last executing test programs: 18.058821144s ago: executing program 4 (id=2096): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x100, 0x70bd28, 0x25dfdbff, {0x1, 0x1, 0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close(0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYRES32=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, &(0x7f0000000180)=0x6, r2, &(0x7f00000001c0)=0x1, 0x8, 0x2) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x9}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x2}]}}}]}, 0x4c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.047760064s ago: executing program 2 (id=2097): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14, 0x80800) getsockname$packet(r0, &(0x7f0000000100), &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) 17.8870038s ago: executing program 1 (id=2100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) close(r1) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000002c0)={0xa, 0x0, 0x2, @mcast2, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="50f92593a3b8ba82be3964d7d0b9d66942df", 0x12}], 0x1}}], 0x2, 0x40000000) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)=""/52, 0x34}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4079, 0xfef}, {&(0x7f00000002c0)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) 17.881345454s ago: executing program 4 (id=2101): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x3400) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'gretap0\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4805}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) syz_init_net_socket$ax25(0x3, 0x5, 0xcf) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000480), &(0x7f00000004c0), 0x1000000}, 0x20) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x0, r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x13, &(0x7f0000000300)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 64) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010029bd7012fddbdf251100"], 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x8804) (async, rerun: 64) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711091ff0000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async) syz_emit_ethernet(0x7b, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa4081004300080045000069000000000000907864010100ac141437445a97777ad1ebdf69bbf0d1b64d677a0caaa73479d1b6f0496609b0267fc7c474d867435c4c0e824e4dae0bc0b440b9703d5682e2fc30f2ff7c470b9dd83cae49eda25ba50a7b6f9f40a45b647d4c1dd70529a34e"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) setsockopt$packet_int(r6, 0x107, 0x13, &(0x7f0000000400)=0x2, 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r9, 0x0, r8, 0x0, 0x8000f25, 0x0) (async) openat$cgroup_ro(r7, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) 17.874526571s ago: executing program 2 (id=2102): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000032c0), 0x40, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000003300)={'veth1_virt_wifi\x00', 0x100}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000013000100000000000000000807000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c000880"], 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 17.699489348s ago: executing program 4 (id=2105): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000052000100fcff0000000000001c"], 0x18}}, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) recvfrom$llc(r0, &(0x7f0000000240)=""/181, 0xb5, 0xc1, &(0x7f0000000140)={0x1a, 0x1, 0x0, 0xa9, 0x4, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000003c0)=@get={0x1, &(0x7f0000000300)=""/156, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000050000000000000000711251000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000400)={0x2}) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) 17.62146599s ago: executing program 2 (id=2106): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x5c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x439d36def3b3066b, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x3c, 0x4, 0x0, 0x3504, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="74000000100003050000000000000a1a90e30000", @ANYRES32=0x0, @ANYBLOB="00000000010000004c0012800c0001006d6163766c616e003c00028008000100100000001c00058018000400aaaaaaaaaabb000002000400d8928a2ced1fe60008000300030000000a000400aa"], 0x74}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000200)={0x40, r3, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "fa32a328bb46f9b4ad66621684"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd70000000001f29000000180001801400020064756d6d7930"], 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r7, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x800) 17.526087759s ago: executing program 3 (id=2108): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000003c0)="2000000012005f0214f9f4070000fbe40a000000000085b5ca8d7c10277582b9", 0x20) recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x845) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x25, &(0x7f0000000000), 0x20000010) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000040)) 17.41265555s ago: executing program 3 (id=2109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040001}, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r2, 0x1, 0x2, &(0x7f0000000040), 0x10) 17.279967954s ago: executing program 3 (id=2110): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, &(0x7f00000001c0)=@xdp, &(0x7f00000002c0)=0x80, 0x0) (async) r2 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@xdp, &(0x7f00000002c0)=0x80, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000300)) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETGROUP(r3, 0x400454ce, 0xffffffffffffffff) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) unshare(0xc060c00) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) bind$rds(r5, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @mcast2, 0x3}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, 0x1, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async) sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, 0x1, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r9) sendmsg$NFC_CMD_LLC_SET_PARAMS(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bd7000fedbdf251000000008000100", @ANYRES32, @ANYBLOB="06001100259b"], 0x24}, 0x1, 0x0, 0x0, 0x40488d0}, 0x20040880) (async) sendmsg$NFC_CMD_LLC_SET_PARAMS(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bd7000fedbdf251000000008000100", @ANYRES32, @ANYBLOB="06001100259b"], 0x24}, 0x1, 0x0, 0x0, 0x40488d0}, 0x20040880) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000e700000e00000000180003b500003b89654119b57ef154f196a687a89b6b5bcf00000000bec7bc0d7013e55e730e69745264997bb9ef7e48ffbb71c5bb3eba138b9454a36df53d93c62afd8b7a0c84e2a2f440552afc33fdab20fe403bea3f9bf7f31929007f684aae9cfe81c981ad8ad5b35edb261b5b9390dfacf39b659336c2bb2f3ae3aaa454479c214b7b90a85caa8cf400541c929650812bb3aa941b045602321c65bb04b3059b4e3d1b6a3c287f3f14821eda27d1f3edccf5431549ceb5b18b58d4d5e3a4908f4d39d3cb99f71c6f61bd125a3bb90c86a90b", @ANYRES32=r11, @ANYBLOB="080026006c0900000800a000090000000800270002000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/88, 0x58}, {&(0x7f00000003c0)=""/3, 0x3}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000680)=""/247, 0xf7}, {&(0x7f0000000540)=""/122, 0x7a}, {&(0x7f0000000780)=""/148, 0x94}], 0x7}, 0x0) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/88, 0x58}, {&(0x7f00000003c0)=""/3, 0x3}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000680)=""/247, 0xf7}, {&(0x7f0000000540)=""/122, 0x7a}, {&(0x7f0000000780)=""/148, 0x94}], 0x7}, 0x0) 17.204518641s ago: executing program 0 (id=2112): r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) r1 = socket$kcm(0x29, 0x5, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004b0000000e0001"], 0x34}}, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0xfffffffffffffffd) r4 = socket$igmp6(0xa, 0x3, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8000, r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r6) sendmsg$NFC_CMD_ACTIVATE_TARGET(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040084}, 0x4008) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f00000000c0)={0x3, 'ip_vti0\x00', {0xbc}, 0x10}) (async, rerun: 64) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x80}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f0000000000)={0x6, 'wg0\x00', {0x8}, 0x9}) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xf8, r3, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x2041) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0x201}, 0x18}}, 0x0) 16.155707096s ago: executing program 4 (id=2113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYRES16=0x0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESHEX=r0], 0x7c}}, 0x20048800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="580000000206010300000000000000000000000005000400000000000900020073797a32000000000900020073797a3000000000050005000a000000050001000600000012000300686173683a6e65742c706f7274000000f3efaeda606fdba73e7f66d80fa0112b9ae65e634a384e22068386b4556b7fc344abb02f94573ef735f031c04c4a34b56fbeeaeaebd32d74244bd6321aea9888ec4a8039001a09a9cd57acce39c21028c1adc2b74215fc22a0f9934dcdb95d494b900f4ca490dd46c8c7a76208ed70ed7d2806ddca9468759b517cb93f0ce9a1ff15af3fc6aaf5cedd34a241e4"], 0x58}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x15, 0x0, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r0, 0x3, 0x2, 0x1470}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@exit]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0x11, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@alu={0x4, 0x1, 0x7, 0x4, 0x5, 0xfffffffffffffff4, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xffffff43, 0x0, 0x0, 0x69b259d37b151743, 0x6, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x6, 0x2c000}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) 16.063180193s ago: executing program 2 (id=2114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48182, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x80) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x109400, 0x0) close(r4) (async) r5 = socket$igmp(0x2, 0x3, 0x2) poll(&(0x7f00000001c0)=[{r5, 0x4000}], 0x1, 0x9) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x20, &(0x7f0000000180), &(0x7f0000000140)=0x3) (async) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000280)=0x1) setsockopt$MRT_FLUSH(r5, 0x0, 0xd0, 0x0, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x7, 0xfffffdfd, 0x200006}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x8e4763e2024e8009}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16.062695033s ago: executing program 1 (id=2115): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}]}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(r1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x5b, 0x2, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xb, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1}, [@generic={0x6, 0x2, 0x1, 0xe000, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}]}, &(0x7f0000000000)='syzkaller\x00', 0x4e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.050370214s ago: executing program 0 (id=2116): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4008010) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8916, 0x0) r4 = accept(r0, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000140)=0x80) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x3c, 0x0, 0x8, 0x70bd27, 0x25dffbfd, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x800) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000640)=0x1, 0x4) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r6) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000c60451ad1187e564e55d2994e91317326bf978dd0b64595a9d45db4cd474fce9bd9aacb3dfff6cf124890d4e7c937abf7fc26575e57ad3ccf88f3a88e31638f80dc07ffaf8fdeaf8cb6cede76dd58989c4031bb555e2dcbd34364b8351fc80f3a68441296edf1bf7eb8c5a98596b34cf96787689e8d0e46f395ef33145965dd71db458374e3a0b0b57d41d39118ebb8ea1c95348d3ff6b19896dba5ae583661325949785d54193ffe898578e0cf66a1f41162c92e7398fb03da552696824ead0c3cd57d8ec825ffcd293bd0039b2f37a4c8cce4f9e05c0002419f3c704b1c5fb24d19cdb91124954e77e290b36eb819bf1b6aa2262c37167", @ANYRES16=r7, @ANYBLOB="010025bd7000fddbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x844) (async) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r8, &(0x7f0000000a80)="87", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000140)={0x0, 0xe67}, 0x8) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket(0x2, 0x80805, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r11) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, r12, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x4, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x0, 0x10, 0x0, 0xd, 0x8, 0xfff9]}}]}]}]}, 0x38}}, 0x2400c090) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r12, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x12}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004840}, 0x4000) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r14, 0x2b5}, 0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f00000003c0)={r14, @in6={{0xa, 0x4e20, 0x9, @mcast1, 0x2}}, [0x0, 0x80000000, 0x7f, 0xb, 0x7, 0x2, 0xc, 0x10, 0x2, 0x6, 0x7, 0x2, 0x8000, 0x9, 0xfff]}, &(0x7f00000004c0)=0x100) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, r7, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000) 16.018932767s ago: executing program 4 (id=2117): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r1, @ANYBLOB="140012800c0001006d616376746170000400028008000500", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8040886) r4 = socket(0x840000000002, 0x3, 0x100) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7}, 0x18) sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) setsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f0000000280)=0x1, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r7, {0x10fff76269569481, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r5) setsockopt$inet_msfilter(r4, 0x0, 0x30, 0x0, 0x2000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) 15.951427168s ago: executing program 3 (id=2118): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000ae0000009500000000000000ac10b336c4d785f117ccb12b9ed4cdc7f22bccdd2b788e41db779b1127f4afc8bfbfdb3759"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) 15.925837756s ago: executing program 0 (id=2119): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r1, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4078, 0xfee}, {&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f0000000100)=""/120, 0x78}, {&(0x7f0000000180)=""/226, 0xe2}], 0x4}, 0x5}], 0x1, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x9, 0x30}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}}}, 0x84) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x2408c004}, 0x4848) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3800000006dd01040000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002140000001100010000000000000000000700000a7a02014377e249e38c47785cf8049257cede322ebc7471fd18a6fe8d17cd62d3c4af24fea97de37b806b9ce8411d79c4e0d1729e8d46d2e4948a040089795d8c8934a9ae9834ca877afd06f259b3438214efdb50147ec7147cd175a663a21118624006822b5479cb193a10987057e61f39c93b35944529aa92daad69be170a15f4fdf71d87b63ce9d2"], 0x60}}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0xfff1}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 15.886993276s ago: executing program 1 (id=2120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000feb9df257200000008000300", @ANYRES32=r2, @ANYBLOB], 0x5c}}, 0x8050) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x2, 0x9, 0xbed, 0xe2a, 0x66, 0x1cba, 0x4}, 0x9c) 15.807313663s ago: executing program 3 (id=2121): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, 0x0, 0xffffffffffffff7e, 0x0, 0x0, 0x1}, 0x28) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={@empty, 0x3c, r3}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5e}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x41) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, 0x0, 0xffffffffffffff7e, 0x0, 0x0, 0x1}, 0x28) (async) socket$igmp6(0xa, 0x3, 0x2) (async) socket(0x2a, 0x2, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={@empty, 0x3c, r3}) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x2}, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, 0x0, 0x0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5e}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x41) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0) (async) 15.807028786s ago: executing program 2 (id=2122): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000001c0)=0x8, 0x4) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) (async) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) (async) close(0x4) (async) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) 15.665322108s ago: executing program 1 (id=2123): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111cc000000000006000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x9}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r1, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) (async) bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111cc000000000006000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x9}, 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r1, 0x1}, 0x20) (async) 15.645014577s ago: executing program 2 (id=2124): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000040)="c1", 0xfe41) poll(&(0x7f0000000180)=[{r2, 0x4}], 0x1, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) 15.499502196s ago: executing program 0 (id=2125): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x22, 0x0, &(0x7f0000000000)) 15.497491009s ago: executing program 4 (id=2126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, &(0x7f0000000240)) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010200000000000000000000000005000100070000000c0007800800120000f5ff00050004000000000005000500020000220900020073797a310000000011000300686173683a6e65742c6e6574"], 0x58}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f0000000040)=r5, 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x44, &(0x7f00000000c0), 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r7) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x44, r8, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0xffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}}, 0x20}}, 0x0) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x43, 0x2}, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r12, 0x1, 0xfffffffc, 0x0, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x6472333b}}}}, 0x30}}, 0x20000040) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x154, 0x1, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_ID={0x8}, @CTA_FILTER={0x3c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1c04}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x670}]}, @CTA_NAT_DST={0x4}, @CTA_LABELS_MASK={0x1c, 0x17, [0x1, 0x34be, 0x8, 0x1, 0x401, 0x4]}, @CTA_NAT_DST={0x90, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}]}, @CTA_NAT_DST={0x34, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xb}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @CTA_MARK_MASK={0x8}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_ZONE={0x6}]}, 