leftover after parsing attributes in process `syz.1.558'. [ 132.218406][ T7893] netlink: 'syz.0.559': attribute type 7 has an invalid length. [ 132.261383][ T7897] netlink: 'syz.1.558': attribute type 4 has an invalid length. [ 132.420317][ T7893] bridge_slave_0: left allmulticast mode [ 132.420337][ T7893] bridge_slave_0: left promiscuous mode [ 132.421524][ T7893] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.445750][ T7893] bridge_slave_1: left allmulticast mode [ 132.445816][ T7893] bridge_slave_1: left promiscuous mode [ 132.446338][ T7893] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.476341][ T7893] bond0: (slave bond_slave_0): Releasing backup interface [ 132.494174][ T7893] bond0: (slave bond_slave_1): Releasing backup interface [ 132.518560][ T7893] team0: Port device team_slave_0 removed [ 132.536257][ T7891] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 132.537742][ T7893] team0: Port device team_slave_1 removed [ 132.543614][ T7893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.543672][ T7893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.578550][ T7893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.578575][ T7893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.580646][ T7893] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 132.604015][ T7901] syzkaller1: entered promiscuous mode [ 132.604068][ T7901] syzkaller1: entered allmulticast mode [ 132.800367][ T7911] netlink: 88 bytes leftover after parsing attributes in process `syz.1.562'. [ 132.800411][ T7911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.562'. [ 132.800424][ T7911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.562'. [ 132.814606][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.814827][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.878097][ T7914] netlink: 'syz.4.563': attribute type 1 has an invalid length. [ 134.545823][ T7914] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 134.776063][ T7968] nbd: must specify at least one socket [ 135.014572][ T7986] tipc: Enabling of bearer rejected, failed to enable media [ 135.209778][ T7992] netlink: 'syz.0.581': attribute type 10 has an invalid length. [ 135.248611][ T7992] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 135.277106][ T7992] team0: Port device wlan0 added [ 135.444422][ T8004] v: left promiscuous mode [ 135.446204][ T8004] v: entered promiscuous mode [ 135.488527][ T8004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.491470][ T8004] A link change request failed with some changes committed already. Interface dvmrp1 may have been left with an inconsistent configuration, please check. [ 135.970394][ T8038] __nla_validate_parse: 5 callbacks suppressed [ 135.970414][ T8038] netlink: 88 bytes leftover after parsing attributes in process `syz.0.589'. [ 136.332816][ T8054] netlink: 20 bytes leftover after parsing attributes in process `syz.1.595'. [ 136.332850][ T8054] netlink: 20 bytes leftover after parsing attributes in process `syz.1.595'. [ 136.361204][ T8054] geneve2: entered promiscuous mode [ 136.442572][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 136.687097][ T8073] bond4: entered promiscuous mode [ 136.702407][ T8073] macvlan2: entered promiscuous mode [ 136.702432][ T8073] macvlan2: entered allmulticast mode [ 136.703527][ T8073] bond4: (slave macvlan2): Opening slave failed [ 136.784886][ T8077] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 136.785531][ T8077] batman_adv: batadv0: Adding interface: gretap1 [ 136.785540][ T8077] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.785560][ T8077] batman_adv: batadv0: Interface activated: gretap1 [ 137.637358][ T8094] netlink: 31 bytes leftover after parsing attributes in process `syz.1.605'. [ 137.637388][ T8094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.605'. [ 137.637407][ T8094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.605'. [ 137.714163][ T8096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.606'. [ 137.792046][ T8102] netlink: 148 bytes leftover after parsing attributes in process `syz.2.607'. [ 137.792783][ T8099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.898024][ T8105] syzkaller1: entered promiscuous mode [ 137.898067][ T8105] syzkaller1: entered allmulticast mode [ 137.901323][ T8105] syzkaller1: left promiscuous mode [ 137.901338][ T8105] syzkaller1: left allmulticast mode [ 139.267880][ T8048] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 139.446431][ T8116] ip_tables: iptables: counters copy to user failed while replacing table [ 139.517368][ T8127] netlink: 32 bytes leftover after parsing attributes in process `syz.0.613'. [ 140.603293][ T8178] bond5: option all_slaves_active: invalid value (179) [ 140.605245][ T8178] bond5 (unregistering): Released all slaves [ 141.117960][ T8211] netlink: 'syz.0.638': attribute type 58 has an invalid length. [ 141.117996][ T8211] __nla_validate_parse: 5 callbacks suppressed [ 141.118007][ T8211] netlink: 20 bytes leftover after parsing attributes in process `syz.0.638'. [ 141.513191][ T8199] bond2: entered promiscuous mode [ 141.822087][ T8245] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 142.209316][ T8268] netlink: 20 bytes leftover after parsing attributes in process `syz.0.647'. [ 142.227561][ T8264] syzkaller1: entered promiscuous mode [ 142.227584][ T8264] syzkaller1: entered allmulticast mode [ 142.386745][ T8274] x_tables: duplicate underflow at hook 2 [ 142.417545][ T8280] smc: net device lo applied user defined pnetid SYZ0 [ 142.431102][ T8280] smc: smcd device lo applied user defined pnetid SYZ0 [ 142.492554][ T8284] IPVS: Unknown mcast interface: pim6reg0 [ 142.495624][ T8284] xt_hl: Unknown TTL match mode: 255 [ 142.506062][ T8285] IPVS: Unknown mcast interface: pim6reg0 [ 142.522096][ T8285] xt_hl: Unknown TTL match mode: 255 [ 142.595234][ T8293] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 142.750981][ T8297] tipc: Enabling of bearer rejected, failed to enable media [ 143.202066][ T8334] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 143.220574][ T8334] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 143.220931][ T8334] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 143.221342][ T8334] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 143.232035][ T8334] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 143.232906][ T8334] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 143.242338][ T8334] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 143.247871][ T8334] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 143.248807][ T8334] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 143.252994][ T8334] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 143.254037][ T8334] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 143.576490][ T8356] netlink: 288 bytes leftover after parsing attributes in process `syz.2.674'. [ 143.600213][ T8356] netlink: 96 bytes leftover after parsing attributes in process `syz.2.674'. [ 143.702045][ T8365] netlink: 'syz.3.675': attribute type 9 has an invalid length. [ 143.782232][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.676'. [ 143.850682][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.677'. [ 143.908900][ T8375] netlink: 144 bytes leftover after parsing attributes in process `syz.4.679'. [ 144.157198][ T8386] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 144.202828][ T8383] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 144.202980][ T8383] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 144.203099][ T8383] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 144.203233][ T8383] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 144.203366][ T8383] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 144.203475][ T8383] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 144.206830][ T8389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.682'. [ 144.208752][ T8383] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 144.214637][ T8383] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 144.215206][ T8383] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 144.215528][ T8383] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 144.253705][ T8386] netlink: 'syz.4.683': attribute type 1 has an invalid length. [ 144.411252][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.683'. [ 144.671784][ T8407] netlink: 'syz.4.686': attribute type 4 has an invalid length. [ 144.731019][ T8408] netlink: 'syz.4.686': attribute type 4 has an invalid length. [ 144.891726][ T8426] netlink: 24 bytes leftover after parsing attributes in process `syz.0.689'. [ 145.052800][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.053148][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.053439][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.053686][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.053941][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.054178][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.083426][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.084258][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.084899][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.106484][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.107232][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.120596][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.121205][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.141730][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.142501][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.174130][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.174395][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.174616][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.188458][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.312264][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.312589][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.312824][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.313373][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.314415][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.314652][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.330710][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.331339][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.346126][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.346439][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.346681][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.346940][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.356103][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.363574][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.373792][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.399276][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.400139][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.419345][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.420187][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.448878][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.451878][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.469465][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.482461][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.493975][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.511329][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.528333][ T5619] Bluetooth: hci4: command 0x0405 tx timeout [ 145.554902][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.555166][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.555423][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.555645][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.589212][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.591230][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.601279][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.601987][ T8427] veth0_to_bond: default FDB implementation only supports local addresses [ 145.869465][ T8468] netlink: 'syz.1.694': attribute type 11 has an invalid length. [ 146.321406][ T8496] __nla_validate_parse: 54 callbacks suppressed [ 146.321427][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.704'. [ 146.417379][ T8500] netlink: 36 bytes leftover after parsing attributes in process `syz.2.705'. [ 146.643785][ T8518] netlink: 'syz.2.708': attribute type 10 has an invalid length. [ 146.644090][ T8518] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.644826][ T8518] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.685351][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.708'. [ 146.685451][ T8518] bridge_slave_1: left allmulticast mode [ 146.685472][ T8518] bridge_slave_1: left promiscuous mode [ 146.685743][ T8518] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.735836][ T8518] bridge_slave_0: left allmulticast mode [ 146.735865][ T8518] bridge_slave_0: left promiscuous mode [ 146.736076][ T8518] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.987763][ T8528] netlink: 20 bytes leftover after parsing attributes in process `syz.1.710'. [ 146.994178][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.712'. [ 147.037268][ T8532] netlink: 'syz.2.711': attribute type 16 has an invalid length. [ 147.037301][ T8532] netlink: 'syz.2.711': attribute type 17 has an invalid length. [ 147.086763][ T8535] xt_TPROXY: Can be used only with -p tcp or -p udp [ 147.305511][ T8548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.713'. [ 147.331704][ T8543] netlink: 96 bytes leftover after parsing attributes in process `syz.4.714'. [ 147.470376][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 147.785122][ T8557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.716'. [ 148.010041][ T8560] netlink: 'syz.3.718': attribute type 2 has an invalid length. [ 148.016383][ T8562] xt_hashlimit: size too large, truncated to 1048576 [ 148.016483][ T8562] xt_hashlimit: max too large, truncated to 1048576 [ 148.016541][ T8562] xt_hashlimit: overflow, rate too high: 0 [ 148.415438][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.723'. [ 148.437425][ T8577] netlink: 'syz.4.723': attribute type 12 has an invalid length. [ 148.437449][ T8577] netlink: 'syz.4.723': attribute type 29 has an invalid length. [ 148.790334][ T8586] tipc: Enabled bearer , priority 0 [ 148.825737][ T8585] tipc: Disabling bearer [ 148.925273][ T8591] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.925476][ T8591] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.051900][ T8598] net_ratelimit: 28 callbacks suppressed [ 149.051921][ T8598] ip_tables: iptables: counters copy to user failed while replacing table [ 149.093377][ T8601] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 149.263628][ T8609] netlink: 'syz.1.731': attribute type 7 has an invalid length. [ 149.755804][ T8643] syzkaller0: entered promiscuous mode [ 149.755829][ T8643] syzkaller0: entered allmulticast mode [ 149.784737][ T8643] tipc: Enabled bearer , priority 0 [ 149.801648][ T8643] ip_tables: iptables: counters copy to user failed while replacing table [ 149.886876][ T8649] Bluetooth: ISO socket layer initialized [ 150.065904][ T8650] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 150.098046][ T8641] tipc: Resetting bearer [ 150.136483][ T8641] tipc: Disabling bearer [ 150.369185][ T8671] syzkaller0: entered promiscuous mode [ 150.369208][ T8671] syzkaller0: entered allmulticast mode [ 150.374640][ T8667] ip6t_rt: unknown flags 36 [ 150.439610][ T6786] IPVS: starting estimator thread 0... [ 150.447336][ T8673] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 150.528473][ T8678] IPVS: using max 28 ests per chain, 67200 per kthread [ 150.825623][ T8692] nbd1: detected capacity change