last executing test programs: 42.34297081s ago: executing program 4 (id=1237): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xfffffd6e, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='block_split\x00', r3, 0x0, 0x7}, 0x18) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10}, &(0x7f0000000240)=0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1100"/12, @ANYRES32=r5, @ANYBLOB="e5a75ee7"], 0x20) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0xfffffffffffffffd) 41.820364063s ago: executing program 4 (id=1243): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000180)={@none, 0x7, 0x8001, 0xf, 0xfff, 0xe, "267810454ec76c76237792d4d736d369d6e2a65170bdb0944353be618340f6938a93ace22b4dd598d717c1b032759b1e903706dc1c424ac6be42991f52b1781a4de0eb03d7b9314bdf991b7f49259fc700743a4e1f59f2f0f7d2e68ce07431228bb2ada42ed5006ea1fadbdad3462e257aca53f800b590a87e0336a854da354d"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x81, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x45) recvmsg$can_j1939(r4, &(0x7f0000001500)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/207, 0xcf}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000080)=""/24, 0x18}], 0x4}, 0x10000) 41.570014189s ago: executing program 4 (id=1247): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x1, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGCHAN(r1, 0x80047437, 0x0) (async) ioctl$PPPIOCGCHAN(r1, 0x80047437, 0x0) 41.462528976s ago: executing program 4 (id=1249): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x48) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, &(0x7f00000007c0), &(0x7f0000000640)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r2, &(0x7f0000000300), 0x0}, 0x20) socket$kcm(0x10, 0x2, 0x10) (async, rerun: 64) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) (async, rerun: 64) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 64) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 64) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x9, 0x7f}, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @mss], 0x8) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000240)=0x2, &(0x7f0000000440)=0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xf100}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90) (async, rerun: 64) listen(0xffffffffffffffff, 0x2) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x15) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x52, &(0x7f0000000380)=0x1000, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r6, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) syz_emit_ethernet(0x3e, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 41.201000478s ago: executing program 4 (id=1250): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="660a00000200000061114d0000000000850000000200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00100000000000005400128009000100626f6e64000000004400028005001d000000000005000d000100000008000b00", @ANYRES32=0x0, @ANYBLOB="080009000300000008000900000000080000000000000000050001000000000008000200", @ANYRES32, @ANYBLOB="0a000100ff"], 0x88}}, 0x0) 40.50940696s ago: executing program 4 (id=1260): socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000040)='./file0\x00', r1}, 0x18) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000040)='./file0\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x5, &(0x7f00000001c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @generic={0x7, 0x8, 0xa, 0x9, 0x1}], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x6d, &(0x7f0000000400)=""/109, 0x41000, 0x4, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000380)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x8, 0x7d, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000680)=[r3], &(0x7f00000006c0)=[{0x3, 0x2, 0xd, 0x1}, {0x0, 0x3, 0xf}], 0x10, 0x7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x4f, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, r4}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000840)={@initdev, 0x0}, &(0x7f0000000880)=0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001900010000000000000000001d"], 0x34}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001900010000000000000000001d"], 0x34}}, 0x0) socket$phonet(0x23, 0x2, 0x1) (async) socket$phonet(0x23, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x12, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x401}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, @initr0={0x18, 0x0, 0x0, 0x0, 0x50000000, 0x0, 0x0, 0x0, 0x89}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff8}, @map_fd={0x18, 0x9, 0x1, 0x0, r2}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000600)='syzkaller\x00', 0x1974b7aa, 0x7a, &(0x7f00000007c0)=""/122, 0x41000, 0x48, '\x00', r7, 0x0, r1, 0x8, &(0x7f00000008c0)={0xffffd087, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000940)=[r1, r3, r2, r8, r3, r2], &(0x7f0000000980)=[{0x3, 0x4, 0xb, 0x6}, {0x1, 0x4, 0x7, 0xa}], 0x10, 0x1}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r11, @ANYRESOCT=r10], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, r13, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x15}, 0xc0) (async) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, r13, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x15}, 0xc0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r5}, 0x94) 39.928916922s ago: executing program 32 (id=1260): socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000040)='./file0\x00', r1}, 0x18) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000040)='./file0\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x5, &(0x7f00000001c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @generic={0x7, 0x8, 0xa, 0x9, 0x1}], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x6d, &(0x7f0000000400)=""/109, 0x41000, 0x4, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000380)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x8, 