0x154}, 0x1, 0x0, 0x0, 0x50}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x319203, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'mac\x00'}, @NFTA_MATCH_NAME={0xc, 0x1, 'udplite\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xec}}, 0x0) 15.488988172s ago: executing program 0 (id=2127): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) 15.447167409s ago: executing program 1 (id=2128): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@local, @in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000a, 0x8032, 0xffffffffffffffff, 0x0) 15.391297631s ago: executing program 0 (id=2129): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1ffffffffffffe31, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xfffffffc, '\x00', r3, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000940)="48f3a6d09ef7d0010d3c33092b0c51188147167bb8642b28a7aeb6bb9b0580d67933c0e8a8452b5de90708da802756a9b74addd720afbf9f682ac44cb12b39633827f6f0a550084bce60c63641ade717f8f2f70738ee0c6ed3054123eee95fcfdf94b6810527be24c314d266756a01cc228713e52d324107a93178f10bdfd06cee628b406509994276a1bc695632aafb42f70dc29f6a0770e3bc310f2105", 0x9e}, {&(0x7f0000000700)="b558adee7f6146bc37c8a7712e286dc559ff1afcfa1b9c8ee36a059a361f93db", 0x20}], 0x2) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvfrom$unix(r6, &(0x7f0000000200)=""/189, 0xbd, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000000b06050000000000000020000000000005000100070000000900020073797a3100000000040007"], 0x2c}}, 0x0) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7) 14.910607352s ago: executing program 1 (id=2130): r0 = socket(0x26, 0x1, 0x1) r1 = socket$inet(0x2, 0x5, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xbc, r2, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "63b40670af103f172620fde6f0add95b"}, @NL80211_ATTR_SSID={0x16, 0x34, @random="a3045987aee89d9f41e0508eeea79604bb4f"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="009e045f5428"}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_PMKID={0x14, 0x55, "25ad623daf6a961fc725b98ca0efde52"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_SSID={0x6, 0x34, @random="fc11"}, @NL80211_ATTR_PMK={0x14, 0xfe, "f6f859946a8a2eea66792936d8304392"}, @NL80211_ATTR_PMKID={0x14, 0x55, "175d3eeefe47f3793873818195dc071d"}, @NL80211_ATTR_PMK={0x14, 0xfe, "5dda62ace7af64602563cd643f71dcbc"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000404}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@getchain={0x2c, 0x66, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffff, 0x3}, {0xf, 0xd}, {0xa, 0x1}}, [{0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x20000054) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000440)=@req={0x28, &(0x7f0000000400)={'veth0\x00', @ifru_data=&(0x7f00000003c0)="fc5aeb449471b50354d4f2ea6ef4f4d57d36fcd29f3a669cc98e4b757af54b8a"}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x60000045) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl0\x00', r4, 0x4, 0x82, 0x6, 0xda3d, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x1, 0x2940fd0ca3103884, 0xf7, 0x2}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f00000006c0)={0x3a0, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0xc8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r6}, {0x1e0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r4}}}]}}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x20008001}, 0x800) r7 = accept$packet(r0, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000b40)=0x14) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000b80)={{0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, 0x400}, {0xa, 0x4e20, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000001}, 0xffffffffffffffff, {[0xfffffffc, 0x8, 0x2, 0x2, 0xfffffffd, 0x5, 0x40, 0xd]}}, 0x5c) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xc8, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6d}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x101}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xbaf}, @chandef_params, @NL80211_ATTR_DURATION={0x8, 0x57, 0x800}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ac}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xdfac}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffff8b}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x363}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x10) connect$unix(r0, &(0x7f0000000dc0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000ec0)={r0, 0x7, 0x3}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f00)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0xfffffff7, '\x00', r6, r10, 0x5, 0x1, 0x4}, 0x50) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000fc0), r7) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'erspan0\x00', r6, 0x10, 0x80, 0xa, 0x5639c73f, {{0x6, 0x4, 0x2, 0x31, 0x18, 0x64, 0x0, 0x4, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end]}}}}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x4c, r11, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000021) ioctl$INCFS_IOC_CREATE_FILE(r9, 0xc058671e, &(0x7f0000001500)={{'\x00', 0x2}, {0x91f}, 0x127307004ad39166, 0x0, 0x0, &(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)="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", 0x170, 0x0, &(0x7f0000001380)={0x2, 0x113, {0x0, 0xc, 0x5c, "e76f2879f6545e294f032c18f99a97a79691d355780d59c11149532712f59a6a7f49c61c149e4827d3eb393b3bf87e67cf61021013c1b1dfe255f415931946f89a6886082c991f5d878d219e1add62c372d25456147c5ca0afb6cd7c", 0xaa, "654b638da777a37b1c72adf4d5ff09055ab77aa9a850464061303e7393b401d96b501238c9057b7e7f2e0c4391393f924f87ca1a5b5aeb26acc488ecaa3e71041edd5e9a1a16eadeda7f5cc278cf000f9ac050a57d783a9a49cade705a9dff13b0e3a5949eead5c69ffcf1f8d584e312bcf74aa8010b811ec3f380753dbfb8051082a1b53cf2469f3253dafd6e06da7212f09623840b296f752a66c0b9f773b45a39611d7b7efdd246a9"}, 0x29, "3cd85ffc71ff092349ce78e6fb3f9f161036030f3995441f9a57baeefed5a3a277e26b7c8f32ea86ba"}, 0x148}) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000015c0), r0) sendmsg$BATADV_CMD_GET_HARDIF(r10, &(0x7f0000001680)={&(0x7f0000001580), 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, r13, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x884) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000001940)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001900)={&(0x7f0000001700)=@newqdisc={0x1fc, 0x24, 0x800, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x6, 0x8}, {0x9, 0x1e}, {0xa, 0x10}}, [@TCA_STAB={0x1ac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x6, 0xb36, 0x9, 0x0, 0x9, 0x15, 0x2}}, {0x8, 0x2, [0x400, 0x5]}}, {{0x1c, 0x1, {0x50, 0x2, 0x8, 0x8001, 0x0, 0x6c, 0x3, 0x2}}, {0x8, 0x2, [0x8, 0x0]}}, {{0x1c, 0x1, {0x1, 0xe, 0x400, 0x4234, 0x2, 0x3, 0x2, 0x7}}, {0x12, 0x2, [0x800, 0x4, 0x10af, 0xfff, 0x1f, 0x7, 0x2]}}, {{0x1c, 0x1, {0x9, 0x3c, 0x29, 0xfffff8a8, 0x2, 0x3, 0x860, 0x6}}, {0x10, 0x2, [0x6, 0x9, 0x0, 0x0, 0xb, 0x400]}}, {{0x1c, 0x1, {0x3, 0xf3, 0x4, 0x9, 0x0, 0x0, 0xf, 0x9}}, {0x16, 0x2, [0x3, 0x4255, 0x8001, 0x9d2c, 0x3, 0x3, 0x10, 0x57, 0x4]}}, {{0x1c, 0x1, {0xf, 0xd5, 0x9, 0x0, 0x2, 0x7, 0x1, 0x3}}, {0xa, 0x2, [0x8, 0xd, 0x400]}}, {{0x1c, 0x1, {0x10, 0xd, 0x6, 0x0, 0x0, 0x6, 0x0, 0x7}}, {0x12, 0x2, [0x3, 0x6, 0xd, 0x0, 0x9, 0x9, 0x3]}}, {{0x1c, 0x1, {0x5, 0x2, 0x3, 0xffffffff, 0x1, 0xde, 0x200, 0x2}}, {0x8, 0x2, [0xffe2, 0x4]}}, {{0x1c, 0x1, {0x6, 0x7, 0x3, 0x6b3329c, 0x1, 0x7, 0xab3, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x2, 0x6, 0x4, 0x3, 0x0, 0xfffffff7, 0x7, 0x8}}, {0x14, 0x2, [0x9, 0x7, 0x7, 0x5, 0x2, 0x81, 0x7, 0x5]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000000}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x5, 0x0, 0x4}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x91}, 0x80c0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x80340004}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x2c, r13, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xba6bfd1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000051) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x60, r2, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x75}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 14.889900091s ago: executing program 3 (id=2131): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0x8000000}]}]}}, 0x0, 0x42}, 0x20) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x3a) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00&'], 0x2c}}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="0401", @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="e80002803800010024000100d9476c625f66746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b75705f656e61626c656400000000000000000000000000050003000600000004"], 0x104}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="8400000010000305000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e64000000005400028008001f"], 0x84}}, 0x0) 0s ago: executing program 32 (id=2129): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1ffffffffffffe31, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xfffffffc, '\x00', r3, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000940)="48f3a6d09ef7d0010d3c33092b0c51188147167bb8642b28a7aeb6bb9b0580d67933c0e8a8452b5de90708da802756a9b74addd720afbf9f682ac44cb12b39633827f6f0a550084bce60c63641ade717f8f2f70738ee0c6ed3054123eee95fcfdf94b6810527be24c314d266756a01cc228713e52d324107a93178f10bdfd06cee628b406509994276a1bc695632aafb42f70dc29f6a0770e3bc310f2105", 0x9e}, {&(0x7f0000000700)="b558adee7f6146bc37c8a7712e286dc559ff1afcfa1b9c8ee36a059a361f93db", 0x20}], 0x2) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvfrom$unix(r6, &(0x7f0000000200)=""/189, 0xbd, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000000b06050000000000000020000000000005000100070000000900020073797a3100000000040007"], 0x2c}}, 0x0) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7) kernel console output (not intermixed with test programs): nown subsys name 'net' [ 85.082478][ T5815] cgroup: Unknown subsys name 'cpuset' [ 85.092608][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.770455][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.438257][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.446911][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.464062][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.497126][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.509675][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.517122][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.527132][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.535649][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.544717][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.552709][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.672068][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.680521][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.688736][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.697187][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.705019][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.779609][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.787527][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.796339][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.805797][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.819582][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.829798][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.839357][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.850278][ T5147] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.869565][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.877844][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.201704][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 90.425515][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 90.532103][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.540107][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.547521][ T5829] bridge_slave_0: entered allmulticast mode [ 90.555555][ T5829] bridge_slave_0: entered promiscuous mode [ 90.566591][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.573767][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.581081][ T5829] bridge_slave_1: entered allmulticast mode [ 90.589715][ T5829] bridge_slave_1: entered promiscuous mode [ 90.729167][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 90.744136][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.793298][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.845055][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 90.889160][ T5829] team0: Port device team_slave_0 added [ 90.895457][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.902707][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.910477][ T5825] bridge_slave_0: entered allmulticast mode [ 90.917615][ T5825] bridge_slave_0: entered promiscuous mode [ 90.952052][ T5829] team0: Port device team_slave_1 added [ 90.958956][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.966095][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.973897][ T5825] bridge_slave_1: entered allmulticast mode [ 90.981292][ T5825] bridge_slave_1: entered promiscuous mode [ 91.005192][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 91.106873][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.113890][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.139880][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.154348][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.198102][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.205186][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.231772][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.255061][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.337421][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.345418][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.353180][ T5834] bridge_slave_0: entered allmulticast mode [ 91.361720][ T5834] bridge_slave_0: entered promiscuous mode [ 91.383205][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.390560][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.398197][ T5838] bridge_slave_0: entered allmulticast mode [ 91.405867][ T5838] bridge_slave_0: entered promiscuous mode [ 91.427237][ T5825] team0: Port device team_slave_0 added [ 91.434159][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.441507][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.448856][ T5834] bridge_slave_1: entered allmulticast mode [ 91.456110][ T5834] bridge_slave_1: entered promiscuous mode [ 91.474878][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.482098][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.489762][ T5838] bridge_slave_1: entered allmulticast mode [ 91.497061][ T5838] bridge_slave_1: entered promiscuous mode [ 91.518128][ T5825] team0: Port device team_slave_1 added [ 91.573462][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.580749][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.588482][ T5839] bridge_slave_0: entered allmulticast mode [ 91.595746][ T5839] bridge_slave_0: entered promiscuous mode [ 91.603873][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.609795][ T5833] Bluetooth: hci1: command tx timeout [ 91.611162][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.623609][ T5839] bridge_slave_1: entered allmulticast mode [ 91.630976][ T5839] bridge_slave_1: entered promiscuous mode [ 91.668907][ T5829] hsr_slave_0: entered promiscuous mode [ 91.675471][ T5829] hsr_slave_1: entered promiscuous mode [ 91.681276][ T5833] Bluetooth: hci0: command tx timeout [ 91.715374][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.722483][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.749086][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.763351][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.772851][ T5833] Bluetooth: hci2: command tx timeout [ 91.776991][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.791391][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.814024][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.821213][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.847513][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.888889][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.915231][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.924562][ T5833] Bluetooth: hci3: command tx timeout [ 91.924570][ T5832] Bluetooth: hci4: command tx timeout [ 91.930370][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.955380][ T5834] team0: Port device team_slave_0 added [ 92.003019][ T5839] team0: Port device team_slave_0 added [ 92.019458][ T5839] team0: Port device team_slave_1 added [ 92.027112][ T5834] team0: Port device team_slave_1 added [ 92.035468][ T5838] team0: Port device team_slave_0 added [ 92.082319][ T5838] team0: Port device team_slave_1 added [ 92.090676][ T24] cfg80211: failed to load regulatory.db [ 92.162524][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.169579][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.196063][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.226824][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.235767][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.268650][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.284202][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.291253][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.317989][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.347127][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.354770][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.381273][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.393249][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.400618][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.426863][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.449167][ T5825] hsr_slave_0: entered promiscuous mode [ 92.455600][ T5825] hsr_slave_1: entered promiscuous mode [ 92.462085][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 92.468005][ T5825] Cannot create hsr debugfs directory [ 92.495257][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.502550][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.528918][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.643068][ T5839] hsr_slave_0: entered promiscuous mode [ 92.650006][ T5839] hsr_slave_1: entered promiscuous mode [ 92.656191][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 92.662473][ T5839] Cannot create hsr debugfs directory [ 92.728989][ T5834] hsr_slave_0: entered promiscuous mode [ 92.735453][ T5834] hsr_slave_1: entered promiscuous mode [ 92.742100][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 92.747935][ T5834] Cannot create hsr debugfs directory [ 92.785365][ T5838] hsr_slave_0: entered promiscuous mode [ 92.792171][ T5838] hsr_slave_1: entered promiscuous mode [ 92.798681][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 92.804578][ T5838] Cannot create hsr debugfs directory [ 