from 0 to 63 [ 150.836711][ T8692] block nbd1: NBD_DISCONNECT [ 150.849508][ T8701] netlink: 'syz.4.753': attribute type 4 has an invalid length. [ 150.850840][ T8702] x_tables: unsorted entry at hook 4 [ 150.876638][ T8692] block nbd1: Disconnected due to user request. [ 150.886921][ T8692] block nbd1: shutting down sockets [ 150.909850][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.910054][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 150.912525][ C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 150.912598][ C0] Buffer I/O error on dev nbd1, logical block 1, async page read [ 150.912648][ C0] Buffer I/O error on dev nbd1, logical block 2, async page read [ 150.912694][ C0] Buffer I/O error on dev nbd1, logical block 3, async page read [ 150.913023][ T8699] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 150.913051][ T8699] Buffer I/O error on dev nbd1, logical block 0, async page read [ 150.913088][ T8699] Buffer I/O error on dev nbd1, logical block 1, async page read [ 150.913104][ T8699] Buffer I/O error on dev nbd1, logical block 2, async page read [ 150.913118][ T8699] Buffer I/O error on dev nbd1, logical block 3, async page read [ 150.914320][ T8699] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 150.914347][ T8699] Buffer I/O error on dev nbd1, logical block 0, async page read [ 150.914363][ T8699] Buffer I/O error on dev nbd1, logical block 1, async page read [ 150.914514][ T8699] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 150.915093][ T8699] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 150.915349][ T8699] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 150.915536][ T8699] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 150.915685][ T8699] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 150.915758][ T8604] ldm_validate_partition_table(): Disk read failed. [ 150.915862][ T8699] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 150.916293][ T8604] Dev nbd1: unable to read RDB block 0 [ 150.931490][ T8604] nbd1: unable to read partition table [ 151.018481][ T8604] ldm_validate_partition_table(): Disk read failed. [ 151.028737][ T8604] Dev nbd1: unable to read RDB block 0 [ 151.032700][ T8604] nbd1: unable to read partition table [ 151.290268][ T8715] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 151.356160][ T8711] __nla_validate_parse: 7 callbacks suppressed [ 151.356182][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.756'. [ 151.398234][ T8720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.758'. [ 151.641796][ T8734] netlink: 'syz.4.763': attribute type 1 has an invalid length. [ 151.666537][ T8734] netlink: 'syz.4.763': attribute type 10 has an invalid length. [ 151.666559][ T8734] netlink: 40 bytes leftover after parsing attributes in process `syz.4.763'. [ 151.666743][ T8734] dummy0: entered promiscuous mode [ 151.804807][ T8741] bridge0: port 3(veth1_to_bridge) entered blocking state [ 151.805081][ T8741] bridge0: port 3(veth1_to_bridge) entered disabled state [ 151.805283][ T8741] veth1_to_bridge: entered allmulticast mode [ 151.807294][ T8741] veth1_to_bridge: entered promiscuous mode [ 151.839538][ T8741] openvswitch: netlink: Flow key attr not present in new flow. [ 151.900442][ T8747] netlink: 'syz.4.767': attribute type 1 has an invalid length. [ 151.900463][ T8747] netlink: 5120 bytes leftover after parsing attributes in process `syz.4.767'. [ 151.901190][ T8748] netlink: 'syz.4.767': attribute type 1 has an invalid length. [ 151.901206][ T8748] netlink: 5120 bytes leftover after parsing attributes in process `syz.4.767'. [ 151.904483][ T8744] netlink: 44 bytes leftover after parsing attributes in process `syz.0.765'. [ 151.904503][ T8744] netlink: 43 bytes leftover after parsing attributes in process `syz.0.765'. [ 151.904517][ T8744] netlink: 'syz.0.765': attribute type 5 has an invalid length. [ 151.904528][ T8744] netlink: 43 bytes leftover after parsing attributes in process `syz.0.765'. [ 152.354423][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.771'. [ 152.695001][ T8777] ipt_REJECT: TCP_RESET invalid for non-tcp [ 152.863426][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.775'. [ 152.965245][ T8793] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 153.420725][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c76a400: rx timeout, send abort [ 153.423334][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c76a400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 153.911824][ T8858] tipc: Started in network mode [ 153.911860][ T8858] tipc: Node identity fad60ea0a73c, cluster identity 4711 [ 153.912010][ T8858] tipc: Enabled bearer , priority 0 [ 153.948359][ T8858] tipc: Resetting bearer [ 154.029104][ T8857] tipc: Disabling bearer [ 157.154814][ T8868] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 157.486600][ T8914] __nla_validate_parse: 7 callbacks suppressed [ 157.486622][ T8914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'. [ 157.523724][ T8899] A link change request failed with some changes committed already. Interface dvmrp1 may have been left with an inconsistent configuration, please check. [ 157.624850][ T8919] sch_tbf: burst 674 is lower than device syzkaller0 mtu (1514) ! [ 157.626599][ T8923] sch_tbf: burst 674 is lower than device syzkaller0 mtu (1514) ! [ 157.648871][ T8918] syzkaller0: entered promiscuous mode [ 157.648889][ T8918] syzkaller0: entered allmulticast mode [ 157.687458][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.812'. [ 157.702815][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.812'. [ 157.772403][ T31] audit: type=1107 audit(1791631615.637:2): pid=8928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 157.815405][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.813'. [ 157.846896][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.813'. [ 157.965089][ T8946] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.816'. [ 158.183596][ T8954] netlink: zone id is out of range [ 158.183614][ T8954] netlink: zone id is out of range [ 158.183624][ T8954] netlink: set zone limit has 4 unknown bytes [ 158.369168][ T8969] netlink: 76 bytes leftover after parsing attributes in process `syz.0.824'. [ 158.369198][ T8969] netlink: 76 bytes leftover after parsing attributes in process `syz.0.824'. [ 158.372771][ T8971] netlink: 76 bytes leftover after parsing attributes in process `syz.0.824'. [ 158.372794][ T8971] netlink: 76 bytes leftover after parsing attributes in process `syz.0.824'. [ 158.432639][ T8973] netlink: 'syz.4.823': attribute type 1 has an invalid length. [ 158.432919][ T8973] netlink: 'syz.4.823': attribute type 1 has an invalid length. [ 158.438547][ T8973] netlink: 'syz.4.823': attribute type 1 has an invalid length. [ 158.439275][ T8973] netlink: 'syz.4.823': attribute type 1 has an invalid length. [ 158.455472][ T8973] netlink: 'syz.4.823': attribute type 1 has an invalid length. [ 158.456130][ T8973] netlink: 'syz.4.823': attribute type 1 has an invalid length. [ 158.464282][ T8973] netlink: 'syz.4.823': attribute type 1 has an invalid length. [ 158.464981][ T8973] netlink: 'syz.4.823': attribute type 1 has an invalid length. [ 158.478295][ T8973] netlink: 'syz.4.823': attribute type 1 has an invalid length. [ 158.478922][ T8973] netlink: 'syz.4.823': attribute type 1 has an invalid length. [ 158.604866][ T8983] bond0: invalid NS target ff00:: specified for addition [ 158.604895][ T8983] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 158.627447][ T8984] IPVS: set_ctl: invalid protocol: 29 172.30.0.4:20003 [ 158.686823][ T8984] syzkaller1: entered promiscuous mode [ 158.686867][ T8984] syzkaller1: entered allmulticast mode [ 159.331640][ T9024] ip6t_srh: unknown srh match flags 4000 [ 159.431651][ T9029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.620770][ T9030] syzkaller0: entered promiscuous mode [ 159.620799][ T9030] syzkaller0: entered allmulticast mode [ 159.622514][ T9034] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 159.790831][ T9056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.237032][ T9062] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 161.332580][ T9072] veth5: entered allmulticast mode [ 161.716792][ T9094] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.882580][ T9108] syzkaller1: entered promiscuous mode [ 161.882602][ T9108] syzkaller1: entered allmulticast mode [ 162.007504][ T9123] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.346786][ T9143] C: renamed from lo (while UP) [ 162.357218][ T9143] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 162.513846][ T9159] __nla_validate_parse: 43 callbacks suppressed [ 162.513867][ T9159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.867'. [ 162.515467][ T9159] hsr_slave_0: left promiscuous mode [ 162.536211][ T9159] hsr_slave_1: left promiscuous mode [ 163.486006][ T9216] ip6t_hbh: too many supported opts specified [ 163.575396][ T9220] netlink: 16 bytes leftover after parsing attributes in process `syz.2.877'. [ 164.685592][ T9236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.883'. [ 165.386454][ T9147] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.539017][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.887'. [ 165.541885][ T9244] ipvlan0: entered promiscuous mode [ 165.541954][ T9244] ipvlan0: entered allmulticast mode [ 165.541968][ T9244] veth0_vlan: entered allmulticast mode [ 165.680274][ T9247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.885'. [ 165.680412][ T9247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.729452][ T9247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.775107][ T9264] validate_nla: 92 callbacks suppressed [ 165.775128][ T9264] netlink: 'syz.1.891': attribute type 5 has an invalid length. [ 166.004603][ T9272] ip_tables: iptables: counters copy to user failed while replacing table [ 166.076626][ T9275] syzkaller0: entered promiscuous mode [ 166.076650][ T9275] syzkaller0: entered allmulticast mode [ 166.100442][ T9277] netlink: 'syz.0.897': attribute type 1 has an invalid length. [ 166.183894][ T9277] bond5: entered promiscuous mode [ 166.184282][ T9277] 8021q: adding VLAN 0 to HW filter on device bond5 [ 166.221833][ T9278] 8021q: adding VLAN 0 to HW filter on device bond5 [ 166.222247][ T9278] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 166.222266][ T9278] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 166.226534][ T9278] bond5: (slave ip6gre1): making interface the new active one [ 166.226554][ T9278] ip6gre1: entered promiscuous mode [ 166.235151][ T9278] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 166.235908][ T9282] »»»»»»: renamed from tunl0 (while UP) [ 166.436128][ T9291] syzkaller1: entered promiscuous mode [ 166.436153][ T9291] syzkaller1: entered allmulticast mode [ 166.485606][ T9291] netlink: 24 bytes leftover after parsing attributes in process `syz.2.902'. [ 166.988694][ T9293] 8021q: adding VLAN 0 to HW filter on device bond6 [ 167.005010][ T9293] macvlan2: entered promiscuous mode [ 167.005030][ T9293] macvlan2: entered allmulticast mode [ 167.006335][ T9293] erspan0: entered promiscuous mode [ 167.022534][ T9293] bond6: (slave macvlan2): Enslaving as an active interface with an up link [ 167.043068][ T9303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.906'. [ 167.045244][ T9303] netlink: 76 bytes leftover after parsing attributes in process `syz.3.906'. [ 167.828529][ T9349] netlink: 60 bytes leftover after parsing attributes in process `syz.2.919'. [ 167.951449][ T9358] netlink: 60 bytes leftover after parsing attributes in process `syz.3.921'. [ 167.979722][ T9361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.920'. [ 168.026737][ T9361] ip6gre2: entered promiscuous mode [ 168.026761][ T9361] ip6gre2: entered allmulticast mode [ 168.049396][ T9361] netlink: 'syz.0.920': attribute type 6 has an invalid length. [ 168.049418][ T9361] netlink: 72 bytes leftover after parsing attributes in process `syz.0.920'. [ 168.145846][ T9366] xt_REDIRECT: bad MAP_IPS. [ 168.258742][ T9378] netlink: 'syz.0.926': attribute type 1 has an invalid length. [ 168.368306][ T9378] 8021q: adding VLAN 0 to HW filter on device bond7 [ 168.391614][ T9386] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 168.489841][ T9390] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 168.531300][ T9378] bond7: entered promiscuous mode [ 168.531328][ T9378] bond7: entered allmulticast mode [ 168.866491][ T9414] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 169.230479][ T9435] netlink: 'syz.1.940': attribute type 10 has an invalid length. [ 169.368180][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.942'. [ 169.427128][ T9435] team0: Device veth0_macvtap failed to register rx_handler [ 169.779816][ T9462] FAULT_INJECTION: forcing a failure. [ 169.779816][ T9462] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 169.779857][ T9462] CPU: 1 UID: 0 PID: 9462 Comm: syz.3.950 Not tainted syzkaller #0 PREEMPT(full) [ 169.779900][ T9462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 169.779913][ T9462] Call Trace: [ 169.779921][ T9462] [ 169.779930][ T9462] dump_stack_lvl+0xe8/0x150 [ 169.779976][ T9462] should_fail_ex+0x410/0x560 [ 169.780010][ T9462] _copy_from_user+0x2d/0xb0 [ 169.780041][ T9462] ___sys_sendmsg+0x1c6/0x360 [ 169.780063][ T9462] ? __lock_acquire+0x747/0x2de0 [ 169.780090][ T9462] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.780109][ T9462] ? __lock_acquire+0x747/0x2de0 [ 169.780163][ T9462] ? __fget_files+0x2a/0x420 [ 169.780182][ T9462] ? __fget_files+0x3a2/0x420 [ 169.780211][ T9462] __x64_sys_sendmsg+0x1b1/0x290 [ 169.780235][ T9462] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 169.780277][ T9462] do_syscall_64+0x166/0x520 [ 169.780300][ T9462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.780320][ T9462] ? clear_bhb_loop+0x70/0xc0 [ 169.780355][ T9462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.780373][ T9462] RIP: 0033:0x7fbb8859e1d9 [ 169.780396][ T9462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.780411][ T9462] RSP: 002b:00007fbb89428028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.780436][ T9462] RAX: ffffffffffffffda RBX: 00007fbb88825fa0 RCX: 00007fbb8859e1d9 [ 169.780450][ T9462] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 169.780461][ T9462] RBP: 00007fbb89428090 R08: 0000000000000000 R09: 0000000000000000 [ 169.780473][ T9462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.780487][ T9462] R13: 00007fbb88826038 R14: 00007fbb88825fa0 R15: 00007ffc15ae5258 [ 169.780517][ T9462] [ 169.947146][ T9463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.037175][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'. [ 170.062483][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'. [ 170.063385][ T9468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.955'. [ 170.174111][ T9472] netlink: 16 bytes leftover after parsing attributes in process `syz.2.958'. [ 170.244414][ T9474] ip_tables: iptables: counters copy to user failed while replacing table [ 170.291607][ T9485] netlink: 104 bytes leftover after parsing attributes in process `syz.2.959'. [ 170.326423][ T9483] erspan0: entered promiscuous mode [ 170.326448][ T9483] erspan0: entered allmulticast mode [ 170.376172][ T9477] ipvlan0: left allmulticast mode [ 170.376193][ T9477] veth0_vlan: left allmulticast mode [ 170.705894][ T9494] netlink: 'syz.2.961': attribute type 1 has an invalid length. [ 170.791559][ T9494] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.892526][ T9507] netlink: Conntrack attr has 1 unknown bytes [ 170.892563][ T9507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.893598][ T9507] netlink: Conntrack attr has 1 unknown bytes [ 170.893629][ T9507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.904819][ T9507] netlink: Conntrack attr has 1 unknown bytes [ 170.904851][ T9507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.956642][ T9507] netlink: Conntrack attr has 1 unknown bytes [ 171.020134][ T9507] net_ratelimit: 35 callbacks suppressed [ 171.020172][ T9507] netlink: Conntrack attr has 1 unknown bytes [ 171.020201][ T9507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.020677][ T9507] netlink: Conntrack attr has 1 unknown bytes [ 171.020707][ T9507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.021137][ T9507] netlink: Conntrack attr has 1 unknown bytes [ 171.021165][ T9507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.021550][ T9507] netlink: Conntrack attr has 1 unknown bytes [ 171.077075][ T9507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.143047][ T9516] FAULT_INJECTION: forcing a failure. [ 171.143047][ T9516] name failslab, interval 1, probability 0, space 0, times 1 [ 171.143080][ T9516] CPU: 0 UID: 0 PID: 9516 Comm: syz.0.965 Not tainted syzkaller #0 PREEMPT(full) [ 171.143102][ T9516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 171.143115][ T9516] Call Trace: [ 171.143123][ T9516] [ 171.143132][ T9516] dump_stack_lvl+0xe8/0x150 [ 171.143167][ T9516] should_fail_ex+0x410/0x560 [ 171.143199][ T9516] ? __alloc_skb+0x1db/0x7a0 [ 171.143237][ T9516] should_failslab+0xa8/0x100 [ 171.143287][ T9516] ? __alloc_skb+0x1db/0x7a0 [ 171.143320][ T9516] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 171.143345][ T9516] ? __alloc_skb+0x18d/0x7a0 [ 171.143377][ T9516] ? __alloc_skb+0x1db/0x7a0 [ 171.143416][ T9516] __alloc_skb+0x1db/0x7a0 [ 171.143471][ T9516] netlink_sendmsg+0x5d4/0xb40 [ 171.143511][ T9516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.143548][ T9516] ? apparmor_socket_sendmsg+0x98/0x360 [ 171.143582][ T9516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.143609][ T9516] sock_sendmsg_nosec+0x13a/0x180 [ 171.143642][ T9516] ____sys_sendmsg+0x54e/0x850 [ 171.143672][ T9516] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.143707][ T9516] ? import_iovec+0x73/0xa0 [ 171.143745][ T9516] ___sys_sendmsg+0x2a5/0x360 [ 171.143769][ T9516] ? __lock_acquire+0x747/0x2de0 [ 171.143799][ T9516] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.143831][ T9516] ? preempt_schedule_common+0x7f/0xd0 [ 171.143883][ T9516] ? __fget_files+0x2a/0x420 [ 171.143904][ T9516] ? __fget_files+0x3a2/0x420 [ 171.143937][ T9516] __x64_sys_sendmsg+0x1b1/0x290 [ 171.143964][ T9516] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 171.144012][ T9516] do_syscall_64+0x166/0x520 [ 171.144037][ T9516] ? trace_irq_disable+0x3b/0x140 [ 171.144062][ T9516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.144085][ T9516] ? clear_bhb_loop+0x70/0xc0 [ 171.144112][ T9516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.144135][ T9516] RIP: 0033:0x7fc470d9e1d9 [ 171.144156][ T9516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.144174][ T9516] RSP: 002b:00007fc471cfa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.144198][ T9516] RAX: ffffffffffffffda RBX: 00007fc471025fa0 RCX: 00007fc470d9e1d9 [ 171.144222][ T9516] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 171.144236][ T9516] RBP: 00007fc471cfa090 R08: 0000000000000000 R09: 0000000000000000 [ 171.144251][ T9516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.144264][ T9516] R13: 00007fc471026038 R14: 00007fc471025fa0 R15: 00007ffec375c838 [ 171.144299][ T9516] [ 171.924585][ T9531] tipc: Enabled bearer , priority 0 [ 172.034669][ T9531] syzkaller0: entered promiscuous mode [ 172.034696][ T9531] syzkaller0: entered allmulticast mode [ 172.036537][ T9531] tipc: Resetting bearer [ 172.148103][ T12] tipc: Resetting bearer [ 172.155078][ T9531] batman_adv: batadv0: Adding interface: syzkaller0 [ 172.155112][ T9531] batman_adv: batadv0: Interface activated: syzkaller0 [ 172.191001][ T9529] tipc: Resetting bearer [ 172.191041][ T9529] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 172.536828][ T9570] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 173.743200][ T9529] tipc: Disabling bearer [ 173.743441][ T9529] batman_adv: batadv0: Removing interface: syzkaller0 [ 173.746914][ T9559] batadv_slave_1: entered promiscuous mode [ 173.747382][ T9568] batadv_slave_1: left promiscuous mode [ 173.883105][ T9577] __nla_validate_parse: 3 callbacks suppressed [ 173.883125][ T9577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.982'. [ 173.884194][ T9578] netlink: 32 bytes leftover after parsing attributes in process `syz.0.982'. [ 173.926109][ T9582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.981'. [ 173.927250][ T9582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.927343][ T9583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.080603][ T9589] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 174.081258][ T9589] team0: Device ipvlan2 is already an upper device of the team interface [ 174.149106][ T9589] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 174.149685][ T9589] team0: Device ipvlan2 is already an upper device of the team interface [ 174.259943][ T9589] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 174.260510][ T9589] team0: Device ipvlan2 is already an upper device of the team interface [ 174.337434][ T9589] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 174.344709][ T9589] team0: Device ipvlan2 is already an upper device of the team interface [ 174.415816][ T9589] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 174.416268][ T9589] team0: Device ipvlan2 is already an upper device of the team interface [ 174.507584][ T9589] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 174.509528][ T9589] team0: Device ipvlan2 is already an upper device of the team interface [ 174.587198][ T9589] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 174.587916][ T9589] team0: Device ipvlan2 is already an upper device of the team interface [ 174.636736][ T9589] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 174.637204][ T9589] team0: Device ipvlan2 is already an upper device of the team interface [ 174.686537][ T9589] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 174.687191][ T9589] team0: Device ipvlan2 is already an upper device of the team interface [ 174.769601][ T9589] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 174.770071][ T9589] team0: Device ipvlan2 is already an upper device of the team interface [ 174.825531][ T9589] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 174.826052][ T9589] team0: Device ipvlan2 is already an upper device of the team interface [ 174.951092][ T9593] netlink: 'syz.1.984': attribute type 3 has an invalid length. [ 174.951113][ T9593] netlink: 'syz.1.984': attribute type 2 has an invalid length. [ 175.031627][ T9595] syzkaller0: entered promiscuous mode [ 175.031645][ T9595] syzkaller0: entered allmulticast mode [ 175.075783][ T9542] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 175.198033][ T9595] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 175.285174][ T9605] netlink: 'syz.3.987': attribute type 1 has an invalid length. [ 175.684689][ T9640] C: Caught tx_queue_len zero misconfig [ 175.687291][ T9637] netlink: 32 bytes leftover after parsing attributes in process `syz.2.994'. [ 175.952585][ T9650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'. [ 175.982571][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.999'. [ 175.982599][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.999'. [ 175.982951][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.999'. [ 175.982971][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.999'. [ 175.984467][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.999'. [ 176.436498][ T9685] net_ratelimit: 2 callbacks suppressed [ 176.436519][ T9685] netlink: NAT attribute has 8 unknown bytes [ 176.436547][ T9685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.725467][ T9701] pim6reg: entered allmulticast mode [ 177.047051][ T9719] netlink: 'syz.0.1016': attribute type 1 has an invalid length. [ 177.065158][ T9719] netlink: 'syz.0.1016': attribute type 7 has an invalid length. [ 177.065196][ T9719] netlink: 'syz.0.1016': attribute type 8 has an invalid length. [ 177.084416][ T9719] dummy0: entered promiscuous mode [ 177.091494][ T9719] team0: entered promiscuous mode [ 177.091561][ T9719] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 177.109117][ T9719] gretap0: entered promiscuous mode [ 177.111621][ T9719] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 177.534425][ T5619] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 178.349841][ T9727] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 178.349866][ T9727] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 178.453321][ T9765] netlink: 'syz.0.1027': attribute type 1 has an invalid length. [ 178.545935][ T9727] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 178.545960][ T9727] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 178.566376][ T9765] 8021q: adding VLAN 0 to HW filter on device bond9 [ 178.581091][ T9765] netlink: 'syz.0.1027': attribute type 21 has an invalid length. [ 178.614758][ T9727] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 178.614780][ T9727] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 178.662594][ T9776] netlink: 'syz.4.1030': attribute type 2 has an invalid length. [ 178.685512][ T9727] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 178.685536][ T9727] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 178.738969][ T9727] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 178.738994][ T9727] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 179.180965][ T9806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 179.180982][ T9806] IPv6: NLM_F_CREATE should be set when creating new route [ 179.561650][ T9827] netlink: 'syz.0.1043': attribute type 33 has an invalid length. [ 179.627277][ T9827] bond10: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 179.647353][ T9827] bond10 (unregistering): Released all slaves [ 180.375356][ T9871] veth0: Caught tx_queue_len zero misconfig [ 180.378027][ T9875] netlink: 'syz.0.1052': attribute type 1 has an invalid length. [ 180.734751][ T9889] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.947130][ T9904] __nla_validate_parse: 159 callbacks suppressed [ 180.947150][ T9904] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1059'. [ 180.947166][ T9904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1059'. [ 180.947179][ T9904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1059'. [ 181.339663][ T9929] netlink: 'syz.1.1065': attribute type 10 has an invalid length. [ 181.340213][ T9924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.432761][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1064'. [ 181.432784][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1064'. [ 181.432807][ T9930] netlink: 'syz.4.1064': attribute type 12 has an invalid length. [ 181.432818][ T9930] netlink: 'syz.4.1064': attribute type 11 has an invalid length. [ 181.619502][ T9942] netlink: 'syz.1.1067': attribute type 1 has an invalid length. [ 181.679674][ T9947] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1068'. [ 181.746077][ T9942] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.756289][ T9942] netlink: 'syz.1.1067': attribute type 1 has an invalid length. [ 181.756538][ T9942] netlink: 'syz.1.1067': attribute type 1 has an invalid length. [ 181.779730][ T9942] netlink: 'syz.1.1067': attribute type 1 has an invalid length. [ 181.781930][ T9942] netlink: 'syz.1.1067': attribute type 1 has an invalid length. [ 181.893114][ T9945] bond2: (slave bridge1): making interface the new active one [ 181.920189][ T9945] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 181.941895][ T9942] netlink: 'syz.1.1067': attribute type 1 has an invalid length. [ 182.206471][ T9975] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 182.221623][ T9975] bond4 (unregistering): Released all slaves [ 182.433573][ T9967] bridge0: entered promiscuous mode [ 182.461279][ T9967] bond3: (slave bridge0): making interface the new active one [ 182.464252][ T9967] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 182.938603][T10007] bond3: option arp_missed_max: invalid value (0) [ 182.938630][T10007] bond3: option arp_missed_max: allowed values 1 - 255 [ 182.953465][T10007] bond3 (unregistering): Released all slaves [ 183.066039][T10014] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 183.083180][T10014] batman_adv: batadv0: Adding interface: gretap2 [ 183.083198][T10014] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.122931][T10014] batman_adv: batadv0: Interface activated: gretap2 [ 183.255920][T10023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.331115][T10020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.478907][T10033] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1084'. [ 194.259920][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.259966][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 227.521579][T10089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.522512][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1092'. [ 227.535716][T10091] sch_tbf: burst 0 is lower than device gre0 mtu (1304) ! [ 227.791823][T10098] validate_nla: 30 callbacks suppressed [ 227.791860][T10098] netlink: 'syz.2.1094': attribute type 1 has an invalid length. [ 227.791874][T10098] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1094'. [ 228.066423][T10106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.166445][T10109] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1099'. [ 228.185350][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1101'. [ 228.185397][T10114] netlink: 'syz.2.1101': attribute type 5 has an invalid length. [ 228.185430][T10114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1101'. [ 228.220134][T10114] geneve3: entered promiscuous mode [ 228.220156][T10114] geneve3: entered allmulticast mode [ 228.223516][T10116] ipt_ECN: cannot use operation on non-tcp rule [ 228.238610][ T6773] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 228.238691][ T6773] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 228.238729][ T6773] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 228.238773][ T6773] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 228.312819][T10110] tipc: Started in network mode [ 228.312842][T10110] tipc: Node identity ffff1083, cluster identity 4711 [ 228.312855][T10110] tipc: Node number set to 4294905987 [ 228.313883][T10110] tipc: Cannot configure node identity twice [ 228.992789][T10151] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 229.012665][T10153] netlink: 'syz.3.1108': attribute type 4 has an invalid length. [ 229.031892][T10153] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1108'. [ 229.034201][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1109'. [ 229.036626][T10156] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1108'. [ 229.047026][T10151] netlink: 'syz.3.1108': attribute type 4 has an invalid length. [ 229.087508][T10151] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 229.147736][T10161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1110'. [ 229.340138][T10166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.471068][T10175] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1116'. [ 229.664043][T10194] IPVS: set_ctl: invalid protocol: 95 127.0.0.1:21 [ 229.706677][T10191] block nbd0: not configured, cannot reconfigure [ 229.707186][T10192] block nbd0: not configured, cannot reconfigure [ 