93.242722][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.267743][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.280115][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.301131][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.370278][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.383892][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.395014][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.410819][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.506821][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.522583][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.533552][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.554058][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.671732][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.683926][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.691286][ T5833] Bluetooth: hci1: command tx timeout [ 93.701763][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.713272][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.757195][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.764553][ T5833] Bluetooth: hci0: command tx timeout [ 93.838211][ T5833] Bluetooth: hci2: command tx timeout [ 93.844711][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.855035][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.883532][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.910038][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.917246][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.927751][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.960875][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.981827][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.989026][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.998326][ T5833] Bluetooth: hci3: command tx timeout [ 93.999823][ T5832] Bluetooth: hci4: command tx timeout [ 94.026576][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.086730][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.136772][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.155870][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.186187][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.193425][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.223425][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.230670][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.244481][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.251712][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.292994][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.300156][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.346155][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.470173][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.490442][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.515659][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.522873][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.544422][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.565432][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.572662][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.601584][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.643783][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.651106][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.785053][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.792327][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.853206][ T5829] veth0_vlan: entered promiscuous mode [ 94.971367][ T5829] veth1_vlan: entered promiscuous mode [ 95.047652][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.103114][ T5829] veth0_macvtap: entered promiscuous mode [ 95.121956][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.139569][ T5829] veth1_macvtap: entered promiscuous mode [ 95.206614][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.265046][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.321316][ T5825] veth0_vlan: entered promiscuous mode [ 95.343884][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.376832][ T5825] veth1_vlan: entered promiscuous mode [ 95.406987][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.455668][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.465865][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.493671][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.581747][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.601737][ T5825] veth0_macvtap: entered promiscuous mode [ 95.644056][ T5825] veth1_macvtap: entered promiscuous mode [ 95.717475][ T5935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.737087][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.745364][ T5935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.759108][ T5832] Bluetooth: hci1: command tx timeout [ 95.802473][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.823856][ T5839] veth0_vlan: entered promiscuous mode [ 95.836242][ T1153] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.846939][ T1153] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.848868][ T5832] Bluetooth: hci0: command tx timeout [ 95.873647][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.885347][ T1153] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.894643][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.902796][ T1153] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.917616][ T5839] veth1_vlan: entered promiscuous mode [ 95.925026][ T5832] Bluetooth: hci2: command tx timeout [ 95.991115][ T5834] veth0_vlan: entered promiscuous mode [ 96.002173][ T5838] veth0_vlan: entered promiscuous mode [ 96.026461][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.043737][ T5834] veth1_vlan: entered promiscuous mode [ 96.085543][ T5832] Bluetooth: hci4: command tx timeout [ 96.091682][ T5833] Bluetooth: hci3: command tx timeout [ 96.116411][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.125836][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.134117][ T5838] veth1_vlan: entered promiscuous mode [ 96.230188][ T5839] veth0_macvtap: entered promiscuous mode [ 96.242627][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.251422][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.263569][ T5839] veth1_macvtap: entered promiscuous mode [ 96.272025][ T5944] Bluetooth: MGMT ver 1.23 [ 96.277642][ T5834] veth0_macvtap: entered promiscuous mode [ 96.320830][ T5834] veth1_macvtap: entered promiscuous mode [ 96.361726][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.383104][ T5838] veth0_macvtap: entered promiscuous mode [ 96.407123][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.423990][ T5838] veth1_macvtap: entered promiscuous mode [ 96.454843][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.498899][ T1153] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.519876][ T1153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.554839][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.569430][ T1153] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.631241][ T1153] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.662405][ T1153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.675118][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 96.677437][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.684920][ T5954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'. [ 96.700331][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.714486][ T1153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.758939][ T1153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.772201][ T1153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.772422][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 96.781879][ T1153] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.814625][ T5956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'. [ 96.834078][ T1153] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.904847][ T50] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.916893][ T50] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.952528][ T5959] Zero length message leads to an empty skb [ 96.963322][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.978474][ T5959] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 97.011698][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.020680][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.031479][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.042360][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.053745][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.099942][ T5935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.124808][ T5935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.175268][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.184067][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.320490][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.357298][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.426523][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.453907][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.549079][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.587157][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.792870][ T5979] tipc: Started in network mode [ 97.809451][ T5979] tipc: Node identity 8aca948fd20e, cluster identity 4711 [ 97.840521][ T5832] Bluetooth: hci1: command tx timeout [ 97.847293][ T5979] tipc: Enabled bearer , priority 0 [ 97.880891][ T5989] syzkaller0: entered promiscuous mode [ 97.891838][ T5989] syzkaller0: entered allmulticast mode [ 97.911113][ T5987] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3'. [ 97.921452][ T5832] Bluetooth: hci0: command tx timeout [ 97.953697][ T5993] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17'. [ 97.965657][ T5993] netlink: 44 bytes leftover after parsing attributes in process `syz.3.17'. [ 97.969962][ T5979] nbd: device at index 1 is going down [ 97.980650][ T5990] warning: `syz.4.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.002161][ T5832] Bluetooth: hci2: command tx timeout [ 98.128371][ T5979] tipc: Resetting bearer [ 98.135385][ T5837] udevd[5837]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 98.159423][ T5832] Bluetooth: hci4: command tx timeout [ 98.164901][ T5832] Bluetooth: hci3: command tx timeout [ 98.199470][ T5977] tipc: Resetting bearer [ 98.270951][ T5977] tipc: Disabling bearer [ 98.313250][ T5999] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.379224][ T5999] netlink: 'syz.0.19': attribute type 12 has an invalid length. [ 98.386933][ T5999] netlink: 'syz.0.19': attribute type 29 has an invalid length. [ 98.409071][ T5999] netlink: 148 bytes leftover after parsing attributes in process `syz.0.19'. [ 98.457759][ T5999] netlink: 'syz.0.19': attribute type 2 has an invalid length. [ 98.491972][ T5999] netlink: 23 bytes leftover after parsing attributes in process `syz.0.19'. [ 98.631612][ T6011] vlan2: entered promiscuous mode [ 98.636713][ T6011] bridge0: entered promiscuous mode [ 98.736523][ T6018] Bluetooth: MGMT ver 1.23 [ 98.809178][ T6018] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 98.985138][ T6029] x_tables: duplicate entry at hook 2 [ 99.021795][ T6034] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.080061][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 99.459638][ T6049] netlink: 'syz.0.35': attribute type 25 has an invalid length. [ 99.564157][ T6055] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 99.571700][ T6055] IPv6: NLM_F_CREATE should be set when creating new route [ 99.831302][ T6066] Bluetooth: MGMT ver 1.23 [ 100.678923][ T6092] syzkaller0: entered promiscuous mode [ 100.684554][ T6092] syzkaller0: entered allmulticast mode [ 100.740310][ T6092] netlink: 'syz.2.49': attribute type 3 has an invalid length. [ 100.798193][ T5147] Bluetooth: hci2: command 0x0401 tx timeout [ 100.799982][ T5832] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 101.196242][ T6112] tipc: Started in network mode [ 101.218166][ T6112] tipc: Node identity ee4100a671f5, cluster identity 4711 [ 101.226985][ T6112] tipc: Enabled bearer , priority 0 [ 101.253693][ T6120] syzkaller0: entered promiscuous mode [ 101.279422][ T6120] syzkaller0: entered allmulticast mode [ 101.309336][ T6112] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 101.414723][ T6111] tipc: Resetting bearer [ 101.527156][ T6111] tipc: Disabling bearer [ 101.817740][ T6154] __nla_validate_parse: 5 callbacks suppressed [ 101.817759][ T6154] netlink: 64 bytes leftover after parsing attributes in process `syz.0.66'. [ 101.844136][ T6156] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 101.855989][ T6156] syzkaller0: entered promiscuous mode [ 101.870625][ T6156] syzkaller0: entered allmulticast mode [ 101.919638][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.925818][ T5833] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 102.122480][ T6172] netlink: 60 bytes leftover after parsing attributes in process `syz.0.70'. [ 102.134720][ T6172] netlink: 36 bytes leftover after parsing attributes in process `syz.0.70'. [ 102.435031][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 102.461728][ T6186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.76'. [ 103.059757][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.86'. [ 103.074821][ T6211] netlink: 104 bytes leftover after parsing attributes in process `syz.2.87'. [ 103.084587][ T6213] netlink: 2 bytes leftover after parsing attributes in process `syz.3.86'. [ 103.618723][ T6242] netlink: 20 bytes leftover after parsing attributes in process `syz.1.95'. [ 103.728047][ T6248] netlink: 'syz.0.97': attribute type 1 has an invalid length. [ 103.824539][ T6253] netlink: 168 bytes leftover after parsing attributes in process `syz.4.96'. [ 104.030100][ T6275] syz.4.96 uses obsolete (PF_INET,SOCK_PACKET) [ 104.314341][ T6285] IPv6: sit1: Disabled Multicast RS [ 104.361163][ T6285] Cannot find add_set index 0 as target [ 105.342299][ T6336] netlink: 'syz.2.116': attribute type 1 has an invalid length. [ 105.606603][ T6340] veth3: entered promiscuous mode [ 105.796049][ T6359] sctp: [Deprecated]: syz.3.123 (pid 6359) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.796049][ T6359] Use struct sctp_sack_info instead [ 105.952197][ T6366] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 106.221045][ T6365] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.229200][ T6365] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.368747][ T6365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.386714][ T6365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.663058][ T5935] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.688316][ T5935] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.729363][ T5935] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.740029][ T5935] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.845237][ T5935] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.866294][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029b7f800: rx timeout, send abort [ 106.875782][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029b7ec00: rx timeout, send abort [ 106.884746][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888029b7f800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 106.900122][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888029b7ec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 106.919104][ T6400] netlink: 'syz.0.131': attribute type 1 has an invalid length. [ 106.927003][ T6400] netlink: 'syz.0.131': attribute type 1 has an invalid length. [ 106.948907][ T5935] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.976113][ T5935] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.995601][ T5935] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.285918][ T6414] netlink: 'syz.3.137': attribute type 25 has an invalid length. [ 107.338735][ T6414] __nla_validate_parse: 3 callbacks suppressed [ 107.338754][ T6414] netlink: 20 bytes leftover after parsing attributes in process `syz.3.137'. [ 107.369395][ T6410] syzkaller1: entered promiscuous mode [ 107.380717][ T6414] netlink: 44 bytes leftover after parsing attributes in process `syz.3.137'. [ 107.383746][ T6410] syzkaller1: entered allmulticast mode [ 107.503449][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.137'. [ 107.541184][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.787025][ T6429] sock: sock_timestamping_bind_phc: sock not bind to device [ 107.838150][ T6436] netlink: 'syz.4.141': attribute type 83 has an invalid length. [ 108.069041][ T6446] netlink: 28 bytes leftover after parsing attributes in process `syz.4.146'. [ 108.103743][ T6450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.143'. [ 108.119596][ T6450] netlink: 2 bytes leftover after parsing attributes in process `syz.1.143'. [ 108.240422][ T6453] netlink: 48 bytes leftover after parsing attributes in process `syz.3.147'. [ 108.647417][ T6472] netlink: 'syz.3.151': attribute type 2 has an invalid length. [ 109.329383][ T6508] syzkaller0: entered promiscuous mode [ 109.334931][ T6508] syzkaller0: entered allmulticast mode [ 109.409319][ T6515] netlink: 'syz.4.161': attribute type 5 has an invalid length. [ 109.675212][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 110.083506][ T6543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.166'. [ 110.283348][ T6543] bond1: entered promiscuous mode [ 110.391960][ T6543] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.643359][ T6567] netlink: 'syz.2.174': attribute type 1 has an invalid length. [ 110.674782][ T6564] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 110.728686][ T6566] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.173'. [ 110.922011][ T6566] hsr_slave_1 (unregistering): left promiscuous mode [ 111.068537][ T6589] tipc: Started in network mode [ 111.083434][ T6589] tipc: Node identity a6366575967d, cluster identity 4711 [ 111.128605][ T6589] tipc: Enabled bearer , priority 0 [ 111.908788][ T6579] syzkaller0: entered promiscuous mode [ 111.924449][ T6579] syzkaller0: entered allmulticast mode [ 112.011461][ T6621] tipc: Enabling of bearer rejected, failed to enable media [ 112.088612][ T6608] tipc: Resetting bearer [ 112.143193][ T6574] tipc: Resetting bearer [ 112.270284][ T6574] tipc: Disabling bearer [ 112.309898][ T5885] tipc: Node number set to 810247541 [ 112.443257][ T6621] syzkaller0: entered promiscuous mode [ 112.448992][ T6621] syzkaller0: entered allmulticast mode [ 112.492089][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 112.716145][ T6635] syzkaller1: entered promiscuous mode [ 112.722061][ T6635] syzkaller1: entered allmulticast mode [ 112.763924][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.187'. [ 112.862505][ T6653] netlink: 128 bytes leftover after parsing attributes in process `syz.0.188'. [ 112.878325][ T6653] netlink: 20 bytes leftover after parsing attributes in process `syz.0.188'. [ 113.104899][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 113.126600][ T6666] tipc: Started in network mode [ 113.136556][ T6665] netlink: 'syz.1.191': attribute type 5 has an invalid length. [ 113.156164][ T6666] tipc: Node identity 8efe14442ae2, cluster identity 4711 [ 113.178386][ T6666] tipc: Enabled bearer , priority 0 [ 113.237276][ T6676] syzkaller0: entered promiscuous mode [ 113.258799][ T1153] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x8f [ 113.288023][ T6676] syzkaller0: entered allmulticast mode [ 113.296564][ T50] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.315648][ T50] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.346179][ T6676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.192'. [ 113.379084][ T50] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.422850][ T50] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.473391][ T6660] tipc: Resetting bearer [ 113.490726][ T6660] tipc: Disabling bearer [ 113.502940][ T6688] 8021q: VLANs not supported on ip6tnl0 [ 113.677400][ T6701] netlink: 'syz.1.199': attribute type 1 has an invalid length. [ 113.739369][ T6701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.756109][ T6706] xt_hashlimit: size too large, truncated to 1048576 [ 113.826233][ T6707] netlink: 28 bytes leftover after parsing attributes in process `syz.1.199'. [ 114.393810][ T6720] netlink: 104 bytes leftover after parsing attributes in process `syz.4.201'. [ 114.591150][ T6736] netlink: 48 bytes leftover after parsing attributes in process `syz.4.207'. [ 114.602353][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.206'. [ 114.711925][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.206'. [ 115.614244][ T6770] netlink: 'syz.0.215': attribute type 1 has an invalid length. [ 115.713798][ T6778] netlink: 'syz.3.218': attribute type 10 has an invalid length. [ 115.738623][ T6778] batman_adv: batadv0: Adding interface: team0 [ 115.744847][ T6778] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.811171][ T6778] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 115.867552][ T6784] pim6reg1: entered promiscuous mode [ 115.873107][ T6784] pim6reg1: entered allmulticast mode [ 116.358197][ T6794] syz.0.224 (6794) used greatest stack depth: 17832 bytes left [ 116.430378][ T6798] syz.0.224 (6798) used greatest stack depth: 16872 bytes left [ 116.660739][ T6825] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 116.681489][ T6825] SET target dimension over the limit! [ 116.948466][ T6830] scsi_nl_rcv_msg: discarding partial skb [ 116.985125][ T6830] scsi_nl_rcv_msg: discarding partial skb [ 117.399347][ T6861] netlink: 'syz.3.247': attribute type 2 has an invalid length. [ 117.469918][ T6861] tipc: Invalid UDP bearer configuration [ 117.469981][ T6861] tipc: Enabling of bearer rejected, failed to enable media [ 117.548874][ T6864] batman_adv: batadv0: Adding interface: vlan2 [ 117.571172][ T6867] sctp: [Deprecated]: syz.4.250 (pid 6867) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.571172][ T6867] Use struct sctp_sack_info instead [ 117.574613][ T6864] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.670698][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.682758][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.692717][ T6864] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 117.732281][ T6872] syzkaller1: entered promiscuous mode [ 117.737832][ T6872] syzkaller1: entered allmulticast mode [ 117.755988][ T6873] vcan0: tx address claim with different name [ 117.803422][ T6386] IPVS: starting estimator thread 0... [ 117.810317][ T6843] IPVS: nq: FWM 3 0x00000003 - no destination available [ 117.899931][ T6877] IPVS: using max 27 ests per chain, 64800 per kthread [ 118.419488][ T6873] infiniband syz0: set active [ 118.425087][ T6873] infiniband syz0: added bond_slave_0 [ 118.458908][ T6907] syzkaller0: entered promiscuous mode [ 118.464761][ T6907] syzkaller0: entered allmulticast mode [ 118.484567][ T6873] RDS/IB: syz0: added [ 118.489922][ T6873] smc: adding ib device syz0 with port count 1 [ 118.497288][ T6873] smc: ib device syz0 port 1 has no pnetid [ 119.221741][ T6919] Driver unsupported XDP return value 0 on prog (id 57) dev N/A, expect packet loss! [ 119.417439][ T6927] __nla_validate_parse: 10 callbacks suppressed [ 119.417467][ T6927] netlink: 60 bytes leftover after parsing attributes in process `syz.0.265'. [ 119.945983][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.268'. [ 120.170070][ T6956] netlink: 'syz.4.267': attribute type 15 has an invalid length. [ 120.224821][ T6956] netlink: 24 bytes leftover after parsing attributes in process `syz.4.267'. [ 120.745725][ T6972] netlink: 40 bytes leftover after parsing attributes in process `syz.3.274'. [ 120.910543][ T6982] netlink: 'syz.4.277': attribute type 5 has an invalid length. [ 120.944420][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.277'. [ 120.991424][ T6987] netlink: 16 bytes leftover after parsing attributes in process `syz.0.279'. [ 121.266740][ T7004] SET target dimension over the limit! [ 121.497366][ T7015] tipc: Enabling of bearer rejected, failed to enable media [ 121.541805][ T7023] netlink: 140 bytes leftover after parsing attributes in process `syz.3.291'. [ 121.551641][ T7015] ip6gre1: entered allmulticast mode [ 121.555740][ T7021] syzkaller0: entered promiscuous mode [ 121.572484][ T7021] syzkaller0: entered allmulticast mode [ 121.588534][ T7018] tipc: Enabled bearer , priority 0 [ 121.718952][ T7018] tipc: Resetting bearer [ 121.760637][ T7018] tipc: Disabling bearer [ 121.821087][ T7033] vlan3: entered promiscuous mode [ 121.826502][ T7033] vlan3: entered allmulticast mode [ 121.834021][ T7033] hsr_slave_1: entered allmulticast mode [ 122.152772][ T7061] netlink: 'syz.2.302': attribute type 21 has an invalid length. [ 122.189053][ T7042] team0 (unregistering): Port device team_slave_0 removed [ 122.200288][ T7042] team0 (unregistering): Port device team_slave_1 removed [ 122.254962][ T7053] syzkaller1: entered promiscuous mode [ 122.273843][ T7053] syzkaller1: entered allmulticast mode [ 122.422962][ T7071] netlink: 108 bytes leftover after parsing attributes in process `syz.1.306'. [ 122.450916][ T7071] netlink: 108 bytes leftover after parsing attributes in process `syz.1.306'. [ 122.462376][ T7071] netlink: 84 bytes leftover after parsing attributes in process `syz.1.306'. [ 122.513216][ T7077] gretap0: entered promiscuous mode [ 122.551487][ T7077] gretap0: left promiscuous mode [ 122.846061][ T7099] netlink: 'syz.3.314': attribute type 6 has an invalid length. [ 122.856478][ T7099] netlink: 'syz.3.314': attribute type 6 has an invalid length. [ 122.882779][ T7099] netlink: 'syz.3.314': attribute type 6 has an invalid length. [ 122.903295][ T7099] netlink: 'syz.3.314': attribute type 6 has an invalid length. [ 122.914740][ T7105] netlink: 'syz.0.316': attribute type 10 has an invalid length. [ 122.926217][ T7105] ieee802154 phy1 wpan1: encryption failed: -22 [ 123.338496][ T7133] tipc: Failed to remove unknown binding: 66,1,1/810247541:2401831502/2401831504 [ 123.375087][ T7133] tipc: Failed to remove unknown binding: 66,1,1/810247541:2401831502/2401831504 [ 123.759189][ T7151] syzkaller1: entered promiscuous mode [ 123.765875][ T7151] syzkaller1: entered allmulticast mode [ 124.121603][ T7170] netlink: 'syz.2.336': attribute type 4 has an invalid length. [ 124.601552][ T7198] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.608879][ T7198] IPv6: NLM_F_CREATE should be set when creating new route [ 124.676558][ T7203] netlink: 'syz.3.347': attribute type 1 has an invalid length. [ 124.732933][ T7203] bond1: (slave geneve3): making interface the new active one [ 124.744344][ T7203] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 124.754704][ T5935] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 124.764085][ T5935] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 124.802406][ T5935] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 124.811560][ T5935] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 124.876231][ T7211] policy can only be matched on NF_INET_PRE_ROUTING [ 124.876254][ T7211] unable to load match [ 124.937653][ T7214] bond2: Unable to set down delay as MII monitoring is disabled [ 124.948000][ T7214] bond2 (unregistering): Released all slaves [ 125.282419][ T7238] __nla_validate_parse: 13 callbacks suppressed [ 125.282440][ T7238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.357'. [ 125.299126][ T7238] nbd: must specify a size in bytes for the device [ 125.389666][ T7241] bond2: Removing last ns target with arp_interval on [ 125.401710][ T7244] nbd: must specify a size in bytes for the device [ 125.416329][ T7241] trusted_key: syz.1.359 sent an empty control message without MSG_MORE. [ 125.793808][ T7268] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 126.832139][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 126.848590][ T7297] gretap0: entered promiscuous mode [ 126.864490][ T7303] syzkaller0: entered promiscuous mode [ 126.879743][ T7303] syzkaller0: entered allmulticast mode [ 126.881262][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.375'. [ 126.969561][ T7309] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 127.071074][ T7312] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.435295][ T7330] syzkaller0: entered promiscuous mode [ 127.443788][ T7330] syzkaller0: entered allmulticast mode [ 127.498380][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.385'. [ 127.523506][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.385'. [ 127.578410][ T7345] netlink: 40 bytes leftover after parsing attributes in process `syz.4.385'. [ 127.645316][ T6639] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.661770][ T6639] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.670861][ T6639] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.680653][ T6639] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.159928][ T7369] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 128.214836][ T7374] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 129.069113][ T7400] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.076976][ T7400] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.180956][ T7412] netlink: 'syz.1.403': attribute type 8 has an invalid length. [ 129.289810][ T7400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.306844][ T7400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.363770][ T5836] IPVS: starting estimator thread 0... [ 129.468335][ T7424] IPVS: using max 26 ests per chain, 62400 per kthread [ 129.657224][ T7434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.406'. [ 129.765981][ T7436] netlink: 36 bytes leftover after parsing attributes in process `syz.4.406'. [ 129.800296][ T7400] ip6gre1: left allmulticast mode [ 129.918656][ T6639] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.934913][ T6639] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.002982][ T7440] netlink: 16 bytes leftover after parsing attributes in process `syz.3.407'. [ 130.033052][ T6639] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.054012][ T6639] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.229918][ T7451] netlink: 16 bytes leftover after parsing attributes in process `syz.4.412'. [ 130.645821][ T7478] batman_adv: batadv0: Adding interface: vlan5 [ 130.662055][ T7478] batman_adv: batadv0: The MTU of interface vlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.689403][ T7478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.704689][ T7478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.719658][ T7478] batman_adv: batadv0: Not using interface vlan5 (retrying later): interface not active [ 130.823194][ T7488] bond2: (slave bond_slave_1): Device is not our slave [ 130.831762][ T7488] bond2: option active_slave: invalid value (bond_slave_1) [ 130.870328][ T7488] bond2 (unregistering): Released all slaves [ 131.247786][ T7523] ip6t_rpfilter: unknown options [ 131.286115][ T7523] __nla_validate_parse: 1 callbacks suppressed [ 131.286133][ T7523] netlink: 104 bytes leftover after parsing attributes in process `syz.0.430'. [ 131.404316][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.433'. [ 131.443643][ T7535] bond0: entered promiscuous mode [ 131.449419][ T7535] bond_slave_0: entered promiscuous mode [ 131.456591][ T7535] bond_slave_1: entered promiscuous mode [ 131.467249][ T7535] bond0: left promiscuous mode [ 131.474365][ T7535] bond_slave_0: left promiscuous mode [ 131.482185][ T7535] bond_slave_1: left promiscuous mode [ 131.514169][ T7537] netlink: 'syz.4.435': attribute type 58 has an invalid length. [ 131.523380][ T7537] netlink: 20 bytes leftover after parsing attributes in process `syz.4.435'. [ 131.569953][ T7542] syzkaller1: entered promiscuous mode [ 131.575502][ T7542] syzkaller1: entered allmulticast mode [ 131.632254][ T7547] netlink: 32 bytes leftover after parsing attributes in process `syz.1.438'. [ 132.284566][ T7585] netlink: 80 bytes leftover after parsing attributes in process `syz.2.447'. [ 132.429657][ T7589] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 132.453500][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.448'. [ 132.606447][ T7600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.453'. [ 132.765818][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.458'. [ 132.828619][ T7624] tipc: Failed to obtain node identity [ 132.842055][ T7624] tipc: Enabling of bearer rejected, failed to enable media [ 132.857282][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.458'. [ 133.043924][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.242866][ T7653] pimreg: entered allmulticast mode [ 133.681943][ T7687] netlink: 16 bytes leftover after parsing attributes in process `syz.2.476'. [ 134.083157][ T7705] team_slave_1: mtu less than device minimum [ 134.833411][ T7754] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 134.943735][ T7760] tipc: Enabled bearer , priority 0 [ 134.952030][ T7762] netlink: 'syz.2.499': attribute type 2 has an invalid length. [ 134.963186][ T7760] syzkaller0: entered promiscuous mode [ 134.983592][ T7760] syzkaller0: entered allmulticast mode [ 135.050457][ T7760] tipc: Resetting bearer [ 135.084824][ T7759] tipc: Resetting bearer [ 135.142099][ T7759] tipc: Disabling bearer [ 135.312957][ T7787] syzkaller0: entered promiscuous mode [ 135.319115][ T7787] syzkaller0: entered allmulticast mode [ 135.829147][ T7817] netlink: 'syz.3.515': attribute type 1 has an invalid length. [ 135.855850][ T7816] bond1: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 135.871799][ T7816] bond1: entered promiscuous mode [ 135.879726][ T7816] bond1: entered allmulticast mode [ 135.891519][ T7816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.070765][ T7824] ksmbd: Unknown IPC event: 1, ignore. [ 136.098089][ T7826] netlink: 'syz.3.519': attribute type 4 has an invalid length. [ 136.332949][ T7837] __nla_validate_parse: 12 callbacks suppressed [ 136.332969][ T7837] netlink: 6 bytes leftover after parsing attributes in process `syz.3.524'. [ 136.349920][ T7837] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.376507][ T7847] ipt_REJECT: ECHOREPLY no longer supported. [ 136.400322][ T7846] netlink: 40 bytes leftover after parsing attributes in process `syz.0.527'. [ 136.438415][ T7846] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 136.600985][ T7860] netlink: 48 bytes leftover after parsing attributes in process `syz.3.529'. [ 136.656243][ T7865] netlink: 'syz.1.531': attribute type 1 has an invalid length. [ 136.678489][ T7865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.531'. [ 136.733990][ T7865] gretap1: entered promiscuous mode [ 136.806279][ T7877] netlink: 'syz.2.535': attribute type 1 has an invalid length. [ 136.826393][ T7872] syzkaller1: entered promiscuous mode [ 136.832489][ T7872] syzkaller1: entered allmulticast mode [ 136.842694][ T7877] netlink: 'syz.2.535': attribute type 1 has an invalid length. [ 136.866253][ T7877] netlink: 'syz.2.535': attribute type 1 has an invalid length. [ 136.890860][ T7877] netlink: 'syz.2.535': attribute type 2 has an invalid length. [ 136.929130][ T7877] netlink: 76 bytes leftover after parsing attributes in process `syz.2.535'. [ 137.045813][ T7885] netlink: 'syz.0.538': attribute type 153 has an invalid length. [ 137.356082][ T7907] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.581136][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.548'. [ 137.707467][ T7925] syzkaller0: entered promiscuous mode [ 137.724307][ T7925] syzkaller0: entered allmulticast mode [ 137.807715][ T7927] 0: reclassify loop, rule prio 0, protocol 800 [ 138.973987][ T7992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.101259][ T8002] netlink: 72 bytes leftover after parsing attributes in process `syz.0.571'. [ 139.408427][ T8012] netlink: 16 bytes leftover after parsing attributes in process `syz.0.577'. [ 139.437761][ T8012] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.577'. [ 139.510289][ T8019] xt_NFQUEUE: number of queues (257) out of range (got 65790) [ 139.696862][ T8022] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.814644][ T8042] raw_sendmsg: syz.4.581 forgot to set AF_INET. Fix it! [ 139.894483][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.587'. [ 140.396677][ T8078] pim6reg: entered allmulticast mode [ 140.431680][ T8083] netlink: 'syz.0.594': attribute type 12 has an invalid length. [ 140.447674][ T8084] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 140.457721][ T8084] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 140.547628][ T8092] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 140.813051][ T8103] veth0: entered promiscuous mode [ 140.925907][ T8103] veth0 (unregistering): left promiscuous mode [ 141.367262][ T8133] netlink: 'syz.3.608': attribute type 8 has an invalid length. [ 141.397353][ T8132] __nla_validate_parse: 3 callbacks suppressed [ 141.397372][ T8132] netlink: 24 bytes leftover after parsing attributes in process `syz.1.607'. [ 141.690976][ T8152] netlink: 596 bytes leftover after parsing attributes in process `syz.3.617'. [ 141.710620][ T8152] netlink: 596 bytes leftover after parsing attributes in process `syz.3.617'. [ 141.803642][ T8165] netlink: 'syz.3.619': attribute type 21 has an invalid length. [ 141.814719][ T8158] bond2: Removing last arp target with arp_interval on [ 141.822257][ T8165] IPv6: NLM_F_CREATE should be specified when creating new route [ 141.822625][ T8165] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.837529][ T8165] IPv6: NLM_F_CREATE should be set when creating new route [ 141.844907][ T8165] IPv6: NLM_F_CREATE should be set when creating new route [ 141.852212][ T8165] IPv6: NLM_F_CREATE should be set when creating new route [ 142.140658][ T8184] netlink: 28 bytes leftover after parsing attributes in process `syz.3.625'. [ 142.180374][ T8187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.626'. [ 142.255204][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.627'. [ 142.348939][ T8195] netlink: 84 bytes leftover after parsing attributes in process `syz.3.628'. [ 142.383033][ T8201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.630'. [ 142.606017][ T8209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.633'. [ 142.963395][ T8222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.983898][ T8222] batadv_slave_0: entered promiscuous mode [ 143.033511][ T8222] batadv_slave_0: entered allmulticast mode [ 143.093034][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.634'. [ 144.496244][ T8284] dvmrp1: entered allmulticast mode [ 144.860545][ T8300] netlink: 'syz.2.657': attribute type 10 has an invalid length. [ 144.922425][ T8309] syzkaller0: entered promiscuous mode [ 144.928794][ T8309] syzkaller0: entered allmulticast mode [ 144.936671][ T8308] tipc: Enabled bearer , priority 0 [ 145.223494][ T8310] tipc: Resetting bearer [ 145.277217][ T8310] tipc: Disabling bearer [ 145.350238][ T8325] netlink: 'syz.2.662': attribute type 5 has an invalid length. [ 145.375842][ T8318] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 