229.880031][T10204] IPv6: sit2: Disabled Multicast RS [ 230.034143][T10217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.141483][T10222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.164038][T10225] netlink: 'syz.2.1130': attribute type 17 has an invalid length. [ 230.192865][T10225] gretap0: entered promiscuous mode [ 230.198094][T10225] gretap0: left promiscuous mode [ 230.244168][T10228] netlink: 'syz.1.1131': attribute type 58 has an invalid length. [ 230.334696][T10220] macsec2: entered promiscuous mode [ 230.496853][T10233] netlink: 'syz.0.1134': attribute type 9 has an invalid length. [ 230.497066][T10233] netlink: 'syz.0.1134': attribute type 9 has an invalid length. [ 230.497240][T10233] netlink: 'syz.0.1134': attribute type 9 has an invalid length. [ 230.497412][T10233] netlink: 'syz.0.1134': attribute type 9 has an invalid length. [ 230.764842][T10259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.860359][T10263] tc action pedit offset must be on 32 bit boundaries [ 231.515569][T10296] bond10 (unregistering): Released all slaves [ 231.598332][T10302] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.745640][T10298] bond4: (slave dummy0): Enslaving as a backup interface with an up link [ 231.759777][T10302] dummy0: entered promiscuous mode [ 231.773740][T10302] bond4: (slave dummy0): Releasing backup interface [ 231.802214][T10316] vlan1: entered allmulticast mode [ 231.802237][T10316] v: entered allmulticast mode [ 232.044793][T10326] sctp: [Deprecated]: syz.0.1158 (pid 10326) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.044793][T10326] Use struct sctp_sack_info instead [ 232.424110][T10343] NCSI netlink: No device for ifindex 0 [ 234.442227][T10373] validate_nla: 66 callbacks suppressed [ 234.442246][T10373] netlink: 'syz.4.1167': attribute type 1 has an invalid length. [ 234.444984][T10376] __nla_validate_parse: 15 callbacks suppressed [ 234.445000][T10376] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1167'. [ 234.549469][T10373] 8021q: adding VLAN 0 to HW filter on device bond3 [ 234.557610][T10382] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20000 [ 234.583439][T10381] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1170'. [ 234.982965][T10410] netlink: 12127 bytes leftover after parsing attributes in process `syz.3.1176'. [ 235.233981][T10422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.305802][T10425] tipc: Enabling of bearer rejected, already enabled [ 235.331941][T10425] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 235.332493][T10427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1181'. [ 235.362352][T10427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1181'. [ 235.362622][T10427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1181'. [ 235.362847][T10427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1181'. [ 235.363108][T10427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1181'. [ 235.363330][T10427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1181'. [ 235.363579][T10427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1181'. [ 235.454892][T10430] netlink: 'syz.1.1181': attribute type 21 has an invalid length. [ 235.646123][T10439] openvswitch: netlink: Tunnel attr 13 has unexpected len 4 expected 16 [ 235.773936][T10445] block nbd0: Unsupported socket: should be TCP or UNIX. [ 235.837067][T10453] block nbd0: Unsupported socket: should be TCP or UNIX. [ 236.150870][T10466] openvswitch: netlink: IP tunnel dst address not specified [ 236.450647][T10482] xt_hashlimit: size too large, truncated to 1048576 [ 236.521773][T10485] xt_hashlimit: size too large, truncated to 1048576 [ 236.558699][T10484] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 236.585069][ T5348] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 236.946892][T10509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.256508][T10523] can: request_module (can-proto-0) failed. [ 237.383323][T10531] nbd: illegal input index -8454144 [ 237.400656][T10531] syz_tun: entered promiscuous mode [ 237.901657][T10555] xt_check_target_common: 23 callbacks suppressed [ 237.901682][T10555] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 238.186376][T10563] netlink: 'syz.1.1222': attribute type 1 has an invalid length. [ 238.500333][T10580] ipvlan0: Caught tx_queue_len zero misconfig [ 238.550339][T10586] block nbd1: not configured, cannot reconfigure [ 238.553001][T10587] xt_l2tp: invalid flags combination: 8 [ 238.568902][T10590] block nbd1: not configured, cannot reconfigure [ 239.015195][T10618] 8021q: VLANs not supported on syzkaller1 [ 239.499191][T10643] __nla_validate_parse: 75 callbacks suppressed [ 239.499214][T10643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1246'. [ 239.522718][T10656] veth0: entered promiscuous mode [ 239.547293][T10656] netlink: 'syz.2.1248': attribute type 1 has an invalid length. [ 240.056366][T10673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1253'. [ 240.056401][T10673] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 240.056636][T10673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1253'. [ 240.056654][T10673] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 240.056885][T10673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1253'. [ 240.056904][T10673] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 240.057145][T10673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1253'. [ 240.057164][T10673] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 240.057379][T10673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1253'. [ 240.057398][T10673] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 240.057746][T10673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1253'. [ 240.153673][T10673] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 240.153921][T10673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1253'. [ 240.154115][T10673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1253'. [ 240.154308][T10673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1253'. [ 240.261631][T10679] batadv_slave_0: entered promiscuous mode [ 240.363352][T10648] veth0: left promiscuous mode [ 240.380465][T10678] batadv_slave_0: left promiscuous mode [ 241.124996][T10711] bond0: (slave bond_slave_1): Releasing backup interface [ 241.159385][T10711] bond0: entered allmulticast mode [ 241.159411][T10711] bond_slave_0: entered allmulticast mode [ 241.161323][T10711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.608791][T10733] bond4 (unregistering): Released all slaves [ 242.211964][T10780] xt_MASQUERADE: bad rangesize 2147483646 [ 242.483229][T10794] netlink: 'syz.2.1291': attribute type 1 has an invalid length. [ 242.625383][T10799] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 242.696456][T10794] veth7: entered allmulticast mode [ 242.719911][T10794] bond5: (slave veth7): Enslaving as an active interface with a down link [ 242.756055][T10800] bond5: (slave veth0_to_bond): making interface the new active one [ 242.757135][T10800] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 242.901926][T10806] bond7: (slave veth0_to_bond): Releasing active interface [ 243.124997][T10826] net_ratelimit: 4 callbacks suppressed [ 243.125015][T10826] TC_ACT_REPEAT abuse ? [ 243.204637][T10831] netlink: 'syz.1.1302': attribute type 2 has an invalid length. [ 244.965388][T10916] __nla_validate_parse: 16 callbacks suppressed [ 244.965412][T10916] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1324'. [ 245.325120][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1327'. [ 245.854623][T10939] veth3: entered allmulticast mode [ 245.919504][T10942] netlink: 'syz.3.1333': attribute type 10 has an invalid length. [ 245.954730][T10942] bridge0: port 3(team0) entered disabled state [ 245.955687][T10942] team0: left allmulticast mode [ 245.955705][T10942] team_slave_1: left allmulticast mode [ 245.955758][T10942] team0: left promiscuous mode [ 245.955770][T10942] team_slave_1: left promiscuous mode [ 245.974888][T10942] bridge0: port 3(team0) entered disabled state [ 246.183927][T10942] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.201978][T10942] bond0: (slave team0): Enslaving as an active interface with an up link [ 246.246279][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1334'. [ 246.246315][T10948] netlink: 'syz.4.1334': attribute type 5 has an invalid length. [ 246.246331][T10948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1334'. [ 246.318562][T10948] geneve2: entered promiscuous mode [ 246.318588][T10948] geneve2: entered allmulticast mode [ 246.470537][ T6773] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 246.473168][ T6783] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 246.473297][ T6385] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 246.473333][ T6385] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 246.523365][T10949] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 246.581951][T10949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1335'. [ 246.696485][T10967] netlink: 'syz.0.1339': attribute type 39 has an invalid length. [ 246.718423][T10967] netlink: 'syz.0.1339': attribute type 39 has an invalid length. [ 246.720877][T10967] netlink: 'syz.0.1339': attribute type 39 has an invalid length. [ 246.724391][T10967] netlink: 'syz.0.1339': attribute type 39 has an invalid length. [ 246.726785][T10967] netlink: 'syz.0.1339': attribute type 39 has an invalid length. [ 246.764303][T10967] netlink: 'syz.0.1339': attribute type 39 has an invalid length. [ 246.767174][T10967] netlink: 'syz.0.1339': attribute type 39 has an invalid length. [ 246.787485][T10967] netlink: 'syz.0.1339': attribute type 39 has an invalid length. [ 246.850440][T10965] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 246.850687][T10965] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 247.329972][T10983] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1342'. [ 247.366216][T10984] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1342'. [ 247.551148][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1343'. [ 247.614652][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1348'. [ 247.741998][T11004] bond0: (slave team0): Releasing backup interface [ 247.777369][T11004] bridge_slave_0: left allmulticast mode [ 247.777398][T11004] bridge_slave_0: left promiscuous mode [ 247.777688][T11004] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.822666][T11004] bridge_slave_1: left allmulticast mode [ 247.822693][T11004] bridge_slave_1: left promiscuous mode [ 247.825019][T11004] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.875834][T11004] bond2: (slave veth0_to_bond): Releasing active interface [ 247.901822][T11016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1348'. [ 247.904213][T11004] bond0: (slave bond_slave_0): Releasing backup interface [ 247.953885][T11004] bond0: (slave bond_slave_1): Releasing backup interface [ 247.995749][T11004] team0: Port device team_slave_1 removed [ 248.006651][T11004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.006669][T11004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.031264][T11004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.031288][T11004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.096339][T11004] team0: Port device bridge1 removed [ 248.317407][T11021] veth3: entered promiscuous mode [ 248.363563][ T6385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.363585][ T6385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.476873][T11027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.477061][T11026] tipc: New replicast peer: 255.255.255.255 [ 248.481214][T11026] tipc: Enabled bearer , priority 10 [ 248.499794][T11031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.906293][T11052] bridge0: entered promiscuous mode [ 248.906359][T11052] bridge0: entered allmulticast mode [ 249.289240][T11080] sctp: [Deprecated]: syz.4.1370 (pid 11080) Use of int in max_burst socket option deprecated. [ 249.289240][T11080] Use struct sctp_assoc_value instead [ 249.371357][T11082] : renamed from bond_slave_0 (while UP) [ 249.608202][ T5744] tipc: Node number set to 1575620256 [ 249.678806][T11098] ip6gre1: entered allmulticast mode [ 249.718183][T11102] ip_tables: iptables: counters copy to user failed while replacing table [ 249.718486][T11102] ip_tables: iptables: counters copy to user failed while replacing table [ 249.718770][T11102] ip_tables: iptables: counters copy to user failed while replacing table [ 249.719778][T11102] ip_tables: iptables: counters copy to user failed while replacing table [ 249.720122][T11102] ip_tables: iptables: counters copy to user failed while replacing table [ 249.721594][T11102] ip_tables: iptables: counters copy to user failed while replacing table [ 249.721910][T11102] ip_tables: iptables: counters copy to user failed while replacing table [ 249.722580][T11102] ip_tables: iptables: counters copy to user failed while replacing table [ 249.723123][T11102] ip_tables: iptables: counters copy to user failed while replacing table [ 249.723413][T11102] ip_tables: iptables: counters copy to user failed while replacing table [ 250.054146][T11111] __nla_validate_parse: 11 callbacks suppressed [ 250.054169][T11111] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1383'. [ 250.055091][T11111] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1383'. [ 250.209304][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1384'. [ 250.227889][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1384'. [ 250.227929][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1384'. [ 250.716036][T11136] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 250.973067][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1397'. [ 250.973105][T11160] validate_nla: 65 callbacks suppressed [ 250.973119][T11160] netlink: 'syz.0.1397': attribute type 5 has an invalid length. [ 250.973136][T11160] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1397'. [ 251.073871][T11168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1400'. [ 251.089131][T11160] geneve3: entered promiscuous mode [ 251.089157][T11160] geneve3: entered allmulticast mode [ 251.124609][ T6771] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 251.124688][ T6771] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 251.124729][ T6771] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 251.125223][T11168] netlink: 'syz.3.1400': attribute type 4 has an invalid length. [ 251.200327][ T1113] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 251.503244][T11184] netlink: 'syz.2.1405': attribute type 1 has an invalid length. [ 251.662179][T11189] lo: entered promiscuous mode [ 251.664394][T11189] netlink: 'syz.3.1408': attribute type 2 has an invalid length. [ 251.866615][T11204] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1411'. [ 251.966197][ T1113] IPVS: starting estimator thread 0... [ 252.050181][T11207] IPVS: using max 29 ests per chain, 69600 per kthread [ 252.135009][T11218] x_tables: unsorted entry at hook 1 [ 252.135756][T11218] netlink: 856 bytes leftover after parsing attributes in process `syz.2.1417'. [ 252.367153][T11231] ieee802154 phy0 wpan0: encryption failed: -90 [ 252.678337][ T6786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.678362][ T6786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.708775][T11255] netlink: 'syz.2.1426': attribute type 10 has an invalid length. [ 252.740468][T11255] bond5: (slave veth0_to_bond): Releasing active interface [ 252.740494][T11255] bond5: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 253.015279][T11259] bridge2: entered promiscuous mode [ 253.016916][T11259] bridge2: entered allmulticast mode [ 253.030064][T11262] tipc: Enabling of bearer rejected, failed to enable media [ 253.073935][T11265] veth1_to_bond: Caught tx_queue_len zero misconfig [ 253.206230][T11269] netlink: 'syz.3.1431': attribute type 1 has an invalid length. [ 253.317423][T11269] 8021q: adding VLAN 0 to HW filter on device bond5 [ 253.325592][T11280] bond5: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 253.343613][T11280] bond5: entered allmulticast mode [ 253.412201][T11285] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 253.496000][T11280] ieee802154 phy0 wpan0: encryption failed: -126 [ 254.202651][T11312] xt_cgroup: invalid path, errno=-2 [ 254.287317][T11318] netlink: 'syz.1.1449': attribute type 83 has an invalid length. [ 254.512278][T11332] x_tables: duplicate underflow at hook 3 [ 254.632206][T11332] syzkaller1: entered promiscuous mode [ 254.632234][T11332] syzkaller1: entered allmulticast mode [ 254.918546][T11359] lo: entered promiscuous mode [ 255.091851][T11368] lo: left promiscuous mode [ 255.263888][T11372] netlink: 'syz.3.1465': attribute type 58 has an invalid length. [ 255.263913][T11372] __nla_validate_parse: 38 callbacks suppressed [ 255.263926][T11372] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1465'. [ 255.336231][T11373] netlink: 'syz.3.1465': attribute type 1 has an invalid length. [ 255.336833][T11373] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1465'. [ 255.461023][T11353] tap0: tun_chr_ioctl cmd 2148553947 [ 255.699295][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.699372][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.922761][T11391] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 255.952950][T11391] bond6 (unregistering): Released all slaves [ 256.046134][T11397] Unsupported ieee802154 address type: 0 [ 256.105420][T11406] Unsupported ieee802154 address type: 0 [ 256.481222][T11420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1479'. [ 256.774332][T11433] net_ratelimit: 31 callbacks suppressed [ 256.774355][T11433] netlink: Failed to add nicvf0 helper -22 [ 256.774403][T11433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.854288][T11448] netlink: 'syz.1.1489': attribute type 4 has an invalid length. [ 256.872998][T11448] geneve3: entered promiscuous mode [ 256.903976][T11444] sit0: mtu less than device minimum [ 257.029034][T11463] netlink: 'syz.0.1493': attribute type 12 has an invalid length. [ 257.029223][T11453] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1488'. [ 257.386282][T11482] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 257.449592][T11488] tipc: Enabling of bearer rejected, already enabled [ 257.531379][T11494] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 257.821825][T11504] bond4: option resend_igmp: invalid value (32767) [ 257.821852][T11504] bond4: option resend_igmp: allowed values 0 - 255 [ 257.825719][T11504] bond4 (unregistering): Released all slaves [ 258.220725][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1514'. [ 258.221300][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1512'. [ 258.270264][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1514'. [ 258.307299][T11524] bond0: entered allmulticast mode [ 258.307324][T11524] : entered allmulticast mode [ 258.307343][T11524] bond_slave_1: entered allmulticast mode [ 258.375570][T11548] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1517'. [ 258.407128][T11551] IPVS: length: 239 != 24 [ 258.650243][T11549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1513'. [ 258.946749][T11566] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1520'. [ 259.292596][T11576] netlink: 'syz.0.1521': attribute type 1 has an invalid length. [ 259.510771][T11575] batman_adv: batadv0: Adding interface: gretap2 [ 259.510785][T11575] batman_adv: batadv0: The MTU of interface gretap2 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.510944][T11575] batman_adv: batadv0: Interface activated: gretap2 [ 259.632054][T11591] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 260.362194][T11634] __nla_validate_parse: 5 callbacks suppressed [ 260.362216][T11634] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1537'. [ 260.362439][T11635] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1537'. [ 260.442910][T11640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1539'. [ 260.442933][T11640] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1539'. [ 260.525945][T11643] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 260.929682][T11668] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1550'. [ 260.929703][T11668] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1550'. [ 260.933490][T11670] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1550'. [ 260.933515][T11670] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1550'. [ 261.020711][T11674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.272873][T11682] netlink: 'syz.0.1554': attribute type 21 has an invalid length. [ 307.272904][T11682] IPv6: NLM_F_CREATE should be specified when creating new route [ 307.294082][T11684] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 307.313240][T11687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1557'. [ 307.362507][T11689] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1555'. [ 307.409970][T11690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1556'. [ 307.417075][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1559'. [ 307.600675][T11702] netlink: 'syz.3.1561': attribute type 2 has an invalid length. [ 308.185250][T11704] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1562'. [ 308.186367][T11705] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1562'. [ 308.211310][T11707] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1563'. [ 308.212516][T11708] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1563'. [ 308.250398][T11707] netlink: 'syz.1.1563': attribute type 11 has an invalid length. [ 308.506182][T11716] ip6t_rpfilter: unknown options [ 308.614481][T11727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1570'. [ 308.801733][T11732] veth0_to_team: Caught tx_queue_len zero misconfig [ 308.803124][T11732] syzkaller0: entered promiscuous mode [ 308.803143][T11732] syzkaller0: entered allmulticast mode [ 308.831120][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e718400: rx timeout, send abort [ 308.832049][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e718400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 308.961206][T11744] netlink: 'syz.3.1572': attribute type 32 has an invalid length. [ 309.082698][T11748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1574'. [ 309.253755][T11756] veth1_to_bond: entered allmulticast mode [ 309.467968][T11755] veth1_to_bond: left allmulticast mode [ 309.479754][T11765] netlink: 'syz.2.1578': attribute type 1 has an invalid length. [ 310.014636][T11790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 310.211979][T11801] team0 (unregistering): left promiscuous mode [ 310.212010][T11801] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 310.310692][T11801] team0 (unregistering): Port device wlan0 removed [ 310.484803][T11816] tunl0: entered promiscuous mode [ 310.487504][T11816] netlink: 'syz.0.1594': attribute type 3 has an invalid length. [ 310.697404][T11830] netlink: 'syz.2.1598': attribute type 2 has an invalid length. [ 311.482065][T11866] veth0_to_bridge: entered promiscuous mode [ 311.686624][T11883] netlink: 'syz.2.1612': attribute type 1 has an invalid length. [ 311.783098][T11863] veth0_to_bridge: left promiscuous mode [ 311.846962][T11880] bond6: (slave veth0_to_bond): making interface the new active one [ 311.857342][T11880] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 312.296885][T11906] ip_tables: iptables: counters copy to user failed while replacing table [ 312.554734][T11913] __nla_validate_parse: 12 callbacks suppressed [ 312.554757][T11913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1623'. [ 312.608868][T11916] RDS: rds_bind could not find a transport for fe88::101, load rds_tcp or rds_rdma? [ 312.884002][T11921] vlan3: entered allmulticast mode [ 312.893405][T11921] bond0: entered allmulticast mode [ 313.196637][T11945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 313.196658][T11945] IPv6: NLM_F_CREATE should be set when creating new route [ 313.196718][T11945] IPv6: NLM_F_CREATE should be set when creating new route [ 313.196744][T11945] IPv6: NLM_F_CREATE should be set when creating new route [ 313.573585][T11954] syzkaller0: entered promiscuous mode [ 313.573612][T11954] syzkaller0: entered allmulticast mode [ 313.598262][T11954] tipc: Enabled bearer , priority 0 [ 313.620534][T11954] tipc: Resetting bearer [ 313.630239][T11953] tipc: Resetting bearer [ 313.692852][T11953] tipc: Disabling bearer [ 313.694609][T11956] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1632'. [ 313.716922][T11956] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1632'. [ 313.741147][T11940] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1629'. [ 313.741669][T11940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.295445][T11990] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1640'. [ 314.309808][T11988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1642'. [ 314.311266][T11981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1641'. [ 314.311311][T11981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1641'. [ 314.725037][T12014] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1652'. [ 315.013843][T12022] syzkaller0: left promiscuous mode [ 315.013869][T12022] syzkaller0: left allmulticast mode [ 315.283626][T12040] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1661'. [ 315.668892][T12056] xt_IDLETIMER: timeout value is zero [ 315.781208][T12060] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 316.118243][T12072] bridge_slave_0: invalid flags given to default FDB implementation [ 316.225610][T12081] Cannot find map_set index 135 as target [ 316.254581][T12083] Cannot find map_set index 135 as target [ 316.480803][T12087] can: request_module (can-proto-0) failed. [ 317.131292][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.643770][T12115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.726404][T12115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.854246][T12122] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 319.160818][T12139] netlink: 'syz.4.1685': attribute type 1 has an invalid length. [ 319.205180][T12140] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 319.248087][T12146] __nla_validate_parse: 3 callbacks suppressed [ 319.248108][T12146] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1686'. [ 319.330707][T12150] netlink: 'syz.0.1689': attribute type 3 has an invalid length. [ 319.332002][T12149] netlink: 'syz.1.1688': attribute type 10 has an invalid length. [ 319.361528][T12139] bond4: (slave gretap1): making interface the new active one [ 319.362369][T12139] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 319.362567][T12149] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 319.400828][T12150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1689'. [ 319.430028][T12150] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 319.431293][T12150] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 319.436231][T12150] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1689'. [ 319.536612][T12157] ip6t_rpfilter: unknown options [ 319.790313][T12167] netlink: 'syz.2.1694': attribute type 1 has an invalid length. [ 319.809195][T12167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1694'. [ 319.847418][T12168] Bluetooth: hci0: unsupported parameter 5135 [ 319.847447][T12168] Bluetooth: hci0: unsupported parameter 8192 [ 319.847468][T12168] Bluetooth: hci0: unsupported parameter 5135 [ 319.847482][T12168] Bluetooth: hci0: unsupported parameter 8192 [ 320.223960][T12160] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1693'. [ 320.259438][T12186] SET target dimension over the limit! [ 320.350393][T12190] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1700'. [ 320.494855][T12193] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1702'. [ 320.536453][T12195] vlan1: left allmulticast mode [ 320.536477][T12195] v: left allmulticast mode [ 320.679693][T12197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1704'. [ 320.698603][T12200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1706'. [ 320.735364][T12197] 8021q: adding VLAN 0 to HW filter on device team1 [ 320.751874][T12203] netlink: Conntrack attr has 1 unknown bytes [ 320.751911][T12203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.101980][T12214] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 321.117823][T12216] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 321.252050][T12221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1713'. [ 321.257148][T12223] xt_ecn: cannot match TCP bits for non-tcp packets [ 322.022135][T12254] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 322.339626][T12258] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 322.343838][T12258] bond5 (unregistering): Released all slaves [ 323.068621][T12319] lo speed is unknown, defaulting to 1000 [ 323.187108][T12319] lo speed is unknown, defaulting to 1000 [ 323.233605][T12319] lo speed is unknown, defaulting to 1000 [ 323.983235][ T25] lo speed is unknown, defaulting to 1000 [ 323.983382][T12319] infiniband syz0: set down [ 323.983400][T12319] infiniband syz0: added lo [ 324.004714][T12319] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 324.013828][T12319] infiniband syz0: Couldn't open port 1 [ 324.014120][T12319] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 324.014153][T12319] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 324.014193][T12319] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 324.311243][T12319] RDS/IB: syz0: added [ 324.320423][T12319] smc: adding ib device syz0 with port count 1 [ 324.334434][T12319] smc: ib device syz0 port 1 has no pnetid [ 324.388586][ T5793] lo speed is unknown, defaulting to 1000 [ 324.394877][T12319] lo speed is unknown, defaulting to 1000 [ 351.294942][ C1] sched: DL replenish lagged too much [ 359.588433][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 359.647794][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 359.649803][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 359.657445][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 359.728751][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.438416][ T5619] Bluetooth: hci5: command tx timeout [ 364.488382][ T5625] Bluetooth: hci5: command tx timeout [ 365.310355][ T5625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 365.313456][ T5625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 365.314622][ T5625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 365.879121][ T5625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 365.882275][ T5625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 366.986904][ T5619] Bluetooth: hci5: command tx timeout [ 367.048859][ T5625] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 367.054571][ T5625] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 367.058010][ T5625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 367.129246][ T5625] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 367.152182][ T5625] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 367.320323][T12319] lo speed is unknown, defaulting to 1000 [ 369.053811][ T5625] Bluetooth: hci5: command tx timeout [ 369.288787][ T5625] Bluetooth: hci7: command tx timeout [ 370.055728][ T5619] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 370.065964][ T5619] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 370.078712][ T5619] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 370.329093][ T5619] Bluetooth: hci6: command tx timeout [ 370.329898][ T5619] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 370.928527][ T5619] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 371.391746][ T5619] Bluetooth: hci7: command tx timeout [ 372.447761][ T5625] Bluetooth: hci6: command tx timeout [ 373.450325][ T5625] Bluetooth: hci8: command tx timeout [ 373.451006][ T5625] Bluetooth: hci7: command tx timeout [ 374.521875][ T5619] Bluetooth: hci6: command tx timeout [ 375.727685][ T5619] Bluetooth: hci7: command tx timeout [ 375.727731][ T5619] Bluetooth: hci8: command tx timeout [ 376.577644][ T5619] Bluetooth: hci6: command tx timeout [ 377.179168][ T5614] tipc: Resetting bearer [ 378.009238][ T5619] Bluetooth: hci8: command tx timeout [ 378.910699][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.095183][ T5619] Bluetooth: hci8: command tx timeout [ 384.483616][ T5614] tipc: Disabling bearer [ 402.079194][T12319] lo speed is unknown, defaulting to 1000 [ 417.473338][ T99] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.473380][ T99] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.473409][ T99] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 430.248496][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 430.437678][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 430.442080][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 430.455915][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 430.595196][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 432.240683][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 432.659428][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 432.868886][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 433.050681][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 433.155511][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 433.367704][ T5625] Bluetooth: hci2: command tx timeout [ 435.259395][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 435.366795][ T5619] Bluetooth: hci3: command tx timeout [ 435.454339][ T5619] Bluetooth: hci2: command tx timeout [ 436.518875][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 436.678726][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 437.447674][ T5619] Bluetooth: hci3: command tx timeout [ 437.560752][ T5619] Bluetooth: hci2: command tx timeout [ 438.030917][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 438.033972][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 439.388478][ T5619] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 439.532983][ T5619] Bluetooth: hci3: command tx timeout [ 439.641200][ T5619] Bluetooth: hci2: command tx timeout [ 439.718589][ T5619] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 439.735283][ T5619] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 439.890867][ T5619] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 440.014631][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.125634][ T5619] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 440.470707][ T5625] Bluetooth: hci4: command tx timeout [ 441.658938][ T5619] Bluetooth: hci3: command tx timeout [ 442.892236][ T5632] Bluetooth: hci4: command tx timeout [ 443.115578][ T99] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.115622][ T99] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.115653][ T99] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 443.331339][T12495] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 443.631038][T12495] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 443.814059][T12495] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 443.999482][T12495] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 444.000979][T12495] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 445.107615][T12495] Bluetooth: hci4: command tx timeout [ 446.327795][ T5619] Bluetooth: hci9: command tx timeout [ 446.328630][T12495] Bluetooth: hci10: command tx timeout [ 447.287923][T12495] Bluetooth: hci4: command tx timeout [ 448.459359][T12495] Bluetooth: hci10: command tx timeout [ 448.459402][T12495] Bluetooth: hci9: command tx timeout [ 448.464393][T12319] lo speed is unknown, defaulting to 1000 [ 450.489869][T12495] Bluetooth: hci9: command tx timeout [ 450.489910][T12495] Bluetooth: hci10: command tx timeout [ 452.659472][ T5619] Bluetooth: hci10: command tx timeout [ 452.659516][ T5619] Bluetooth: hci9: command tx timeout [ 472.047074][ T99] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.047119][ T99] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.047149][ T99] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 483.446678][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 483.458067][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 483.459234][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 483.768124][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 483.770958][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 486.271461][ T5619] Bluetooth: hci1: command tx timeout [ 488.477580][ T5619] Bluetooth: hci1: command tx timeout [ 490.487604][ T5619] Bluetooth: hci1: command tx timeout [ 492.569903][ T5619] Bluetooth: hci1: command tx timeout [ 494.453897][T12495] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 494.886349][T12495] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 495.296832][T12495] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 495.333166][T12495] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 495.488770][T12495] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 495.725983][ T5619] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 495.875852][ T5619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 495.998106][ T5619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 496.207841][ T5619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 496.275649][ T5619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 497.849819][ T5619] Bluetooth: hci5: command tx timeout [ 499.359167][ T5619] Bluetooth: hci6: command tx timeout [ 499.927619][ T5619] Bluetooth: hci5: command tx timeout [ 501.181890][ T99] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.181938][ T99] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.181967][ T99] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 501.377578][ T5619] Bluetooth: hci6: command tx timeout [ 501.460973][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.047533][ T5619] Bluetooth: hci5: command tx timeout [ 503.544119][ T5619] Bluetooth: hci6: command tx timeout [ 504.087576][ T5619] Bluetooth: hci5: command tx timeout [ 505.559474][ T5625] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 505.703163][ T5625] Bluetooth: hci6: command tx timeout [ 505.877747][ T5625] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 505.917987][ T5625] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 506.090583][ T5625] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 506.094183][ T5625] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 506.307515][T12319] lo speed is unknown, defaulting to 1000 [ 506.745033][ T5625] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 506.746598][ T5625] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 506.762052][ T5625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 506.770724][T12495] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 506.870309][ T5625] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 513.080323][T12495] Bluetooth: hci8: command tx timeout [ 513.080334][ T5625] Bluetooth: hci7: command tx timeout [ 515.127653][T12495] Bluetooth: hci8: command tx timeout [ 515.128327][T12495] Bluetooth: hci7: command tx timeout [ 517.207699][ T5625] Bluetooth: hci8: command tx timeout [ 517.207818][T12495] Bluetooth: hci7: command tx timeout [ 519.297803][ T5625] Bluetooth: hci8: command tx timeout [ 519.297862][T12495] Bluetooth: hci7: command tx timeout [ 545.378826][ T99] batman_adv: batadv0: Interface deactivated: gretap1 [ 548.506132][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 549.175477][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 549.281553][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 549.368633][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 549.507568][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 552.108251][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 552.168385][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 552.239044][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 552.532908][ T5619] Bluetooth: hci2: command tx timeout [ 552.600136][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 552.705208][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 554.595653][T12495] Bluetooth: hci2: command tx timeout [ 554.808222][T12495] Bluetooth: hci3: command tx timeout [ 555.149504][T12495] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 555.658160][T12495] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 555.735334][T12495] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 555.737599][T12495] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 555.753343][T12495] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 556.677188][T12495] Bluetooth: hci2: command tx timeout [ 556.898372][T12495] Bluetooth: hci3: command tx timeout [ 557.847890][T12495] Bluetooth: hci4: command tx timeout [ 558.734149][T12495] Bluetooth: hci2: command tx timeout [ 558.970075][T12495] Bluetooth: hci3: command tx timeout [ 559.947785][T12495] Bluetooth: hci4: command tx timeout [ 561.246089][T12495] Bluetooth: hci3: command tx timeout [ 562.197620][T12495] Bluetooth: hci4: command tx timeout [ 562.704822][ T5619] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 562.707405][ T5619] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 562.723752][ T5619] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 562.927479][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.034340][ T5619] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 563.036747][ T5619] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 564.258162][ T5619] Bluetooth: hci4: command tx timeout [ 564.531002][T12495] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 564.533599][T12495] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 564.534711][T12495] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 564.536874][T12495] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 565.447656][T12495] Bluetooth: hci9: command tx timeout [ 565.778721][T12495] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 567.527544][ T5619] Bluetooth: hci9: command tx timeout [ 568.167590][ T5619] Bluetooth: hci10: command tx timeout [ 569.607683][ T5619] Bluetooth: hci9: command tx timeout [ 570.247589][ T5619] Bluetooth: hci10: command tx timeout [ 571.687655][ T5619] Bluetooth: hci9: command tx timeout [ 572.327601][ T5619] Bluetooth: hci10: command tx timeout [ 574.407555][ T5619] Bluetooth: hci10: command tx timeout [ 615.698120][T12495] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 616.308527][T12495] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 616.379233][T12495] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 618.277561][T12495] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 618.285435][T12495] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 621.287646][ T5619] Bluetooth: hci6: command 0x0406 tx timeout [ 621.369941][ T5619] Bluetooth: hci0: command tx timeout [ 623.457596][ T5625] Bluetooth: hci0: command tx timeout [ 623.497770][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 623.601615][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 623.604591][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 623.606541][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 623.629360][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 624.342395][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.936438][ T5625] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 624.943904][ T5625] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 625.040584][ T5619] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 625.167830][ T5619] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 625.228460][ T5619] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 625.543630][T12495] Bluetooth: hci0: command tx timeout [ 626.897569][ T5619] Bluetooth: hci1: command tx timeout [ 627.051110][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 627.090790][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 627.093553][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 627.099448][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 627.168360][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 627.617605][ T5619] Bluetooth: hci0: command tx timeout [ 628.407554][ T5625] Bluetooth: hci11: command tx timeout [ 629.002955][ T5625] Bluetooth: hci1: command tx timeout [ 630.492588][ T5632] Bluetooth: hci11: command tx timeout [ 631.047610][ T5632] Bluetooth: hci1: command tx timeout [ 631.448000][ T5632] Bluetooth: hci5: command tx timeout [ 631.529668][ T5632] Bluetooth: hci7: command 0x0406 tx timeout [ 631.529732][ T5632] Bluetooth: hci8: command 0x0406 tx timeout [ 632.567884][ T5625] Bluetooth: hci11: command tx timeout [ 633.167466][ T5625] Bluetooth: hci1: command tx timeout [ 633.648399][ T5619] Bluetooth: hci5: command tx timeout [ 634.111663][ T5619] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 634.677810][ T5619] Bluetooth: hci11: command tx timeout [ 635.229315][ T5619] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 635.253302][ T5619] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 635.570192][ T5619] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 635.687671][ T5619] Bluetooth: hci5: command tx timeout [ 635.887913][ T5619] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 637.777828][T12495] Bluetooth: hci5: command tx timeout [ 638.247579][T12495] Bluetooth: hci12: command tx timeout [ 640.337503][T12495] Bluetooth: hci12: command tx timeout [ 642.448652][T12495] Bluetooth: hci12: command tx timeout [ 644.487854][T12495] Bluetooth: hci12: command tx timeout [ 649.293724][ T99] batman_adv: batadv0: Removing interface: gretap1 [ 676.138397][ T99] bond0 (unregistering): (slave bridge1): Releasing active interface [ 676.138425][ T99] bond0 (unregistering): (slave bridge1): the permanent HWaddr of slave - 0e:98:e0:66:78:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 676.139406][ T99] bond0 (unregistering): (slave dummy0): making interface the new active one [ 676.139817][ T99] dummy0: entered allmulticast mode [ 677.688057][ T5632] Bluetooth: hci2: command 0x0406 tx timeout [ 677.688101][ T5632] Bluetooth: hci3: command 0x0406 tx timeout [ 679.578526][T12638] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 679.581939][T12638] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 679.583680][T12638] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 679.610362][T12638] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 679.746883][T12638] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 682.807557][T12495] Bluetooth: hci4: command 0x0406 tx timeout [ 683.624161][T12495] Bluetooth: hci13: command tx timeout [ 684.824103][ T5619] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 684.835187][ T5619] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 684.836431][ T5619] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 685.547543][ T5619] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 685.747854][ T5619] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 