145.386018][ T8326] unsupported nlmsg_type 40 [ 145.390039][ T8318] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 145.592952][ T8337] netlink: 'syz.1.666': attribute type 3 has an invalid length. [ 145.704445][ T8331] netlink: 'syz.4.665': attribute type 29 has an invalid length. [ 145.718513][ T8331] netlink: 'syz.4.665': attribute type 29 has an invalid length. [ 145.766226][ T8343] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 145.881673][ T8351] netlink: 'syz.0.672': attribute type 10 has an invalid length. [ 145.910778][ T8351] bridge_slave_1: left allmulticast mode [ 145.956085][ T8351] bridge_slave_1: left promiscuous mode [ 145.969125][ T8351] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.984466][ T8351] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 146.179503][ T8380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.440132][ T1112] tipc: Subscription rejected, illegal request [ 146.633556][ T8404] xt_NFQUEUE: number of queues (257) out of range (got 65790) [ 146.645869][ T8404] netlink: 'syz.0.683': attribute type 64 has an invalid length. [ 146.658500][ T8404] __nla_validate_parse: 73 callbacks suppressed [ 146.658518][ T8404] netlink: 20 bytes leftover after parsing attributes in process `syz.0.683'. [ 146.661963][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.686'. [ 146.677527][ T8411] xt_NFQUEUE: number of queues (257) out of range (got 65790) [ 146.725032][ T8403] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 146.757967][ T8415] netlink: 576 bytes leftover after parsing attributes in process `syz.1.688'. [ 146.912369][ T8425] netlink: 20 bytes leftover after parsing attributes in process `syz.1.691'. [ 147.082413][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.694'. [ 147.275532][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.700'. [ 147.284653][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.700'. [ 147.597333][ T8465] netlink: 20 bytes leftover after parsing attributes in process `syz.1.703'. [ 147.802519][ T8469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.704'. [ 149.225777][ T8507] bond6: option arp_all_targets: invalid value (3) [ 149.261350][ T8507] bond6 (unregistering): Released all slaves [ 149.480288][ T8528] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.489890][ T8528] bond0: (slave bond2): Enslaving as an active interface with an up link [ 149.520922][ T8536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.718'. [ 149.563528][ T8542] tipc: Enabling of bearer rejected, failed to enable media [ 149.575668][ T8542] tipc: Enabling of bearer rejected, failed to enable media [ 149.857637][ T8561] syzkaller1: entered promiscuous mode [ 149.867095][ T8561] syzkaller1: entered allmulticast mode [ 150.058891][ T8571] veth0: entered promiscuous mode [ 150.066839][ T8570] veth0: left promiscuous mode [ 150.241511][ T8583] tipc: Started in network mode [ 150.246535][ T8583] tipc: Node identity 3ad60789ca18, cluster identity 4711 [ 150.254285][ T8583] tipc: Enabled bearer , priority 0 [ 150.262888][ T8583] syzkaller0: entered promiscuous mode [ 150.275772][ T8583] syzkaller0: entered allmulticast mode [ 150.336069][ T8583] tipc: Resetting bearer [ 150.342366][ T8583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.350862][ T8583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.362188][ T8581] tipc: Resetting bearer [ 150.403373][ T8581] tipc: Disabling bearer [ 151.510996][ T8669] netlink: 'syz.3.750': attribute type 3 has an invalid length. [ 152.088591][ T8694] __nla_validate_parse: 4 callbacks suppressed [ 152.088611][ T8694] netlink: 28 bytes leftover after parsing attributes in process `syz.3.755'. [ 152.430596][ T8727] tipc: Enabled bearer , priority 0 [ 152.438364][ T8727] syzkaller0: entered promiscuous mode [ 152.443972][ T8727] syzkaller0: entered allmulticast mode [ 152.453979][ T8729] netlink: 144 bytes leftover after parsing attributes in process `syz.4.762'. [ 152.487513][ T6384] IPVS: starting estimator thread 0... [ 152.499247][ T8732] netlink: 'syz.0.759': attribute type 4 has an invalid length. [ 152.559938][ T8711] netlink: 'syz.0.759': attribute type 4 has an invalid length. [ 152.578032][ T8731] IPVS: using max 25 ests per chain, 60000 per kthread [ 152.731151][ T8737] tipc: Resetting bearer [ 152.821607][ T8725] tipc: Resetting bearer [ 152.847406][ T8725] tipc: Disabling bearer [ 152.899027][ T8747] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20001 [ 152.914851][ T8741] 8021q: adding VLAN 0 to HW filter on device bond6 [ 152.936608][ T8748] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20001 [ 152.955798][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 153.350495][ T8772] only policy match revision 0 supported [ 153.350523][ T8772] unable to load match [ 153.414632][ T8772] veth1_macvtap: left promiscuous mode [ 153.429775][ T8772] macsec0: entered promiscuous mode [ 153.464282][ T8781] tipc: Enabling of bearer rejected, media not registered [ 153.530004][ T8786] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.777'. [ 153.805360][ T8795] netlink: 60 bytes leftover after parsing attributes in process `syz.0.780'. [ 153.835535][ T8793] netlink: 60 bytes leftover after parsing attributes in process `syz.0.780'. [ 153.910626][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.780'. [ 153.925446][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.781'. [ 153.934643][ T8799] netlink: 20 bytes leftover after parsing attributes in process `syz.1.781'. [ 155.042436][ T8860] xfrm1: entered allmulticast mode [ 155.351582][ T8874] netlink: 20 bytes leftover after parsing attributes in process `syz.0.799'. [ 156.281057][ T8937] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 156.290165][ T8937] netlink: 'syz.1.821': attribute type 1 has an invalid length. [ 156.333087][ T8937] netlink: 'syz.1.821': attribute type 1 has an invalid length. [ 156.344705][ T8942] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 157.275615][ T8958] netlink: 'syz.4.824': attribute type 12 has an invalid length. [ 157.350907][ T8963] __nla_validate_parse: 39 callbacks suppressed [ 157.350927][ T8963] netlink: 80 bytes leftover after parsing attributes in process `syz.1.827'. [ 157.427709][ T8967] tipc: Enabled bearer , priority 13 [ 157.440875][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'. [ 157.679592][ T8981] netlink: 72 bytes leftover after parsing attributes in process `syz.4.831'. [ 157.694211][ T8981] netlink: 72 bytes leftover after parsing attributes in process `syz.4.831'. [ 157.706476][ T8985] netlink: 52 bytes leftover after parsing attributes in process `syz.0.832'. [ 157.979174][ T8996] netlink: 44 bytes leftover after parsing attributes in process `syz.2.839'. [ 157.991611][ T8998] syzkaller1: entered allmulticast mode [ 158.201098][ T9014] netlink: 'syz.3.841': attribute type 3 has an invalid length. [ 158.215528][ T9014] netlink: 224 bytes leftover after parsing attributes in process `syz.3.841'. [ 158.331337][ T9019] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 158.378633][ T9022] tipc: Enabled bearer , priority 0 [ 158.398658][ T9022] syzkaller0: entered promiscuous mode [ 158.404351][ T9022] syzkaller0: entered allmulticast mode [ 158.431933][ T9022] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 158.464474][ T9022] tipc: Resetting bearer [ 158.477471][ T9017] tipc: Resetting bearer [ 158.537962][ T6384] tipc: Node number set to 4040034185 [ 158.599513][ T9017] tipc: Disabling bearer [ 158.817735][ T9039] netlink: 48 bytes leftover after parsing attributes in process `syz.4.849'. [ 158.916332][ T9051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.854'. [ 158.917479][ T9052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.854'. [ 159.188206][ T9067] netlink: 'syz.3.858': attribute type 5 has an invalid length. [ 159.498433][ T9077] tipc: Enabled bearer , priority 0 [ 159.654170][ T9092] sctp: [Deprecated]: syz.3.864 (pid 9092) Use of int in maxseg socket option. [ 159.654170][ T9092] Use struct sctp_assoc_value instead [ 159.674854][ T9084] tipc: Disabling bearer [ 159.707406][ T9096] sctp: [Deprecated]: syz.3.864 (pid 9096) Use of int in maxseg socket option. [ 159.707406][ T9096] Use struct sctp_assoc_value instead [ 159.871454][ T9104] bridge_slave_1: left allmulticast mode [ 159.884263][ T9104] bridge_slave_1: left promiscuous mode [ 159.891216][ T9104] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.910669][ T9104] bridge_slave_0: left allmulticast mode [ 159.931677][ T9104] bridge_slave_0: left promiscuous mode [ 159.950965][ T9104] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.337015][ T9130] IPVS: length: 239 != 24 [ 160.750757][ T9153] netlink: 'syz.0.879': attribute type 10 has an invalid length. [ 160.788951][ T9157] xt_connbytes: Forcing CT accounting to be enabled [ 160.795894][ T9157] xt_l2tp: missing protocol rule (udp|l2tpip) [ 161.944220][ T9243] netlink: 'syz.3.901': attribute type 21 has an invalid length. [ 161.977188][ T9243] netlink: 'syz.3.901': attribute type 5 has an invalid length. [ 162.405183][ T9266] __nla_validate_parse: 15 callbacks suppressed [ 162.405202][ T9266] netlink: 248 bytes leftover after parsing attributes in process `syz.1.908'. [ 162.599944][ T9272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.910'. [ 162.619767][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.909'. [ 162.683964][ T9270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.144824][ T9315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.189698][ T9316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.924'. [ 163.298484][ T9326] tipc: Enabled bearer , priority 0 [ 163.547062][ T9326] syzkaller0: entered promiscuous mode [ 163.577228][ T9326] syzkaller0: entered allmulticast mode [ 163.601514][ T9326] tipc: Resetting bearer [ 163.656432][ T9311] tipc: Resetting bearer [ 163.956283][ T9369] netlink: 224 bytes leftover after parsing attributes in process `syz.4.934'. [ 163.969380][ T9369] ksmbd: Unknown IPC event: 3, ignore. [ 164.369912][ T7414] tipc: Node number set to 2753303620 [ 164.944984][ T9311] tipc: Disabling bearer [ 165.025564][ T9374] bond3: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 165.054209][ T9374] bond3: entered promiscuous mode [ 165.059531][ T9374] bond3: entered allmulticast mode [ 165.066177][ T9374] 8021q: adding VLAN 0 to HW filter on device bond3 [ 165.213526][ T9384] syzkaller0: entered promiscuous mode [ 165.224105][ T9384] syzkaller0: entered allmulticast mode [ 165.240876][ T9388] blkio.reset_stats is deprecated [ 165.289305][ T9384] delete_channel: no stack [ 165.416059][ T9402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.942'. [ 165.530714][ T6387] IPVS: starting estimator thread 0... [ 165.638286][ T9410] IPVS: using max 24 ests per chain, 57600 per kthread [ 166.070963][ T9453] bond3: Removing last arp target with arp_interval on [ 166.323519][ T9473] netlink: 76 bytes leftover after parsing attributes in process `syz.0.957'. [ 166.586121][ T9483] xt_cgroup: xt_cgroup: no path or classid specified [ 166.608686][ T9483] netlink: 36 bytes leftover after parsing attributes in process `syz.0.963'. [ 166.731523][ T9499] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 166.748844][ T9498] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.874211][ T9506] netlink: 24 bytes leftover after parsing attributes in process `syz.2.969'. [ 167.078252][ T9516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.970'. [ 167.461083][ T9539] __nla_validate_parse: 1 callbacks suppressed [ 167.461102][ T9539] netlink: 60 bytes leftover after parsing attributes in process `syz.2.980'. [ 167.625919][ T9549] netlink: 'syz.4.983': attribute type 10 has an invalid length. [ 167.644198][ T9549] veth0_virt_wifi: entered allmulticast mode [ 167.665399][ T9549] team0: Port device veth0_virt_wifi added [ 167.683900][ T9555] sctp: [Deprecated]: syz.2.985 (pid 9555) Use of int in max_burst socket option deprecated. [ 167.683900][ T9555] Use struct sctp_assoc_value instead [ 167.835522][ T9566] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 167.843631][ T9566] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 168.297700][ T9592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.502902][ T9601] netlink: 'syz.4.1001': attribute type 39 has an invalid length. [ 168.661180][ T9609] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1004'. [ 168.707220][ T9618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1006'. [ 168.752035][ T9624] netlink: 676 bytes leftover after parsing attributes in process `syz.2.1002'. [ 168.763199][ T9617] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1002'. [ 169.239585][ T30] audit: type=1800 audit(1761009190.571:2): pid=9645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1016" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1119 res=0 errno=0 [ 169.442089][ T9665] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.1024'. [ 169.536827][ T9671] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1191 [ 169.755734][ T9690] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1027'. [ 169.829431][ T9696] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 169.929290][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1031'. [ 169.944540][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1032'. [ 169.956342][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1032'. [ 170.155819][ T9719] IPVS: length: 126 != 8 [ 170.167616][ T9720] IPVS: length: 126 != 8 [ 170.602610][ T9725] ieee802154 phy1 wpan1: encryption failed: -22 [ 170.719063][ T5832] Bluetooth: hci3: command 0x0405 tx timeout [ 170.895874][ T9740] syzkaller0: entered promiscuous mode [ 170.909220][ T9740] syzkaller0: entered allmulticast mode [ 171.489202][ T9775] sctp: [Deprecated]: syz.4.1052 (pid 9775) Use of int in max_burst socket option deprecated. [ 171.489202][ T9775] Use struct sctp_assoc_value instead [ 171.530051][ T9774] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 172.163176][ T9828] syzkaller1: entered promiscuous mode [ 172.169006][ T9828] syzkaller1: entered allmulticast mode [ 172.303462][ T9831] bridge0: port 3(ipvlan0) entered blocking state [ 172.310751][ T9831] bridge0: port 3(ipvlan0) entered disabled state [ 172.317352][ T9831] ipvlan0: entered allmulticast mode [ 172.323600][ T9831] bridge0: entered allmulticast mode [ 172.331039][ T9831] ipvlan0: left allmulticast mode [ 172.336459][ T9831] bridge0: left allmulticast mode [ 172.790078][ T9845] __nla_validate_parse: 4 callbacks suppressed [ 172.790097][ T9845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1075'. [ 172.959246][ T9851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1076'. [ 173.200092][ T9868] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 173.230780][ T9868] bond8 (unregistering): Released all slaves [ 173.495772][ T9890] Cannot find add_set index 2 as target [ 173.503411][ T9891] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1086'. [ 173.565512][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1088'. [ 173.582447][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1090'. [ 173.712835][ T9908] netlink: 'syz.4.1093': attribute type 1 has an invalid length. [ 173.873735][ T9922] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1096'. [ 174.230988][ T9939] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1100'. [ 174.373845][ T9947] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1102'. [ 174.443774][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1104'. [ 174.495980][ T9950] netlink: 'syz.0.1104': attribute type 3 has an invalid length. [ 174.523671][ T9952] netlink: 'syz.0.1104': attribute type 21 has an invalid length. [ 174.549270][ T9952] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1104'. [ 174.606582][ T9953] geneve5: entered promiscuous mode [ 174.618075][ T9953] geneve5: entered allmulticast mode [ 174.660059][ T50] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 174.788400][ T9958] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.819594][ T9958] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 174.862410][ T50] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 174.903858][ T8657] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 175.232359][ T8657] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.241946][ T8657] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.261686][ T8657] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.318580][ T8657] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.553678][T10001] bond2 (unregistering): Released all slaves [ 175.996865][T10033] netlink: 'syz.0.1131': attribute type 9 has an invalid length. [ 176.285284][T10055] nbd: socks must be embedded in a SOCK_ITEM attr [ 176.382707][ T9958] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.408875][ T9958] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 176.421187][ T9958] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 176.591680][ T9958] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.614704][ T9958] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 176.646127][ T9958] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 176.760251][ T9958] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.775795][ T9958] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 176.786435][ T9958] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 176.851974][T10080] bond5: option arp_all_targets: invalid value (3) [ 176.869939][T10080] bond5 (unregistering): Released all slaves [ 177.118912][ T8657] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 177.127250][ T8657] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 177.160417][ T8657] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 177.191875][ T8657] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 177.214580][ T8657] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 177.233706][ T8657] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 177.275005][T10107] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 177.358585][ T8665] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 177.370704][ T8665] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 177.380851][ T8665] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 177.420830][ T8665] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 177.430912][ T8665] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 177.447777][ T8665] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 177.611450][T10130] syzkaller0: refused to change device tx_queue_len [ 177.630990][T10129] syzkaller0: refused to change device tx_queue_len [ 177.651026][T10137] netlink: 'syz.4.1157': attribute type 1 has an invalid length. [ 177.671711][T10130] netlink: 'syz.4.1157': attribute type 1 has an invalid length. [ 177.731979][T10140] netlink: 'syz.0.1161': attribute type 2 has an invalid length. [ 177.950869][T10153] __nla_validate_parse: 21 callbacks suppressed [ 177.950890][T10153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1163'. [ 178.421486][T10186] netlink: 'syz.4.1173': attribute type 1 has an invalid length. [ 178.456477][T10186] 8021q: adding VLAN 0 to HW filter on device bond5 [ 178.484905][T10186] 8021q: adding VLAN 0 to HW filter on device bond5 [ 178.492312][T10186] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 178.502780][T10190] netlink: 