685.747941][ T5619] Bluetooth: hci13: command tx timeout [ 685.773753][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.428289][ T99] bond3 (unregistering): (slave bridge0): Releasing backup interface [ 687.778056][ T5619] Bluetooth: hci13: command tx timeout [ 687.851221][ T5619] Bluetooth: hci9: command 0x0406 tx timeout [ 688.618288][T12495] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 688.732310][T12638] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 689.056809][ T5625] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 689.058346][ T5625] Bluetooth: hci14: command tx timeout [ 689.330059][ T5625] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 689.331400][ T5625] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 689.857480][ T5619] Bluetooth: hci13: command tx timeout [ 690.737634][ T33] INFO: task dhcpcd:5276 blocked for more than 144 seconds. [ 690.737665][ T33] Not tainted syzkaller #0 [ 690.737678][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 690.737695][ T33] task:dhcpcd state:D stack:23400 pid:5276 tgid:5276 ppid:1 task_flags:0x400140 flags:0x00080000 [ 690.737859][ T33] Call Trace: [ 690.737894][ T33] [ 690.737912][ T33] __schedule+0x17db/0x58f0 [ 690.737975][ T33] ? __pfx___schedule+0x10/0x10 [ 690.738011][ T33] ? schedule+0x90/0x2b0 [ 690.738039][ T33] schedule+0x164/0x2b0 [ 690.738066][ T33] schedule_preempt_disabled+0x13/0x30 [ 690.738089][ T33] __mutex_lock+0x7c1/0x1550 [ 690.738122][ T33] ? __mutex_lock+0x5d4/0x1550 [ 690.738154][ T33] ? vlan_ioctl_handler+0xf0/0x630 [ 690.738196][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 690.738259][ T33] vlan_ioctl_handler+0xf0/0x630 [ 690.738306][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 690.738331][ T33] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 690.738363][ T33] ? hook_file_ioctl+0x1f2/0x600 [ 690.738412][ T33] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 690.738455][ T33] sock_ioctl+0x612/0x7e0 [ 690.738485][ T33] ? __pfx_sock_ioctl+0x10/0x10 [ 690.738522][ T33] ? bpf_lsm_file_ioctl+0x9/0x20 [ 690.738543][ T33] ? __pfx_sock_ioctl+0x10/0x10 [ 690.738569][ T33] __se_sys_ioctl+0xfc/0x170 [ 690.738600][ T33] do_syscall_64+0x166/0x520 [ 690.738624][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.738647][ T33] ? clear_bhb_loop+0x70/0xc0 [ 690.738673][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.738695][ T33] RIP: 0033:0x7f4b54569378 [ 690.738716][ T33] RSP: 002b:00007ffcfa5d3af8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 690.738738][ T33] RAX: ffffffffffffffda RBX: 000055d419d33420 RCX: 00007f4b54569378 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 690.738755][ T33] RDX: 00007ffcfa5d3b00 RSI: 0000000000008982 RDI: 000000000000000f [ 690.738769][ T33] RBP: 00007ffcfa5d3b00 R08: 0000000000000000 R09: 0000000000000000 [ 690.738790][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 690.738803][ T33] R13: 000055d419d1ec78 R14: 00007ffcfa5e3f10 R15: 000055d419d33420 [ 690.738837][ T33] [ 690.738889][ T33] INFO: task kworker/u8:15:6770 blocked for more than 144 seconds. [ 690.738905][ T33] Not tainted syzkaller #0 [ 690.738915][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 690.738925][ T33] task:kworker/u8:15 state:D stack:21800 pid:6770 tgid:6770 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 690.738982][ T33] Workqueue: events_unbound linkwatch_event [ 690.739009][ T33] Call Trace: [ 690.739016][ T33] [ 690.739029][ T33] __schedule+0x17db/0x58f0 [ 690.739079][ T33] ? __pfx___schedule+0x10/0x10 [ 690.739109][ T33] ? schedule+0x90/0x2b0 [ 690.739134][ T33] schedule+0x164/0x2b0 [ 690.739158][ T33] schedule_preempt_disabled+0x13/0x30 [ 690.739179][ T33] __mutex_lock+0x7c1/0x1550 [ 690.739208][ T33] ? __mutex_lock+0x5d4/0x1550 [ 690.739236][ T33] ? linkwatch_event+0xe/0x60 [ 690.739263][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 690.739288][ T33] ? lock_acquire+0x115/0x350 [ 690.739321][ T33] ? rcu_is_watching+0x16/0xb0 [ 690.739352][ T33] ? process_scheduled_works+0x97a/0x1630 [ 690.739382][ T33] linkwatch_event+0xe/0x60 [ 690.739407][ T33] process_scheduled_works+0xc3d/0x1630 [ 690.739481][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 690.739538][ T33] ? assign_work+0x3cf/0x5d0 [ 690.739577][ T33] worker_thread+0xa47/0xfb0 [ 690.739641][ T33] kthread+0x38b/0x480 [ 690.739667][ T33] ? __pfx_worker_thread+0x10/0x10 [ 690.739698][ T33] ? __pfx_kthread+0x10/0x10 [ 690.739724][ T33] ret_from_fork+0x514/0xb70 [ 690.739752][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 690.739783][ T33] ? __switch_to+0xc89/0x1420 [ 690.739821][ T33] ? __pfx_kthread+0x10/0x10 [ 690.739848][ T33] ret_from_fork_asm+0x1a/0x30 [ 690.739890][ T33] [ 690.739922][ T33] INFO: task syz-executor:12527 blocked for more than 144 seconds. [ 690.739939][ T33] Not tainted syzkaller #0 [ 690.739950][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 690.739961][ T33] task:syz-executor state:D stack:26616 pid:12527 tgid:12527 ppid:1 task_flags:0x400140 flags:0x00080002 [ 690.740028][ T33] Call Trace: [ 690.740036][ T33] [ 690.740050][ T33] __schedule+0x17db/0x58f0 [ 690.740089][ T33] ? __lock_acquire+0x747/0x2de0 [ 690.740129][ T33] ? __pfx___schedule+0x10/0x10 [ 690.740163][ T33] ? schedule+0x90/0x2b0 [ 690.740191][ T33] schedule+0x164/0x2b0 [ 690.740217][ T33] schedule_preempt_disabled+0x13/0x30 [ 690.740240][ T33] __mutex_lock+0x7c1/0x1550 [ 690.740273][ T33] ? __mutex_lock+0x5d4/0x1550 [ 690.740304][ T33] ? inet_rtm_newaddr+0x470/0x19f0 [ 690.740339][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 690.740380][ T33] ? __nla_parse+0x40/0x60 [ 690.740423][ T33] inet_rtm_newaddr+0x470/0x19f0 [ 690.740454][ T33] ? __kernel_text_address+0xd/0x30 [ 690.740483][ T33] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 690.740519][ T33] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 690.740574][ T33] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 690.740614][ T33] rtnetlink_rcv_msg+0x802/0xc00 [ 690.740649][ T33] ? netlink_sendmsg+0x5d4/0xb40 [ 690.740682][ T33] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 690.740726][ T33] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 690.740761][ T33] ? __lock_acquire+0x747/0x2de0 [ 690.740804][ T33] netlink_rcv_skb+0x226/0x4a0 [ 690.740831][ T33] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 690.740866][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 690.740906][ T33] ? netlink_deliver_tap+0x2e/0x1b0 [ 690.740932][ T33] ? netlink_deliver_tap+0x2e/0x1b0 [ 690.740963][ T33] netlink_unicast+0x7bd/0x940 [ 690.740999][ T33] netlink_sendmsg+0x813/0xb40 [ 690.741036][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 690.741071][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 690.741102][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 690.741128][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 690.741160][ T33] __sys_sendto+0x408/0x5a0 [ 690.741199][ T33] ? __pfx___sys_sendto+0x10/0x10 [ 690.741229][ T33] ? lockdep_hardirqs_on+0x7b/0x110 [ 690.741265][ T33] ? fput_close_sync+0x11f/0x240 [ 690.741296][ T33] ? kmem_cache_free+0x471/0x650 [ 690.741331][ T33] ? __pfx_fput_close_sync+0x10/0x10 [ 690.741372][ T33] __x64_sys_sendto+0xde/0x100 [ 690.741409][ T33] do_syscall_64+0x166/0x520 [ 690.741432][ T33] ? trace_irq_disable+0x3b/0x140 [ 690.741455][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.741487][ T33] ? clear_bhb_loop+0x70/0xc0 [ 690.741514][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.741536][ T33] RIP: 0033:0x7ff0bdb5ea0e [ 690.741553][ T33] RSP: 002b:00007fff2f24a1a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 690.741575][ T33] RAX: ffffffffffffffda RBX: 00005555626d7500 RCX: 00007ff0bdb5ea0e [ 690.741591][ T33] RDX: 0000000000000028 RSI: 00007ff0be954670 RDI: 0000000000000003 [ 690.741604][ T33] RBP: 0000000000000001 R08: 00007fff2f24a224 R09: 000000000000000c [ 690.741618][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 690.741631][ T33] R13: 0000000000000000 R14: 00007ff0be954670 R15: 0000000000000000 [ 690.741663][ T33] [ 690.741671][ T33] INFO: task syz-executor:12535 blocked for more than 144 seconds. [ 690.741686][ T33] Not tainted syzkaller #0 [ 690.741697][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 690.741706][ T33] task:syz-executor state:D stack:26560 pid:12535 tgid:12535 ppid:1 task_flags:0x400140 flags:0x00080002 [ 690.741765][ T33] Call Trace: [ 690.741778][ T33] [ 690.741791][ T33] __schedule+0x17db/0x58f0 [ 690.741841][ T33] ? __pfx___schedule+0x10/0x10 [ 690.741873][ T33] ? schedule+0x90/0x2b0 [ 690.741897][ T33] schedule+0x164/0x2b0 [ 690.741920][ T33] schedule_preempt_disabled+0x13/0x30 [ 690.741942][ T33] __mutex_lock+0x7c1/0x1550 [ 690.741970][ T33] ? __mutex_lock+0x5d4/0x1550 [ 690.741998][ T33] ? rtnl_newlink+0xc10/0x1c30 [ 690.742033][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 690.742068][ T33] ? ns_capable+0x89/0xe0 [ 690.742098][ T33] ? rtnl_nets_add+0x16c/0x300 [ 690.742119][ T33] ? rtnl_newlink+0x905/0x1c30 [ 690.742154][ T33] rtnl_newlink+0xc10/0x1c30 [ 690.742200][ T33] ? __pfx_rtnl_newlink+0x10/0x10 [ 690.742234][ T33] ? __lock_acquire+0x747/0x2de0 [ 690.742265][ T33] ? __lock_acquire+0x747/0x2de0 [ 690.742299][ T33] ? __lock_acquire+0x747/0x2de0 [ 690.742326][ T33] ? lock_acquire+0x115/0x350 [ 690.742358][ T33] ? lock_acquire+0x115/0x350 [ 690.742391][ T33] ? is_bpf_text_address+0x26/0x2b0 [ 690.742426][ T33] ? __lock_acquire+0x747/0x2de0 [ 690.742456][ T33] ? __kernel_text_address+0xd/0x30 [ 690.742480][ T33] ? unwind_get_return_address+0x4d/0x90 [ 690.742506][ T33] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 690.742530][ T33] ? arch_stack_walk+0xfb/0x150 [ 690.742566][ T33] ? lock_acquire+0x115/0x350 [ 690.742590][ T33] ? __pfx_rtnl_newlink+0x10/0x10 [ 690.742636][ T33] ? __pfx_rtnl_newlink+0x10/0x10 [ 690.742667][ T33] rtnetlink_rcv_msg+0x802/0xc00 [ 690.742698][ T33] ? netlink_sendmsg+0x5d4/0xb40 [ 690.742727][ T33] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 690.742760][ T33] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 690.742806][ T33] ? __lock_acquire+0x747/0x2de0 [ 690.742843][ T33] netlink_rcv_skb+0x226/0x4a0 [ 690.742871][ T33] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 690.742906][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 690.742945][ T33] ? netlink_deliver_tap+0x2e/0x1b0 [ 690.742971][ T33] ? netlink_deliver_tap+0x2e/0x1b0 [ 690.743003][ T33] netlink_unicast+0x7bd/0x940 [ 690.743038][ T33] netlink_sendmsg+0x813/0xb40 [ 690.743075][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 690.743110][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 690.743141][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 690.743167][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 690.743198][ T33] __sys_sendto+0x408/0x5a0 [ 690.743256][ T33] ? __pfx___sys_sendto+0x10/0x10 [ 690.743288][ T33] ? lockdep_hardirqs_on+0x7b/0x110 [ 690.743336][ T33] ? fput_close_sync+0x11f/0x240 [ 690.743366][ T33] ? kmem_cache_free+0x471/0x650 [ 690.743402][ T33] ? __pfx_fput_close_sync+0x10/0x10 [ 690.743442][ T33] __x64_sys_sendto+0xde/0x100 [ 690.743478][ T33] do_syscall_64+0x166/0x520 [ 690.743500][ T33] ? trace_irq_disable+0x3b/0x140 [ 690.743523][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.743545][ T33] ? clear_bhb_loop+0x70/0xc0 [ 690.743572][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.743593][ T33] RIP: 0033:0x7f6a0a95ea0e [ 690.743611][ T33] RSP: 002b:00007ffdc89638d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 690.743632][ T33] RAX: ffffffffffffffda RBX: 000055556f4ce500 RCX: 00007f6a0a95ea0e [ 690.743648][ T33] RDX: 000000000000002c RSI: 00007f6a0b754670 RDI: 0000000000000003 [ 690.743661][ T33] RBP: 0000000000000001 R08: 00007ffdc8963954 R09: 000000000000000c [ 690.743675][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 690.743687][ T33] R13: 0000000000000000 R14: 00007f6a0b754670 R15: 0000000000000000 [ 690.743720][ T33] [ 690.743728][ T33] INFO: task syz-executor:12536 blocked for more than 144 seconds. [ 690.743743][ T33] Not tainted syzkaller #0 [ 690.743754][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 690.743763][ T33] task:syz-executor state:D stack:26616 pid:12536 tgid:12536 ppid:1 task_flags:0x400140 flags:0x00080002 [ 690.743829][ T33] Call Trace: [ 690.743837][ T33] [ 690.743849][ T33] __schedule+0x17db/0x58f0 [ 690.743885][ T33] ? __lock_acquire+0x747/0x2de0 [ 690.743921][ T33] ? __pfx___schedule+0x10/0x10 [ 690.743952][ T33] ? schedule+0x90/0x2b0 [ 690.743976][ T33] schedule+0x164/0x2b0 [ 690.743999][ T33] schedule_preempt_disabled+0x13/0x30 [ 690.744020][ T33] __mutex_lock+0x7c1/0x1550 [ 690.744050][ T33] ? __mutex_lock+0x5d4/0x1550 [ 690.744078][ T33] ? inet_rtm_newaddr+0x470/0x19f0 [ 690.744108][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 690.744145][ T33] ? __nla_parse+0x40/0x60 [ 690.744182][ T33] inet_rtm_newaddr+0x470/0x19f0 [ 690.744210][ T33] ? __kernel_text_address+0xd/0x30 [ 690.744236][ T33] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 690.744268][ T33] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 690.744318][ T33] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 690.744345][ T33] rtnetlink_rcv_msg+0x802/0xc00 [ 690.744376][ T33] ? netlink_sendmsg+0x5d4/0xb40 [ 690.744405][ T33] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 690.744438][ T33] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 690.744472][ T33] ? __lock_acquire+0x747/0x2de0 [ 690.744509][ T33] netlink_rcv_skb+0x226/0x4a0 [ 690.744536][ T33] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 690.744571][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 690.744611][ T33] ? netlink_deliver_tap+0x2e/0x1b0 [ 690.744636][ T33] ? netlink_deliver_tap+0x2e/0x1b0 [ 690.744668][ T33] netlink_unicast+0x7bd/0x940 [ 690.744704][ T33] netlink_sendmsg+0x813/0xb40 [ 690.744740][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 690.744782][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 690.744814][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 690.744840][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 690.744881][ T33] __sys_sendto+0x408/0x5a0 [ 690.744917][ T33] ? __pfx___sys_sendto+0x10/0x10 [ 690.744946][ T33] ? lockdep_hardirqs_on+0x7b/0x110 [ 690.744979][ T33] ? fput_close_sync+0x11f/0x240 [ 690.745007][ T33] ? kmem_cache_free+0x471/0x650 [ 690.745041][ T33] ? __pfx_fput_close_sync+0x10/0x10 [ 690.745078][ T33] __x64_sys_sendto+0xde/0x100 [ 690.745113][ T33] do_syscall_64+0x166/0x520 [ 690.745134][ T33] ? trace_irq_disable+0x3b/0x140 [ 690.745156][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.745176][ T33] ? clear_bhb_loop+0x70/0xc0 [ 690.745201][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.745221][ T33] RIP: 0033:0x7fa9aed5ea0e [ 690.745238][ T33] RSP: 002b:00007ffde6bda1c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 690.745257][ T33] RAX: ffffffffffffffda RBX: 000055557c503500 RCX: 00007fa9aed5ea0e [ 690.745272][ T33] RDX: 0000000000000028 RSI: 00007fa9afb54670 RDI: 0000000000000003 [ 690.745285][ T33] RBP: 0000000000000001 R08: 00007ffde6bda244 R09: 000000000000000c [ 690.745297][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 690.745310][ T33] R13: 0000000000000000 R14: 00007fa9afb54670 R15: 0000000000000000 [ 690.745339][ T33] [ 690.745375][ T33] [ 690.745375][ T33] Showing all locks held in the system: [ 690.745386][ T33] locks held by kworker/u8:0/12: 4, last CPU#0: [ 690.745400][ T33] #0: ffff88807f43e140 ((wq_completion)krds_cp_wq#2/5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 690.745459][ T33] #1: ffffc90000117c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 690.745515][ T33] #2: ffff888052245880 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 690.745568][ T33] #3: ffff888051209d60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 690.745621][ T33] locks held by kworker/u8:1/13: 3, last CPU#0: [ 690.745635][ T33] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 690.745690][ T33] #1: ffffc90000127c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 690.745747][ T33] #2: ffff88802bf2c258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 690.745807][ T33] locks held by kworker/u8:2/32: 4, last CPU#0: [ 690.745821][ T33] #0: ffff88807f43a940 ((wq_completion)krds_cp_wq#2/2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 690.745876][ T33] #1: ffffc90000a87c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 690.745952][ T33] #2: ffff888052246180 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 690.746007][ T33] #3: ffff888056f5c5e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 690.746064][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 690.746078][ T33] #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 690.746132][ T33] locks held by kworker/u8:4/59: 4, last CPU#0: [ 690.746147][ T33] #0: ffff88807f43f940 ((wq_completion)krds_cp_wq#2/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 690.746206][ T33] #1: ffffc9000200fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 690.746265][ T33] #2: ffff888052246780 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 690.746320][ T33] #3: ffff888054936e60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 690.746378][ T33] locks held by kworker/u8:5/99: 5, on CPU#0: [ 690.746394][ T33] #0: ffff88801d2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 690.746455][ T33] #1: ffffc9000204fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 690.746516][ T33] #2: ffffffff91247228 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 690.746579][ T33] #3: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 690.746642][ T33] #4: ffffffff8fd62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 690.746711][ T33] locks held by kworker/u8:7/1113: 2, last CPU#0: [ 690.746726][ T33] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 690.746821][ T33] #1: ffffc900052c7c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 690.746897][ T33] locks held by dhcpcd/5276: 2, on CPU#1: [ 690.746912][ T33] #0: ffffffff91236ae0 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5eb/0x7e0 [ 690.746966][ T33] #1: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xf0/0x630 [ 690.747034][ T33] locks held by kworker/0:3/5348: 3, on CPU#0: [ 690.747066][ T33] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 690.747131][ T33] #1: ffffc9000350fc40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 690.747195][ T33] #2: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x6f/0x770 [ 690.747258][ T33] locks held by getty/5372: 2, on CPU#0: [ 690.747273][ T33] #0: ffff8880374b90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 690.747331][ T33] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 691.187545][ T5625] Bluetooth: hci14: command tx timeout [ 691.444718][ T99] bond1 (unregistering): Released all slaves [ 691.650193][ T33] locks held by syz-executor/5604: 2, last CPU#1: [ 691.650218][ T33] #0: ffff88807a104cc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 691.650274][ T33] #1: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 691.650333][ T33] locks held by kworker/u9:2/5619: 3, on CPU#0: [ 691.650347][ T33] #0: ffff88807a07f140 ((wq_completion)hci10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 691.650403][ T33] #1: ffffc90003dffc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 691.650458][ T33] #2: ffff8880742bcea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 691.650523][ T33] locks held by kworker/u8:10/6373: 3, last CPU#0: [ 691.650539][ T33] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 691.650621][ T33] #1: ffffc900031afc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 691.650681][ T33] #2: ffff88807be99258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 691.650741][ T33] locks held by kworker/u8:11/6374: 2, last CPU#0: [ 691.650757][ T33] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 691.650823][ T33] #1: ffffc900025b7c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 691.650877][ T33] locks held by kworker/u8:12/6375: 2, on CPU#0: [ 691.650891][ T33] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 691.650944][ T33] #1: ffffc9000246fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 691.651020][ T33] locks held by kworker/u8:14/6769: 2, on CPU#1: [ 691.651035][ T33] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 691.651092][ T33] #1: ffffc9000df9fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 691.651151][ T33] locks held by kworker/u8:15/6770: 3, on CPU#0: [ 691.651166][ T33] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 691.651223][ T33] #1: ffffc9000e247c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 691.651280][ T33] #2: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 691.651336][ T33] locks held by kworker/u8:16/6771: 3, on CPU#1: [ 691.651351][ T33] #0: ffff8880331e9140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 691.651416][ T33] #1: ffffc9000e14fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 691.651471][ T33] #2: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 691.651537][ T33] locks held by kworker/u8:17/6772: 4, last CPU#0: [ 691.651552][ T33] #0: ffff88807f438940 ((wq_completion)krds_cp_wq#2/1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 691.651618][ T33] #1: ffffc9000df1fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 691.651676][ T33] #2: ffff888052246480 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 691.651731][ T33] #3: ffff88807bb945e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 691.651788][ T33] locks held by kworker/u8:19/6778: 3, last CPU#0: [ 691.651802][ T33] #0: ffff888033dfa940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 691.651859][ T33] #1: ffffc9000e277c40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 691.651928][ T33] #2: ffff88803416b1c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xd4/0xfc0 [ 691.651989][ T33] locks held by kworker/u8:21/6783: 3, last CPU#0: [ 691.652003][ T33] #0: ffff888035064140 ((wq_completion)krds_cp_wq#2/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 691.652057][ T33] #1: ffffc9000e2b7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 691.652127][ T33] #2: ffff888052245280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 691.652183][ T33] locks held by kworker/u8:22/6784: 4, last CPU#1: [ 691.652198][ T33] #0: ffff88807f43e940 ((wq_completion)krds_cp_wq#2/4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 691.652254][ T33] #1: ffffc9000e2c7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 691.652312][ T33] #2: ffff888052245b80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 691.652367][ T33] #3: ffff888056f58260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 691.652423][ T33] locks held by kworker/u8:23/6785: 4, last CPU#0: [ 691.652437][ T33] #0: ffff88807f43c940 ((wq_completion)krds_cp_wq#2/6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 691.652495][ T33] #1: ffffc9000e2d7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 691.652553][ T33] #2: ffff888052245580 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 691.652614][ T33] #3: ffff88805491e0e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 691.652669][ T33] locks held by kworker/u8:24/6786: 2, last CPU#1: [ 691.652684][ T33] #0: ffff8880767a0940 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 691.652747][ T33] #1: ffffc9000e2e7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 691.652813][ T33] locks held by syz.3.1743/12319: 1, on CPU#0: [ 691.652828][ T33] #0: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 691.652885][ T33] locks held by syz-executor/12527: 1, on CPU#1: [ 691.652900][ T33] #0: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 691.652956][ T33] locks held by syz-executor/12535: 1, on CPU#1: [ 691.652971][ T33] #0: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 691.653033][ T33] locks held by syz-executor/12536: 1, on CPU#0: [ 691.653047][ T33] #0: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 691.653103][ T33] locks held by syz-executor/12572: 1, on CPU#1: [ 691.653118][ T33] #0: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 691.653174][ T33] locks held by syz-executor/12575: 1, on CPU#0: [ 691.653189][ T33] #0: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 691.653244][ T33] locks held by syz-executor/12581: 1, on CPU#1: [ 691.653258][ T33] #0: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 691.653314][ T33] locks held by syz-executor/12589: 1, on CPU#0: [ 691.653329][ T33] #0: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 691.653385][ T33] locks held by syz-executor/12591: 1, on CPU#1: [ 691.653399][ T33] #0: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 691.653455][ T33] locks held by syz-executor/12606: 1, on CPU#1: [ 691.653470][ T33] #0: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 691.653525][ T33] locks held by syz-executor/12610: 1, on CPU#1: [ 691.653539][ T33] #0: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 691.653611][ T33] locks held by syz-executor/12611: 1, on CPU#0: [ 691.653625][ T33] #0: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 691.653678][ T33] locks held by syz-executor/12613: 1, on CPU#1: [ 691.653691][ T33] #0: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 691.653744][ T33] locks held by syz-executor/12627: 1, on CPU#0: [ 691.653757][ T33] #0: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 691.653810][ T33] locks held by syz-executor/12635: 4, last CPU#1: [ 691.653824][ T33] #0: ffffffff8fe36530 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 691.653876][ T33] #1: ffff8880222eb440 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 691.653923][ T33] #2: ffff88807895b440 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 691.653975][ T33] #3: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 691.654049][ T33] locks held by modprobe/12649: 2, last CPU#1: [ 691.654064][ T33] #0: ffff88807f6f5900 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 691.654112][ T33] #1: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 691.654172][ T33] locks held by modprobe/12650: 2, last CPU#1: [ 691.654186][ T33] #0: ffff888078959bc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 691.654234][ T33] #1: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 691.654297][ T33] [ 691.654303][ T33] ============================================= [ 691.654303][ T33] [ 691.654333][ T33] NMI backtrace for cpu 0 [ 691.654459][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 691.654482][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 691.654495][ T33] Call Trace: [ 691.654505][ T33] [ 691.654514][ T33] dump_stack_lvl+0xe8/0x150 [ 691.654557][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 691.654586][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 691.654626][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 691.654658][ T33] sys_info+0x135/0x170 [ 691.654683][ T33] watchdog+0xfd7/0x1030 [ 691.654712][ T33] ? watchdog+0x1c7/0x1030 [ 691.654740][ T33] kthread+0x38b/0x480 [ 691.654761][ T33] ? __pfx_watchdog+0x10/0x10 [ 691.654780][ T33] ? __pfx_kthread+0x10/0x10 [ 691.654801][ T33] ret_from_fork+0x514/0xb70 [ 691.654824][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 691.654843][ T33] ? __switch_to+0xc89/0x1420 [ 691.654873][ T33] ? __pfx_kthread+0x10/0x10 [ 691.654895][ T33] ret_from_fork_asm+0x1a/0x30 [ 691.654928][ T33] [ 691.654935][ T33] Sending NMI from CPU 0 to CPUs 1: [ 691.654995][ C1] NMI backtrace for cpu 1 [ 691.655006][ C1] CPU: 1 UID: 0 PID: 6784 Comm: kworker/u8:22 Not tainted syzkaller #0 PREEMPT(full) [ 691.655025][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 691.655035][ C1] Workqueue: krds_cp_wq#2/4 rds_connect_worker [ 691.655062][ C1] RIP: 0010:hrtimer_run_softirq+0x10f/0x2e0 [ 691.655080][ C1] Code: 48 8d 7b 48 48 89 ee 4c 89 ea 4c 89 e1 e8 39 ab 00 00 49 89 c7 48 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 48 89 ef e8 17 55 84 00 4c 8b b3 a8 01 00 00 48 8d ab a8 03 [ 691.655094][ C1] RSP: 0018:ffffc90000a18f18 EFLAGS: 00000046 [ 691.655112][ C1] RAX: 1ffff110170a5085 RBX: ffff8880b8528280 RCX: dffffc0000000000 [ 691.655124][ C1] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 000000a107065457 [ 691.655136][ C1] RBP: ffff8880b8528428 R08: 0000000000000100 R09: 0000000000000001 [ 691.655146][ C1] R10: dffffc0000000000 R11: fffff520001431d0 R12: ffff8880b8528528 [ 691.655158][ C1] R13: ffff8880b85284a8 R14: 0000000000000283 R15: 000000a107065457 [ 691.655170][ C1] FS: 0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 691.655183][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 691.655194][ C1] CR2: 00007fb6486a0e9c CR3: 000000000fb48000 CR4: 00000000003526f0 [ 691.655208][ C1] Call Trace: [ 691.655214][ C1] [ 691.655222][ C1] handle_softirqs+0x226/0x860 [ 691.655245][ C1] ? do_softirq+0x77/0xd0 [ 691.655268][ C1] ? __inet6_bind+0x386/0xf30 [ 691.655288][ C1] do_softirq+0x77/0xd0 [ 691.655308][ C1] [ 691.655313][ C1] [ 691.655318][ C1] __local_bh_enable_ip+0x100/0x140 [ 691.655340][ C1] __inet6_bind+0x386/0xf30 [ 691.655365][ C1] kernel_bind+0x13e/0x1c0 [ 691.655384][ C1] ? __pfx_kernel_bind+0x10/0x10 [ 691.655409][ C1] ? rds_tcp_conn_path_connect+0x336/0x920 [ 691.655430][ C1] rds_tcp_conn_path_connect+0x53b/0x920 [ 691.655455][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 691.655496][ C1] ? lock_acquire+0x115/0x350 [ 691.655519][ C1] rds_connect_worker+0x1d8/0x290 [ 691.655546][ C1] ? process_scheduled_works+0x97a/0x1630 [ 691.655569][ C1] process_scheduled_works+0xc3d/0x1630 [ 691.655607][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 691.655634][ C1] ? assign_work+0x3cf/0x5d0 [ 691.655658][ C1] worker_thread+0xa47/0xfb0 [ 691.655695][ C1] kthread+0x38b/0x480 [ 691.655711][ C1] ? __pfx_worker_thread+0x10/0x10 [ 691.655733][ C1] ? __pfx_kthread+0x10/0x10 [ 691.655750][ C1] ret_from_fork+0x514/0xb70 [ 691.655768][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 691.655783][ C1] ? __switch_to+0xc89/0x1420 [ 691.655808][ C1] ? __pfx_kthread+0x10/0x10 [ 691.655824][ C1] ret_from_fork_asm+0x1a/0x30 [ 691.655848][ C1] [ 691.655977][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 694.496706][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 694.505846][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 694.515930][ T33] Call Trace: [ 694.519232][ T33] [ 694.522194][ T33] vpanic+0x56d/0xa60 [ 694.526251][ T33] ? __pfx_vpanic+0x10/0x10 [ 694.530808][ T33] ? console_srcu_read_unlock+0x3a/0x60 [ 694.536387][ T33] panic+0xc5/0xd0 [ 694.540146][ T33] ? __pfx_panic+0x10/0x10 [ 694.544685][ T33] ? wq_watchdog_touch+0xf9/0x160 [ 694.549757][ T33] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 694.555962][ T33] watchdog+0x1030/0x1030 [ 694.560327][ T33] ? watchdog+0x1c7/0x1030 [ 694.564789][ T33] kthread+0x38b/0x480 [ 694.568885][ T33] ? __pfx_watchdog+0x10/0x10 [ 694.573592][ T33] ? __pfx_kthread+0x10/0x10 [ 694.578232][ T33] ret_from_fork+0x514/0xb70 [ 694.582879][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 694.588022][ T33] ? __switch_to+0xc89/0x1420 [ 694.592744][ T33] ? __pfx_kthread+0x10/0x10 [ 694.597392][ T33] ret_from_fork_asm+0x1a/0x30 [ 694.602202][ T33] [ 694.605498][ T33] Kernel Offset: disabled [ 694.609864][ T33] Rebooting in 86400 seconds..