'syz.0.1175': attribute type 8 has an invalid length. [ 178.504463][T10186] bond5: (slave ip6gre1): Error -95 calling set_mac_address [ 178.675871][T10203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1177'. [ 178.701879][T10203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1177'. [ 178.732217][T10205] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1178'. [ 178.760649][T10208] sctp: [Deprecated]: syz.0.1179 (pid 10208) Use of int in max_burst socket option deprecated. [ 178.760649][T10208] Use struct sctp_assoc_value instead [ 178.763555][T10203] syzkaller1: entered promiscuous mode [ 178.795972][T10203] syzkaller1: entered allmulticast mode [ 178.804159][T10209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1180'. [ 178.975889][T10219] netlink: 'syz.2.1182': attribute type 1 has an invalid length. [ 179.011185][T10219] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.021847][T10219] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1182'. [ 179.367176][T10241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1187'. [ 179.669394][T10260] netlink: 'syz.4.1197': attribute type 8 has an invalid length. [ 179.715048][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1195'. [ 179.879990][T10270] batadv1: entered allmulticast mode [ 180.402411][T10303] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1209'. [ 180.424336][T10303] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1209'. [ 180.691539][T10321] netlink: 'syz.0.1213': attribute type 5 has an invalid length. [ 180.820469][T10320] tipc: Enabled bearer , priority 0 [ 180.858643][T10311] syzkaller0: entered promiscuous mode [ 180.868822][T10311] syzkaller0: entered allmulticast mode [ 180.881711][T10311] bond_slave_1: mtu less than device minimum [ 180.908121][T10310] tipc: Resetting bearer [ 180.937523][T10331] netlink: 'syz.4.1216': attribute type 10 has an invalid length. [ 180.951098][T10310] tipc: Disabling bearer [ 180.967928][T10331] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.975772][T10331] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.026778][T10331] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.034178][T10331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.041876][T10331] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.049098][T10331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.134325][T10331] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 181.402573][T10350] syzkaller0: entered promiscuous mode [ 181.418038][T10350] syzkaller0: entered allmulticast mode [ 181.614945][T10357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.625727][T10357] batadv_slave_0: entered promiscuous mode [ 181.665698][T10364] tipc: Enabling of bearer rejected, failed to enable media [ 181.690819][T10368] netlink: 'syz.2.1228': attribute type 1 has an invalid length. [ 181.742045][T10368] bond3: (slave bridge3): making interface the new active one [ 181.751514][T10368] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 182.442906][T10414] tc_dump_action: action bad kind [ 182.505503][T10419] erspan0: entered promiscuous mode [ 183.301790][T10473] __nla_validate_parse: 9 callbacks suppressed [ 183.301811][T10473] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1256'. [ 183.549884][T10488] sctp: [Deprecated]: syz.2.1259 (pid 10488) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.549884][T10488] Use struct sctp_sack_info instead [ 183.630293][T10491] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1261'. [ 183.702494][T10496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1263'. [ 183.772349][T10500] syzkaller0: entered promiscuous mode [ 183.779662][T10499] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1264'. [ 183.781388][T10500] syzkaller0: entered allmulticast mode [ 183.810316][T10500] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 183.830148][T10500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1265'. [ 184.084274][T10516] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1270'. [ 184.132889][T10519] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1272'. [ 184.329940][T10537] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1276'. [ 184.564234][T10554] xfrm0: entered allmulticast mode [ 184.630077][T10559] nbd: must specify at least one socket [ 184.740303][T10557] team0 (unregistering): Port device team_slave_0 removed [ 184.750132][T10557] team0 (unregistering): Port device team_slave_1 removed [ 184.753635][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1287'. [ 185.053744][T10581] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 185.112248][T10589] sctp: [Deprecated]: syz.2.1291 (pid 10589) Use of int in maxseg socket option. [ 185.112248][T10589] Use struct sctp_assoc_value instead [ 185.136383][T10591] bridge0: mtu less than device minimum [ 185.160856][T10592] netlink: 'syz.3.1294': attribute type 4 has an invalid length. [ 185.211901][T10596] netlink: 'syz.3.1294': attribute type 4 has an invalid length. [ 185.302765][T10592] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1294'. [ 185.568207][T10613] netlink: 'syz.3.1299': attribute type 11 has an invalid length. [ 185.579416][T10613] netlink: 'syz.3.1299': attribute type 11 has an invalid length. [ 185.997506][T10635] batman_adv: batadv0: Removing interface: team0 [ 186.019916][T10635] team0 (unregistering): Port device team_slave_0 removed [ 186.033404][T10635] team0 (unregistering): Port device team_slave_1 removed [ 186.357422][T10665] netlink: 'syz.0.1314': attribute type 26 has an invalid length. [ 186.775627][T10679] nbd0: detected capacity change from 0 to 127 [ 186.800103][ T5832] block nbd0: Receive control failed (result -32) [ 186.830582][ T5832] Bluetooth: hci3: link tx timeout [ 186.836122][ T5832] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.195221][T10709] netlink: 'syz.1.1326': attribute type 1 has an invalid length. [ 187.449563][T10709] 8021q: adding VLAN 0 to HW filter on device bond8 [ 187.599897][T10732] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 187.695369][T10740] netlink: 'syz.1.1335': attribute type 2 has an invalid length. [ 187.954163][T10751] netem: change failed [ 188.294649][T10775] tc_dump_action: action bad kind [ 188.398807][T10778] bond9: option miimon: invalid value (18446744073709551585) [ 188.400627][T10781] __nla_validate_parse: 21 callbacks suppressed [ 188.400648][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1347'. [ 188.407662][T10778] bond9: option miimon: allowed values 0 - 2147483647 [ 188.432946][T10778] bond9 (unregistering): Released all slaves [ 188.557570][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1348'. [ 188.568761][T10787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1348'. [ 188.878099][ T5833] Bluetooth: hci3: command 0x0405 tx timeout [ 188.972192][T10806] syzkaller0: entered promiscuous mode [ 188.997210][T10806] syzkaller0: entered allmulticast mode [ 189.482748][T10831] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 189.506441][T10831] bond3 (unregistering): Released all slaves [ 189.833467][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1363'. [ 189.873331][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1365'. [ 189.907148][T10845] vlan6: entered allmulticast mode [ 189.923554][T10849] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 189.938369][T10849] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 189.961048][T10849] gretap1: entered promiscuous mode [ 189.966428][T10849] gretap1: entered allmulticast mode [ 190.180817][T10858] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1367'. [ 190.264848][T10865] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1368'. [ 190.313823][T10865] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1368'. [ 190.379903][T10867] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1369'. [ 190.440008][T10872] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1371'. [ 190.577049][T10882] netlink: 'syz.1.1372': attribute type 2 has an invalid length. [ 190.800683][T10897] netlink: 'syz.1.1378': attribute type 2 has an invalid length. [ 190.835794][T10902] bond0: (slave rose0): Error: Device can not be enslaved while up [ 191.343702][T10930] netlink: 'syz.1.1388': attribute type 10 has an invalid length. [ 191.366956][T10930] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 191.384782][T10930] netlink: 'syz.1.1388': attribute type 10 has an invalid length. [ 191.788571][T10947] macvtap1: entered promiscuous mode [ 191.795172][T10947] vlan0: entered promiscuous mode [ 191.800971][T10947] macvtap1: entered allmulticast mode [ 191.825968][T10947] vlan0: entered allmulticast mode [ 191.831641][T10947] veth0_vlan: entered allmulticast mode [ 192.045497][T10964] netlink: 'syz.2.1400': attribute type 1 has an invalid length. [ 192.055643][T10964] netlink: 'syz.2.1400': attribute type 3 has an invalid length. [ 192.518963][T10993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.603999][T10995] tipc: Enabled bearer , priority 0 [ 192.643482][T10995] tipc: Disabling bearer [ 192.722268][T11007] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 192.934659][T11021] ip6gre0: Master is either lo or non-ether device [ 193.178862][T11030] syzkaller1: entered promiscuous mode [ 193.198192][T11030] syzkaller1: entered allmulticast mode [ 193.486849][T11051] tipc: Enabling of bearer rejected, failed to enable media [ 193.550931][T11061] __nla_validate_parse: 11 callbacks suppressed [ 193.550950][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1432'. [ 193.678354][T11072] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1436'. [ 193.700373][T11072] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.203588][T11098] syzkaller0: entered promiscuous mode [ 194.209946][T11098] syzkaller0: entered allmulticast mode [ 194.232569][T11098] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1444'. [ 194.244038][T11098] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1444'. [ 194.499236][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.652247][T11117] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1450'. [ 194.822366][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1450'. [ 194.948260][ T6639] nci: nci_rx_work: unknown MT 0x7 [ 195.001246][T11138] xt_TCPMSS: Only works on TCP SYN packets [ 195.010959][T11138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1456'. [ 195.045564][T11145] lo: entered promiscuous mode [ 195.220682][T11156] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 195.792358][T11179] netlink: 'syz.4.1468': attribute type 1 has an invalid length. [ 195.836634][T11184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.856360][T11182] netlink: 'syz.2.1469': attribute type 1 has an invalid length. [ 195.935400][T11186] netlink: 'syz.1.1471': attribute type 2 has an invalid length. [ 196.010808][T11191] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 196.066365][T11191] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 196.083159][T11200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1477'. [ 196.107251][T11205] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1476'. [ 196.141923][T11182] bond5: (slave bridge4): Enslaving as an active interface with a down link [ 196.171956][ T8675] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.212959][T11188] gretap2: entered promiscuous mode [ 196.218980][T11188] gretap2: entered allmulticast mode [ 196.231499][T11188] bond5: (slave gretap2): making interface the new active one [ 196.255529][T11188] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 196.279432][ T8675] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.319017][ T8675] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.327269][ T8675] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.437963][T11223] IPVS: set_ctl: invalid protocol: 0 100.1.0.255:20000 [ 196.555247][T11227] bond0: entered promiscuous mode [ 196.575827][T11227] bond_slave_0: entered promiscuous mode [ 196.596147][T11227] bond_slave_1: entered promiscuous mode [ 196.891553][T11256] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1492'. [ 197.738787][T11310] netlink: 'syz.3.1503': attribute type 2 has an invalid length. [ 197.992882][T11325] x_tables: duplicate underflow at hook 4 [ 198.533657][T11356] macvtap2: entered promiscuous mode [ 198.541642][T11356] macvtap2: entered allmulticast mode [ 198.547674][T11356] bond_slave_0: entered promiscuous mode [ 198.553799][T11356] bond_slave_1: entered promiscuous mode [ 198.560652][T11356] bond0: entered allmulticast mode [ 198.565819][T11356] bond_slave_0: entered allmulticast mode [ 198.572227][T11356] bond_slave_1: entered allmulticast mode [ 198.580800][T11356] bridge_slave_1: entered allmulticast mode [ 198.586923][T11356] bond0: entered promiscuous mode [ 198.593634][T11356] bridge_slave_1: entered promiscuous mode [ 198.602594][T11356] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 198.611060][T11356] team0: Device macvtap2 failed to register rx_handler [ 198.622087][T11356] bond0: left allmulticast mode [ 198.627228][T11356] bond_slave_0: left allmulticast mode [ 198.633173][T11356] bond_slave_1: left allmulticast mode [ 198.638937][T11356] bridge_slave_1: left allmulticast mode [ 198.644858][T11356] bond0: left promiscuous mode [ 198.651454][T11356] bridge_slave_1: left promiscuous mode [ 198.657612][T11356] bond_slave_0: left promiscuous mode [ 198.663162][T11356] bond_slave_1: left promiscuous mode [ 198.881245][ T6387] IPVS: starting estimator thread 0... [ 198.881724][T11373] netlink: 'syz.3.1524': attribute type 58 has an invalid length. [ 198.925702][T11373] __nla_validate_parse: 7 callbacks suppressed [ 198.925723][T11373] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1524'. [ 198.978149][T11376] IPVS: using max 24 ests per chain, 57600 per kthread [ 199.097730][T11385] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1528'. [ 200.047278][T11459] smc: net device gre0 applied user defined pnetid SYZ1 [ 200.073581][T11459] smc: net device gre0 erased user defined pnetid SYZ1 [ 200.123645][T11459] netlink: 'syz.0.1550': attribute type 8 has an invalid length. [ 200.132295][T11460] netlink: 'syz.0.1550': attribute type 8 has an invalid length. [ 200.142228][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1550'. [ 200.149841][T11460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1550'. [ 200.224771][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1551'. [ 200.485214][T11484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.604285][T11493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1560'. [ 200.796218][T11493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1560'. [ 200.837993][T11493] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1560'. [ 200.978634][T11513] : renamed from vlan0 [ 201.128940][T11518] bond6: option arp_all_targets: invalid value (3) [ 201.143318][T11518] bond6 (unregistering): Released all slaves [ 201.165755][T11522] netlink: 'syz.0.1569': attribute type 28 has an invalid length. [ 201.176760][T11522] netlink: 'syz.0.1569': attribute type 3 has an invalid length. [ 201.184946][T11522] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1569'. [ 201.214505][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1568'. [ 201.630878][T11551] netlink: 'syz.3.1576': attribute type 1 has an invalid length. [ 202.175646][T11569] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 202.522078][T11605] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 202.742095][ T8661] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 202.761999][ T8661] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 202.855256][ T8661] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 202.878697][ T8661] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 203.087474][T11632] netlink: 'syz.0.1605': attribute type 1 has an invalid length. [ 203.152653][T11643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.188958][T11643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.523214][T11665] netlink: 'syz.4.1615': attribute type 2 has an invalid length. [ 203.535974][T11667] netlink: 'syz.4.1615': attribute type 2 has an invalid length. [ 203.575771][T11669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.716192][T11678] tipc: Enabled bearer , priority 0 [ 203.770769][T11678] tipc: Resetting bearer [ 203.954315][T11693] tap0: tun_chr_ioctl cmd 1074025678 [ 203.965852][T11693] tap0: group set to 0 [ 203.999892][T11696] : renamed from bridge_slave_0 (while UP) [ 204.108748][T11700] __nla_validate_parse: 69 callbacks suppressed [ 204.108769][T11700] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1628'. [ 204.125754][T11700] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1628'. [ 204.144199][T11700] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1628'. [ 204.158020][T11700] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1628'. [ 204.166538][T11706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1631'. [ 204.177254][T11700] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1628'. [ 204.188759][T11700] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1628'. [ 204.199269][T11702] syzkaller1: entered promiscuous mode [ 204.204885][T11702] syzkaller1: entered allmulticast mode [ 204.217978][T11700] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1628'. [ 204.227535][T11700] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1628'. [ 204.242607][T11709] netlink: 'syz.3.1629': attribute type 10 has an invalid length. [ 204.293675][T11709] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.318695][T11700] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1628'. [ 204.374200][T11716] netlink: 'syz.1.1634': attribute type 1 has an invalid length. [ 204.385071][T11716] netlink: 'syz.1.1634': attribute type 3 has an invalid length. [ 204.512386][T11722] veth3: entered promiscuous mode [ 204.717192][T11734] netlink: 'syz.1.1639': attribute type 13 has an invalid length. [ 205.279999][T11763] Dead loop on virtual device ip6_vti0, fix it urgently! [ 205.304664][T11763] Dead loop on virtual device ip6_vti0, fix it urgently! [ 205.331618][T11763] Dead loop on virtual device ip6_vti0, fix it urgently! [ 205.363572][T11763] Dead loop on virtual device ip6_vti0, fix it urgently! [ 205.750870][T11789] !: renamed from dummy0 (while UP) [ 205.993390][T11802] bridge0: port 3(veth0_to_bridge) entered blocking state [ 206.002374][T11802] bridge0: port 3(veth0_to_bridge) entered disabled state [ 206.011755][T11802] veth0_to_bridge: entered allmulticast mode [ 206.021020][T11802] veth0_to_bridge: entered promiscuous mode [ 206.271092][T11830] pim6reg: left allmulticast mode [ 206.386928][T11835] syzkaller0: entered promiscuous mode [ 206.428077][T11835] syzkaller0: entered allmulticast mode [ 206.732402][T11861] netlink: 'syz.2.1677': attribute type 1 has an invalid length. [ 206.767196][T11863] SET target dimension over the limit! [ 206.857768][T11873] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 206.899320][T11873] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 207.056901][T11886] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20003 [ 207.066504][T11861] bond6: (slave bridge5): Enslaving as an active interface with a down link [ 207.398936][T11905] batadv_slave_0: entered promiscuous mode [ 207.408712][T11905] batadv_slave_0: entered allmulticast mode [ 207.514853][T11909] can: request_module (can-proto-5) failed. [ 207.943678][T11941] block nbd2: Unsupported socket: should be TCP or UNIX. [ 208.405877][T11967] rdma_op ffff888055ac19f0 conn xmit_rdma 0000000000000000 [ 210.078533][ T8657] wlan1: Trigger new scan to find an IBSS to join [ 211.922252][ T52] Bluetooth: hci2: command 0x0401 tx timeout [ 211.924006][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 211.930182][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 213.038581][ T50] wlan1: Trigger new scan to find an IBSS to join [ 216.078427][ T8657] wlan1: Trigger new scan to find an IBSS to join [ 216.968482][ T8657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.038369][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 234.345170][T12006] __nla_validate_parse: 124 callbacks suppressed [ 234.345191][T12006] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1721'. [ 234.412317][T12008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1722'. [ 234.544971][T12017] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1725'. [ 234.560249][T12017] netlink: 'syz.0.1725': attribute type 7 has an invalid length. [ 234.582554][T12017] netlink: 'syz.0.1725': attribute type 8 has an invalid length. [ 234.604450][T12017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1725'. [ 234.623238][T12019] netlink: 'syz.0.1725': attribute type 1 has an invalid length. [ 234.673484][T12017] gretap0: entered promiscuous mode [ 234.681561][T12017] batadv_slave_1: entered promiscuous mode [ 234.688826][T12017] batadv_slave_1: left promiscuous mode [ 234.696530][T12017] gretap0: left promiscuous mode [ 234.717386][T12024] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:0 [ 234.809016][T12017] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1725'. [ 234.883770][T12019] gretap2: entered promiscuous mode [ 235.307644][T12069] Bluetooth: hci0: Opcode 0x080f failed: -112 [ 235.509636][T12069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1738'. [ 235.562462][T12069] ip6gre2: entered promiscuous mode [ 235.655551][T12086] bond3: option lp_interval: invalid value (0) [ 235.661952][T12086] bond3: option lp_interval: allowed values 1 - 2147483647 [ 235.674042][T12086] bond3 (unregistering): Released all slaves [ 235.866450][T12102] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1748'. [ 235.887124][T12102] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1748'. [ 236.082444][T12112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1753'. [ 236.118606][T12112] tipc: Enabling of bearer rejected, already enabled [ 236.171509][T12116] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1754'. [ 236.356876][T12127] netlink: 'syz.4.1759': attribute type 4 has an invalid length. [ 236.805625][T12155] netlink: 'syz.0.1767': attribute type 6 has an invalid length. [ 237.100416][T12171] netlink: 'syz.3.1771': attribute type 5 has an invalid length. [ 237.233019][T12185] netlink: 'syz.4.1774': attribute type 4 has an invalid length. [ 237.291809][T12185] `: renamed from bond0 (while UP) [ 237.359134][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 237.365292][ T5832] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 237.459587][T12195] netlink: 'syz.4.1777': attribute type 83 has an invalid length. [ 237.501771][T12197] lo: entered promiscuous mode [ 237.522722][T12197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.888478][T12229] sctp: [Deprecated]: syz.3.1787 (pid 12229) Use of int in maxseg socket option. [ 237.888478][T12229] Use struct sctp_assoc_value instead [ 237.906013][T12229] x_tables: duplicate underflow at hook 1 [ 237.976552][T12222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.995924][T12222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.015744][T12222] xfrm0: left allmulticast mode [ 238.139500][T12222] macsec0: left promiscuous mode [ 238.188757][T12222] gretap1: left promiscuous mode [ 238.193855][T12222] gretap1: left allmulticast mode [ 238.202384][T12222] vlan0: left allmulticast mode [ 238.207279][T12222] veth0_vlan: left allmulticast mode [ 238.214077][T12222] vlan0: left promiscuous mode [ 238.220222][T12222] macvtap1: left promiscuous mode [ 238.225372][T12222] macvtap1: left allmulticast mode [ 238.232455][T12222] veth3: left promiscuous mode [ 238.251233][T12227] geneve2: entered promiscuous mode [ 238.256513][T12227] geneve2: entered allmulticast mode [ 238.264289][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.273501][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.290705][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.332476][ T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.357239][T12236] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 238.499283][T12242] netlink: 'syz.0.1790': attribute type 1 has an invalid length. [ 238.576680][T12220] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 238.581968][T12251] netlink: 'syz.3.1792': attribute type 1 has an invalid length. [ 238.596005][T12220] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 238.683933][T12220] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 238.701052][T12220] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 238.750639][T12220] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 238.759207][T12220] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 238.804856][T12220] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 238.810816][T12270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.812673][T12270] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.829561][T12270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.840603][T12220] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 238.872385][T12220] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 238.885554][T12220] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 238.902456][T12275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.982266][T12277] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.411040][T12296] __nla_validate_parse: 15 callbacks suppressed [ 239.411060][T12296] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1802'. [ 239.602250][T12306] tipc: Enabled bearer , priority 0 [ 239.628322][T12308] syzkaller0: entered promiscuous mode [ 239.634406][T12308] syzkaller0: entered allmulticast mode [ 239.710562][T12308] tipc: Resetting bearer [ 239.751526][T12308] tipc: Disabling bearer [ 239.825866][T12323] netlink: 'syz.0.1810': attribute type 1 has an invalid length. [ 239.900180][T12335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.091721][T12346] netlink: 'syz.3.1818': attribute type 1 has an invalid length. [ 240.198428][T12351] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 240.221199][T12356] netlink: 'syz.1.1821': attribute type 2 has an invalid length. [ 240.356936][T12371] IPv6: Can't replace route, no match found [ 240.482173][T12382] netlink: 'syz.3.1827': attribute type 1 has an invalid length. [ 240.551788][T12380] tipc: Enabled bearer , priority 0 [ 240.576384][T12386] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 240.593043][T12380] netlink: 'syz.2.1826': attribute type 13 has an invalid length. [ 240.629286][T12380] netlink: 'syz.2.1826': attribute type 58 has an invalid length. [ 240.637257][T12380] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1826'. [ 240.731675][T12389] 8021q: adding VLAN 0 to HW filter on device bond4 [ 240.759393][T12392] syzkaller0: entered promiscuous mode [ 240.765138][T12392] syzkaller0: entered allmulticast mode [ 240.870525][T12380] tipc: Resetting bearer [ 240.941092][T12378] tipc: Resetting bearer [ 240.995431][T12378] tipc: Disabling bearer [ 241.221047][T12427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1841'. [ 241.240486][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1842'. [ 241.248205][T12426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1841'. [ 241.276857][T12430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1841'. [ 241.485222][T12440] gre1: entered promiscuous mode [ 241.490816][T12440] gre1: entered allmulticast mode [ 241.591184][T12445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1847'. [ 241.854752][T12463] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1851'. [ 241.854752][T12462] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1851'. [ 241.854832][T12463] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 241.892748][T12462] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 241.941887][T12470] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1853'. [ 242.084579][T12478] xt_hashlimit: size too large, truncated to 1048576 [ 242.650293][T12516] netlink: 'syz.1.1864': attribute type 21 has an invalid length. [ 243.946420][T12575] syzkaller0: entered allmulticast mode [ 243.971397][T12583] syzkaller1: entered promiscuous mode [ 243.976934][T12583] syzkaller1: entered allmulticast mode [ 244.003401][T12583] netlink: 'syz.1.1883': attribute type 3 has an invalid length. [ 244.031722][T12583] xt_hashlimit: size too large, truncated to 1048576 [ 245.564819][T12608] netlink: 'syz.3.1891': attribute type 1 has an invalid length. [ 245.658836][T12613] __nla_validate_parse: 6 callbacks suppressed [ 245.658857][T12613] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1889'. [ 245.987059][T12633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1898'. [ 246.043446][T12632] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 246.587966][T12669] netlink: 'syz.1.1906': attribute type 5 has an invalid length. [ 246.610399][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1908'. [ 246.619631][T12680] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1908'. [ 246.787370][T12687] netlink: 'syz.2.1911': attribute type 1 has an invalid length. [ 246.795736][T12687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1911'. [ 246.805600][T12688] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1910'. [ 246.820107][T12688] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1910'. [ 247.309494][T12713] bond0: left promiscuous mode [ 247.314335][T12713] bond_slave_0: left promiscuous mode [ 247.365564][T12713] bond_slave_1: left promiscuous mode [ 247.384408][T12713] batadv_slave_0: left promiscuous mode [ 247.399399][T12713] bond1: left promiscuous mode [ 247.410908][T12713] gretap2: left promiscuous mode [ 247.679092][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1925'. [ 247.729686][T12740] dvmrp0: entered allmulticast mode [ 247.769112][T12742] vcan0: tx address claim with dest, not broadcast [ 247.874918][T12751] tipc: Enabled bearer , priority 0 [ 247.895691][T12751] syzkaller0: entered promiscuous mode [ 247.908233][T12751] syzkaller0: entered allmulticast mode [ 247.960445][T12751] tipc: Resetting bearer [ 247.971711][T12751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1930'. [ 247.982183][T12755] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1933'. [ 248.012202][T12750] tipc: Resetting bearer [ 248.027082][T12750] tipc: Disabling bearer [ 248.206628][T12770] netlink: 'syz.1.1938': attribute type 28 has an invalid length. [ 248.240660][T12769] syzkaller0: entered promiscuous mode [ 248.253574][T12769] syzkaller0: entered allmulticast mode [ 248.263876][T12770] netlink: 'syz.1.1938': attribute type 3 has an invalid length. [ 248.297142][T12776] netlink: 'syz.3.1940': attribute type 11 has an invalid length. [ 248.581445][T12792] netlink: 'syz.1.1944': attribute type 32 has an invalid length. [ 248.652317][T12792] bond10: option coupled_control: invalid value (64) [ 248.677145][T12792] bond10 (unregistering): Released all slaves [ 248.716366][T12800] gretap0: entered promiscuous mode [ 248.726991][T12800] gretap0: left promiscuous mode [ 248.750847][T12806] netlink: 'syz.4.1948': attribute type 4 has an invalid length. [ 248.802679][T12809] netlink: 'syz.4.1948': attribute type 4 has an invalid length. [ 248.925797][T12817] bridge_slave_0: left allmulticast mode [ 248.941865][T12817] bridge_slave_0: left promiscuous mode [ 248.952966][T12817] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.020635][T12817] bond0: (slave bridge_slave_1): Releasing backup interface [ 249.040872][T12817] bond0: (slave bond_slave_0): Releasing backup interface [ 249.054596][T12817] bond0: (slave bond_slave_1): Releasing backup interface [ 249.066005][T12817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.074879][T12817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.084336][T12817] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 249.113712][T12828] vlan1: entered allmulticast mode [ 249.120871][T12829] netlink: 'syz.3.1955': attribute type 21 has an invalid length. [ 249.129202][T12828] veth0_vlan: entered allmulticast mode [ 251.809431][T12937] __nla_validate_parse: 80 callbacks suppressed [ 251.809449][T12937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1986'. [ 251.991690][T12944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.007343][T12940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1987'. [ 252.435711][T12967] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1993'. [ 252.665461][T12974] x_tables: duplicate underflow at hook 1 [ 252.761012][T12982] bond0: (slave bond_slave_1): Device is not our slave [ 252.768226][T12982] bond0: option active_slave: invalid value (bond_slave_1) [ 252.781505][T12982] bond0 (unregistering): Released all slaves [ 252.856819][T12995] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2001'. [ 253.062278][T13008] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2004'. [ 253.116164][T13010] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 253.286907][T13026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2011'. [ 253.343122][T13028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2012'. [ 253.380311][T13028] 8021q: adding VLAN 0 to HW filter on device bond5 [ 253.394687][T13028] bond5: entered allmulticast mode [ 253.427264][T13032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2013'. [ 253.545802][T13041] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2014'. [ 253.575584][T13045] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2016'. [ 254.542970][ T30] audit: type=1107 audit(1761009275.881:3): pid=13107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='j0_٭SҕI1óR.ouv' [ 254.583596][T13111] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 256.111729][T13219] syzkaller0: entered promiscuous mode [ 256.128288][T13219] syzkaller0: entered allmulticast mode [ 256.148285][T13219] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 256.197434][T13224] tipc: Enabling of bearer rejected, failed to enable media [ 256.208489][T13226] validate_nla: 1 callbacks suppressed [ 256.208518][T13226] netlink: 'syz.4.2066': attribute type 10 has an invalid length. [ 256.244679][T13226] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.268978][T13226] bridge_slave_1: left allmulticast mode [ 256.291600][T13226] bridge_slave_1: left promiscuous mode [ 256.305330][T13226] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.339269][T13226] `: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 256.601570][T13245] geneve2: entered promiscuous mode [ 256.617915][T13245] geneve2: entered allmulticast mode [ 256.883518][T13265] __nla_validate_parse: 12 callbacks suppressed [ 256.883537][T13265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2079'. [ 256.933837][T13265] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2079'. [ 256.950235][T13265] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2079'. [ 257.174504][T13278] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2082'. [ 257.266237][T13285] ip6gre2: entered promiscuous mode [ 257.809271][T13315] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 257.849900][T13320] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2095'. [ 257.900449][T13323] bridge23: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 258.131407][T13331] syzkaller0: entered promiscuous mode [ 258.136949][T13331] syzkaller0: entered allmulticast mode [ 258.164523][T13336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2102'. [ 258.343545][T13356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2106'. [ 258.713546][T13375] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2112'. [ 259.666057][T13348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2105'. [ 259.880470][T13383] tipc: Enabled bearer , priority 0 [ 259.950902][T13383] tipc: Disabling bearer [ 260.079558][T13405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2119'. [ 260.163781][T13409] netlink: 'syz.3.2121': attribute type 12 has an invalid length. [ 260.292593][T13409] bond6: option primary_reselect: invalid value (255) [ 260.338169][T13424] syz.2.2124: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 260.366067][T13409] bond6 (unregistering): Released all slaves [ 260.439512][T13424] CPU: 1 UID: 0 PID: 13424 Comm: syz.2.2124 Not tainted syzkaller #0 PREEMPT(full) [ 260.439543][T13424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 260.439563][T13424] Call Trace: [ 260.439572][T13424] [ 260.439581][T13424] dump_stack_lvl+0x189/0x250 [ 260.439615][T13424] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.439639][T13424] ? __pfx__printk+0x10/0x10 [ 260.439663][T13424] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 260.439687][T13424] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 260.439712][T13424] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 260.439739][T13424] warn_alloc+0x214/0x310 [ 260.439766][T13424] ? stack_depot_save_flags+0x40/0x860 [ 260.439793][T13424] ? __pfx_warn_alloc+0x10/0x10 [ 260.439820][T13424] ? kasan_save_track+0x3e/0x80 [ 260.439842][T13424] ? __kasan_kmalloc+0x93/0xb0 [ 260.439869][T13424] ? xsk_setsockopt+0x4dc/0x8d0 [ 260.439892][T13424] ? do_sock_setsockopt+0x17c/0x1b0 [ 260.439914][T13424] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 260.439934][T13424] ? do_syscall_64+0xfa/0xfa0 [ 260.439963][T13424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.439996][T13424] __vmalloc_node_range_noprof+0x125/0x12d0 [ 260.440057][T13424] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 260.440087][T13424] ? __kasan_kmalloc+0x93/0xb0 [ 260.440120][T13424] vmalloc_user_noprof+0xad/0xf0 [ 260.440152][T13424] ? xskq_create+0xbf/0x170 [ 260.440181][T13424] xskq_create+0xbf/0x170 [ 260.440212][T13424] xsk_init_queue+0xb0/0x110 [ 260.440243][T13424] xsk_setsockopt+0x4dc/0x8d0 [ 260.440272][T13424] ? __pfx_xsk_setsockopt+0x10/0x10 [ 260.440302][T13424] ? __pfx_aa_sk_perm+0x10/0x10 [ 260.440328][T13424] ? aa_sock_opt_perm+0xff/0x1b0 [ 260.440357][T13424] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 260.440385][T13424] ? __pfx_xsk_setsockopt+0x10/0x10 [ 260.440413][T13424] do_sock_setsockopt+0x17c/0x1b0 [ 260.440442][T13424] __x64_sys_setsockopt+0x13f/0x1b0 [ 260.440477][T13424] do_syscall_64+0xfa/0xfa0 [ 260.440505][T13424] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.440534][T13424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.440554][T13424] ? clear_bhb_loop+0x60/0xb0 [ 260.440580][T13424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.440601][T13424] RIP: 0033:0x7fec19b8efc9 [ 260.440620][T13424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.440638][T13424] RSP: 002b:00007fec17df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 260.440660][T13424] RAX: ffffffffffffffda RBX: 00007fec19de5fa0 RCX: 00007fec19b8efc9 [ 260.440675][T13424] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 260.440687][T13424] RBP: 00007fec19c11f91 R08: 0000000000000004 R09: 0000000000000000 [ 260.440700][T13424] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.440713][T13424] R13: 00007fec19de6038 R14: 00007fec19de5fa0 R15: 00007ffc7d0847d8 [ 260.440751][T13424] [ 260.729116][T13424] Mem-Info: [ 260.732384][T13424] active_anon:3808 inactive_anon:0 isolated_anon:0 [ 260.732384][T13424] active_file:3143 inactive_file:39944 isolated_file:0 [ 260.732384][T13424] unevictable:768 dirty:120 writeback:0 [ 260.732384][T13424] slab_reclaimable:11923 slab_unreclaimable:102715 [ 260.732384][T13424] mapped:28893 shmem:1360 pagetables:898 [ 260.732384][T13424] sec_pagetables:0 bounce:0 [ 260.732384][T13424] kernel_misc_reclaimable:0 [ 260.732384][T13424] free:1326929 free_pcp:14253 free_cma:0 [ 260.780846][T13424] Node 0 active_anon:15232kB inactive_anon:0kB active_file:12572kB inactive_file:159576kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115572kB dirty:480kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13216kB pagetables:3472kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 260.814964][T13424] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 260.845444][T13424] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 260.933126][T13424] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 260.948109][T13424] Node 0 DMA32 free:1402996kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15432kB inactive_anon:0kB active_file:12572kB inactive_file:159576kB unevictable:1536kB writepending:480kB zspages:0kB present:3129332kB managed:2561544kB mlocked:0kB bounce:0kB free_pcp:39056kB local_pcp:20144kB free_cma:0kB [ 260.982151][T13424] lowmem_reserve[]: 0 0 1 1 1 [ 260.986930][T13424] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 261.019500][T13424] lowmem_reserve[]: 0 0 0 0 0 [ 261.024299][T13424] Node 1 Normal free:3889360kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17540kB local_pcp:8676kB free_cma:0kB [ 261.057104][T13424] lowmem_reserve[]: 0 0 0 0 0 [ 261.061944][T13424] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 261.074758][T13424] Node 0 DMA32: 1575*4kB (UME) 776*8kB (UME) 121*16kB (UM) 299*32kB (UM) 102*64kB (UM) 48*128kB (UME) 21*256kB (UM) 8*512kB (UM) 5*1024kB (UME) 6*2048kB (UM) 327*4096kB (M) = 1402956kB [ 261.093424][T13424] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 261.104965][T13424] Node 1 Normal: 186*4kB (UE) 41*8kB (UME) 42*16kB (UME) 86*32kB (UME) 25*64kB (UME) 6*128kB (UME) 4*256kB (UM) 3*512kB (ME) 3*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3889360kB [ 261.123153][T13424] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.133236][T13424] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 261.142708][T13424] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.152910][T13424] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 261.162346][T13424] 44444 total pagecache pages [ 261.167193][T13424] 0 pages in swap cache [ 261.172092][T13424] Free swap = 124996kB [ 261.176264][T13424] Total swap = 124996kB [ 261.181374][T13424] 2097051 pages RAM [ 261.185214][T13424] 0 pages HighMem/MovableOnly [ 261.190018][T13424] 424575 pages reserved [ 261.194201][T13424] 0 pages cma reserved [ 412.718568][ T31] INFO: task syz.2.2124:13424 blocked for more than 143 seconds. [ 412.726506][ T31] Not tainted syzkaller #0 [ 412.731532][ T31] Blocked by coredump. [ 412.736142][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.744899][ T31] task:syz.2.2124 state:D stack:25528 pid:13424 tgid:13423 ppid:5834 task_flags:0x40054c flags:0x00080001 [ 412.756986][ T31] Call Trace: [ 412.760333][ T31] [ 412.763300][ T31] __schedule+0x1798/0x4cc0 [ 412.767920][ T31] ? __lock_acquire+0xab9/0xd20 [ 412.773035][ T31] ? __lock_acquire+0xab9/0xd20 [ 412.777941][ T31] ? __pfx___schedule+0x10/0x10 [ 412.782816][ T31] ? schedule+0x91/0x360 [ 412.787074][ T31] schedule+0x165/0x360 [ 412.791265][ T31] schedule_preempt_disabled+0x13/0x30 [ 412.796736][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 412.802563][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 412.808445][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 412.814610][ T31] ? __lock_acquire+0xab9/0xd20 [ 412.819632][ T31] ? exit_mmap+0x286/0xb40 [ 412.824152][ T31] down_write+0x1ab/0x1f0 [ 412.828507][ T31] ? __pfx_down_write+0x10/0x10 [ 412.833378][ T31] exit_mmap+0x286/0xb40 [ 412.837632][ T31] ? uprobe_clear_state+0x20f/0x290 [ 412.842883][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 412.847667][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 412.853377][ T31] ? __pfx_exit_aio+0x10/0x10 [ 412.858109][ T31] ? uprobe_clear_state+0x27c/0x290 [ 412.863324][ T31] __mmput+0x118/0x430 [ 412.867406][ T31] exit_mm+0x1da/0x2c0 [ 412.871535][ T31] ? __pfx_exit_mm+0x10/0x10 [ 412.876167][ T31] ? rcu_is_watching+0x15/0xb0 [ 412.880969][ T31] do_exit+0x648/0x2300 [ 412.885137][ T31] ? do_raw_spin_lock+0x121/0x290 [ 412.890210][ T31] ? __pfx_do_exit+0x10/0x10 [ 412.894859][ T31] do_group_exit+0x21c/0x2d0 [ 412.899525][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.904789][ T31] get_signal+0x1285/0x1340 [ 412.909352][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 412.914909][ T31] ? __pfx_aa_sk_perm+0x10/0x10 [ 412.919780][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 412.925992][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 412.931491][ T31] exit_to_user_mode_loop+0x72/0x130 [ 412.936790][ T31] do_syscall_64+0x2bd/0xfa0 [ 412.941428][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.946667][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.952762][ T31] ? clear_bhb_loop+0x60/0xb0 [ 412.957448][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.963470][ T31] RIP: 0033:0x7fec19b8efc9 [ 412.967944][ T31] RSP: 002b:00007fec17df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 412.976393][ T31] RAX: fffffffffffffff4 RBX: 00007fec19de5fa0 RCX: 00007fec19b8efc9 [ 412.984400][ T31] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 412.992399][ T31] RBP: 00007fec19c11f91 R08: 0000000000000004 R09: 0000000000000000 [ 413.000427][ T31] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.008455][ T31] R13: 00007fec19de6038 R14: 00007fec19de5fa0 R15: 00007ffc7d0847d8 [ 413.016494][ T31] [ 413.019609][ T31] INFO: task syz.0.2129:13431 blocked for more than 143 seconds. [ 413.027342][ T31] Not tainted syzkaller #0 [ 413.032325][ T31] Blocked by coredump. [ 413.036927][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 413.045677][ T31] task:syz.0.2129 state:D stack:26088 pid:13431 tgid:13430 ppid:5825 task_flags:0x40054c flags:0x00080002 [ 413.057663][ T31] Call Trace: [ 413.060981][ T31] [ 413.063934][ T31] __schedule+0x1798/0x4cc0 [ 413.068512][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.073409][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.078295][ T31] ? __pfx___schedule+0x10/0x10 [ 413.083187][ T31] ? schedule+0x91/0x360 [ 413.087456][ T31] schedule+0x165/0x360 [ 413.091662][ T31] schedule_preempt_disabled+0x13/0x30 [ 413.097140][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 413.102816][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 413.108751][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 413.114909][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.120071][ T31] ? exit_mmap+0x286/0xb40 [ 413.124553][ T31] down_write+0x1ab/0x1f0 [ 413.129125][ T31] ? __pfx_down_write+0x10/0x10 [ 413.134036][ T31] exit_mmap+0x286/0xb40 [ 413.138358][ T31] ? uprobe_clear_state+0x20f/0x290 [ 413.143584][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 413.148394][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 413.154070][ T31] ? __pfx_exit_aio+0x10/0x10 [ 413.159025][ T31] ? uprobe_clear_state+0x27c/0x290 [ 413.164267][ T31] __mmput+0x118/0x430 [ 413.168487][ T31] exit_mm+0x1da/0x2c0 [ 413.172783][ T31] ? __pfx_exit_mm+0x10/0x10 [ 413.177405][ T31] ? rcu_is_watching+0x15/0xb0 [ 413.182408][ T31] do_exit+0x648/0x2300 [ 413.186593][ T31] ? do_raw_spin_lock+0x121/0x290 [ 413.191646][ T31] ? __pfx_do_exit+0x10/0x10 [ 413.196254][ T31] do_group_exit+0x21c/0x2d0 [ 413.200952][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.206186][ T31] get_signal+0x1285/0x1340 [ 413.210860][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 413.216447][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 413.222734][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 413.227620][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 413.233248][ T31] exit_to_user_mode_loop+0x72/0x130 [ 413.238886][ T31] do_syscall_64+0x2bd/0xfa0 [ 413.243492][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.248988][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.255187][ T31] ? clear_bhb_loop+0x60/0xb0 [ 413.259918][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.265822][ T31] RIP: 0033:0x7fbd4178efc9 [ 413.270743][ T31] RSP: 002b:00007fbd42709038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 413.279432][ T31] RAX: ffffffffffffffed RBX: 00007fbd419e5fa0 RCX: 00007fbd4178efc9 [ 413.287414][ T31] RDX: 0000200000000100 RSI: 0000000000008933 RDI: 0000000000000006 [ 413.295745][ T31] RBP: 00007fbd41811f91 R08: 0000000000000000 R09: 0000000000000000 [ 413.304110][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.312197][ T31] R13: 00007fbd419e6038 R14: 00007fbd419e5fa0 R15: 00007fffea819e28 [ 413.320243][ T31] [ 413.323278][ T31] INFO: task syz.4.2126:13432 blocked for more than 143 seconds. [ 413.331777][ T31] Not tainted syzkaller #0 [ 413.336734][ T31] Blocked by coredump. [ 413.341375][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 413.350079][ T31] task:syz.4.2126 state:D stack:26776 pid:13432 tgid:13432 ppid:5838 task_flags:0x40004c flags:0x00080000 [ 413.362275][ T31] Call Trace: [ 413.365556][ T31] [ 413.368592][ T31] __schedule+0x1798/0x4cc0 [ 413.373139][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.378049][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.383030][ T31] ? __pfx___schedule+0x10/0x10 [ 413.388478][ T31] ? schedule+0x91/0x360 [ 413.392793][ T31] schedule+0x165/0x360 [ 413.396958][ T31] schedule_preempt_disabled+0x13/0x30 [ 413.402717][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 413.408611][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 413.414506][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 413.421141][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.426044][ T31] ? exit_mmap+0x286/0xb40 [ 413.430584][ T31] down_write+0x1ab/0x1f0 [ 413.434936][ T31] ? __pfx_down_write+0x10/0x10 [ 413.441138][ T31] exit_mmap+0x286/0xb40 [ 413.445475][ T31] ? uprobe_clear_state+0x20f/0x290 [ 413.450990][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 413.455850][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 413.461575][ T31] ? __pfx_exit_aio+0x10/0x10 [ 413.466373][ T31] ? uprobe_clear_state+0x27c/0x290 [ 413.471694][ T31] __mmput+0x118/0x430 [ 413.475779][ T31] exit_mm+0x1da/0x2c0 [ 413.480214][ T31] ? __pfx_exit_mm+0x10/0x10 [ 413.484844][ T31] ? rcu_is_watching+0x15/0xb0 [ 413.489703][ T31] do_exit+0x648/0x2300 [ 413.493868][ T31] ? preempt_schedule+0xae/0xc0 [ 413.498934][ T31] ? preempt_schedule_common+0x83/0xd0 [ 413.504410][ T31] ? preempt_schedule+0xae/0xc0 [ 413.509968][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 413.515382][ T31] ? __pfx_do_exit+0x10/0x10 [ 413.520119][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 413.525532][ T31] do_group_exit+0x21c/0x2d0 [ 413.530195][ T31] __x64_sys_exit_group+0x3f/0x40 [ 413.535232][ T31] x64_sys_call+0x21f7/0x2200 [ 413.540239][ T31] do_syscall_64+0xfa/0xfa0 [ 413.544781][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.550086][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.556180][ T31] ? clear_bhb_loop+0x60/0xb0 [ 413.561017][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.567030][ T31] RIP: 0033:0x7f0a7978efc9 [ 413.571883][ T31] RSP: 002b:00007ffd447d8878 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 413.580399][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0a7978efc9 [ 413.588421][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 413.596395][ T31] RBP: 00007ffd447d88dc R08: 0000001e447d896f R09: 00000000000927c0 [ 413.604848][ T31] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000001aa [ 413.612868][ T31] R13: 00000000000927c0 R14: 000000000003f89d R15: 00007ffd447d8930 [ 413.621076][ T31] [ 413.624149][ T31] [ 413.624149][ T31] Showing all locks held in the system: [ 413.632269][ T31] 1 lock held by khungtaskd/31: [ 413.637118][ T31] #0: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 413.647116][ T31] 2 locks held by kworker/u8:3/50: [ 413.652283][ T31] #0: ffff88813ff29148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 413.664258][ T31] #1: ffffc90000bb7ba0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 413.676456][ T31] 2 locks held by getty/5588: [ 413.681380][ T31] #0: ffff88803357a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 413.691560][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 413.701823][ T31] 1 lock held by syz-executor/5815: [ 413.707052][ T31] #0: ffff88802fead7e0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x211/0x4d0 [ 413.716558][ T31] 1 lock held by syz-executor/5825: [ 413.722065][ T31] #0: ffff88807fb781e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x286/0xb40 [ 413.731333][ T31] 2 locks held by syz-executor/5829: [ 413.736617][ T31] #0: ffffffff8e1f64d0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x131/0x4b0 [ 413.745399][ T31] #1: ffff88802f83c260 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x126/0x1b10 [ 413.754747][ T31] 2 locks held by syz-executor/5839: [ 413.760092][ T31] #0: ffffffff8e1f64d0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x131/0x4b0 [ 413.768854][ T31] #1: ffff88802f83ed60 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x126/0x1b10 [ 413.778304][ T31] 1 lock held by syz.2.2124/13424: [ 413.783414][ T31] #0: ffff88805f65ed60 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x286/0xb40 [ 413.792513][ T31] 1 lock held by syz.0.2129/13431: [ 413.797621][ T31] #0: ffff8880520fa220 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x286/0xb40 [ 413.806846][ T31] 1 lock held by syz.4.2126/13432: [ 413.812225][ T31] #0: ffff88805f65ace0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x286/0xb40 [ 413.821378][ T31] 1 lock held by modprobe/13436: [ 413.826344][ T31] #0: ffff8880520face0 (&mm->mmap_lock){++++}-{4:4}, at: setup_arg_pages+0x2ab/0xa90 [ 413.836013][ T31] [ 413.838979][ T31] ============================================= [ 413.838979][ T31] [ 413.847426][ T31] NMI backtrace for cpu 1 [ 413.847447][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 413.847464][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 413.847474][ T31] Call Trace: [ 413.847480][ T31] [ 413.847488][ T31] dump_stack_lvl+0x189/0x250 [ 413.847516][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.847532][ T31] ? __pfx__printk+0x10/0x10 [ 413.847559][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 413.847578][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 413.847597][ T31] ? __pfx__printk+0x10/0x10 [ 413.847616][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 413.847638][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 413.847657][ T31] watchdog+0xf60/0xfa0 [ 413.847682][ T31] ? watchdog+0x1e2/0xfa0 [ 413.847707][ T31] kthread+0x711/0x8a0 [ 413.847732][ T31] ? __pfx_watchdog+0x10/0x10 [ 413.847765][ T31] ? __pfx_kthread+0x10/0x10 [ 413.847788][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 413.847815][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.847841][ T31] ? __pfx_kthread+0x10/0x10 [ 413.847864][ T31] ret_from_fork+0x4bc/0x870 [ 413.847896][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 413.847934][ T31] ? __switch_to_asm+0x39/0x70 [ 413.847959][ T31] ? __switch_to_asm+0x33/0x70 [ 413.847983][ T31] ? __pfx_kthread+0x10/0x10 [ 413.848007][ T31] ret_from_fork_asm+0x1a/0x30 [ 413.848049][ T31] [ 413.987858][ T31] Sending NMI from CPU 1 to CPUs 0: [ 413.993121][ C0] NMI backtrace for cpu 0 [ 413.993139][ C0] CPU: 0 UID: 0 PID: 8675 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 413.993160][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 413.993173][ C0] Workqueue: events_unbound toggle_allocation_gate [ 413.993202][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x37/0x70 [ 413.993227][ C0] Code: 08 b0 91 92 65 8b 15 28 6c d1 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 7c 16 00 00 00 74 2c 8b 91 58 16 00 00 <83> fa 02 75 21 48 8b 91 60 16 00 00 48 8b 32 48 8d 7e 01 8b 89 5c [ 413.993242][ C0] RSP: 0018:ffffc90019f77698 EFLAGS: 00000046 [ 413.993257][ C0] RAX: ffffffff81682793 RBX: 0000000000000000 RCX: ffff888055029e40 [ 413.993270][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 413.993281][ C0] RBP: ffffc90019f777f0 R08: ffffffff8f9e2d77 R09: 1ffffffff1f3c5ae [ 413.993294][ C0] R10: dffffc0000000000 R11: fffffbfff1f3c5af R12: dffffc0000000000 [ 413.993308][ C0] R13: ffff88813ff1e558 R14: 0000000000000200 R15: ffffffff821a9ebf [ 413.993321][ C0] FS: 0000000000000000(0000) GS:ffff888125d05000(0000) knlGS:0000000000000000 [ 413.993336][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 413.993348][ C0] CR2: 00007fb7c6252498 CR3: 000000000df38000 CR4: 00000000003526f0 [ 413.993364][ C0] Call Trace: [ 413.993371][ C0] [ 413.993378][ C0] __text_poke+0x783/0xa10 [ 413.993402][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 413.993421][ C0] ? __kmalloc_noprof+0xdf/0x7f0 [ 413.993442][ C0] ? __pfx___text_poke+0x10/0x10 [ 413.993458][ C0] ? rcu_is_watching+0x15/0xb0 [ 413.993485][ C0] ? trace_contention_end+0x39/0x120 [ 413.993510][ C0] smp_text_poke_batch_finish+0x90a/0x1130 [ 413.993537][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 413.993559][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 413.993589][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 413.993611][ C0] static_key_enable_cpuslocked+0x128/0x250 [ 413.993633][ C0] static_key_enable+0x1a/0x20 [ 413.993651][ C0] toggle_allocation_gate+0xad/0x240 [ 413.993675][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 413.993698][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 413.993727][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 413.993758][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 413.993784][ C0] process_scheduled_works+0xae1/0x17b0 [ 413.993825][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 413.993861][ C0] worker_thread+0x8a0/0xda0 [ 413.993888][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 413.993917][ C0] ? __kthread_parkme+0x7b/0x200 [ 413.993949][ C0] kthread+0x711/0x8a0 [ 413.993970][ C0] ? __pfx_worker_thread+0x10/0x10 [ 413.994004][ C0] ? __pfx_kthread+0x10/0x10 [ 413.994023][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 413.994045][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.994068][ C0] ? __pfx_kthread+0x10/0x10 [ 413.994087][ C0] ret_from_fork+0x4bc/0x870 [ 413.994113][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 413.994142][ C0] ? __switch_to_asm+0x39/0x70 [ 413.994163][ C0] ? __switch_to_asm+0x33/0x70 [ 413.994183][ C0] ? __pfx_kthread+0x10/0x10 [ 413.994201][ C0] ret_from_fork_asm+0x1a/0x30 [ 413.994233][ C0]