0x7d, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000680)=[r3], &(0x7f00000006c0)=[{0x3, 0x2, 0xd, 0x1}, {0x0, 0x3, 0xf}], 0x10, 0x7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x4f, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, r4}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000840)={@initdev, 0x0}, &(0x7f0000000880)=0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001900010000000000000000001d"], 0x34}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001900010000000000000000001d"], 0x34}}, 0x0) socket$phonet(0x23, 0x2, 0x1) (async) socket$phonet(0x23, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x12, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x401}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, @initr0={0x18, 0x0, 0x0, 0x0, 0x50000000, 0x0, 0x0, 0x0, 0x89}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff8}, @map_fd={0x18, 0x9, 0x1, 0x0, r2}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000600)='syzkaller\x00', 0x1974b7aa, 0x7a, &(0x7f00000007c0)=""/122, 0x41000, 0x48, '\x00', r7, 0x0, r1, 0x8, &(0x7f00000008c0)={0xffffd087, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000940)=[r1, r3, r2, r8, r3, r2], &(0x7f0000000980)=[{0x3, 0x4, 0xb, 0x6}, {0x1, 0x4, 0x7, 0xa}], 0x10, 0x1}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r11, @ANYRESOCT=r10], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, r13, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x15}, 0xc0) (async) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, r13, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x15}, 0xc0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r5}, 0x94) 2.545288737s ago: executing program 2 (id=1663): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="18005e800800020000efff000c0001"], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=@getneightbl={0x14, 0x42, 0x200, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040814}, 0x4000000) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x24}], 0x1}, 0x80) 2.487890214s ago: executing program 1 (id=1664): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000665000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50200005000f100850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 2.387256018s ago: executing program 1 (id=1667): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a00802020", @ANYRES32=0x0, @ANYBLOB="00040000"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="000101000040000000", 0x9}], 0x1}, 0x48005) readv(r2, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/20, 0x14}], 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3b000000b99f7bf3880f176744bcdb44a040e2097400785882f8baa16de600f8545e2bb8c63b464e0763f9ff99ca92f9a1e5900dc0d4baa0fa58ac14d1c56cd75db602a4baff90add5ac28fa5d9ff52f63067a7d97d962bff1c7d93b2aa397ce73f50dfa42636efa8949aa45018c00", @ANYRES16=0x0, @ANYBLOB="04002abd7000fbdbdf250800000008000c0002000000080004000300000008000700ac141440"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000100)=0x7fffffff, 0x28) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2.221074144s ago: executing program 2 (id=1668): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) 1.803935105s ago: executing program 3 (id=1674): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x22}}, {0x0, 0x0, 0x0, @rand_addr=0x64010101}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000200000000000000", @ANYRES8=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000007fb764cf9f9e631098d71bde345c839bd84748190ddcd731f98e5ef547f7f178da38b3b138440d081da8a7cb0939932a9958c3f27546b8b115a061a4f12c0a7293c29e5"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000008300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.757974898s ago: executing program 3 (id=1675): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000001200)=ANY=[@ANYRES32=r1, @ANYBLOB="09000000d8ff"]) read(r0, &(0x7f0000000080)=""/22, 0x16) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5b0a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) 1.579465404s ago: executing program 3 (id=1677): sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1dc, 0x17, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x168, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}]}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x40081}, 0x840) r0 = accept4$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs, &(0x7f0000000340)=0x6e, 0x80000) recvmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=""/188, 0xbc}, 0x1}, {{&(0x7f0000000480)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/66, 0x42}, {&(0x7f0000000600)=""/204, 0xcc}, {&(0x7f0000000700)=""/30, 0x1e}], 0x4, &(0x7f0000000780)=""/207, 0xcf}, 0x8}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)=""/210, 0xd2}], 0x1, &(0x7f00000009c0)=""/171, 0xab}, 0x1}, {{&(0x7f0000000a80)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b00)=""/11, 0xb}, {&(0x7f0000000b40)=""/126, 0x7e}, {&(0x7f0000000bc0)=""/157, 0x9d}], 0x3, &(0x7f0000000cc0)=""/4096, 0x1000}, 0xa}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000001cc0)=""/198, 0xc6}, {&(0x7f0000001dc0)=""/87, 0x57}, {&(0x7f0000001e40)=""/208, 0xd0}, {&(0x7f0000001f40)=""/94, 0x5e}, {&(0x7f0000001fc0)}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/140, 0x8c}], 0x7, &(0x7f0000003140)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000004140)=""/230, 0xe6}, {&(0x7f0000004240)=""/145, 0x91}, {&(0x7f0000004300)=""/107, 0x6b}], 0x3, &(0x7f00000043c0)=""/52, 0x34}, 0x4}, {{&(0x7f0000004400)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000004900)=[{&(0x7f0000004480)=""/125, 0x7d}, {&(0x7f0000004500)=""/213, 0xd5}, {&(0x7f0000004600)=""/140, 0x8c}, {&(0x7f00000046c0)=""/24, 0x18}, {&(0x7f0000004700)=""/235, 0xeb}, {&(0x7f0000004800)=""/35, 0x23}, {&(0x7f0000004840)=""/168, 0xa8}], 0x7}}], 0x7, 0x0, &(0x7f0000004b40)={0x0, 0x3938700}) recvfrom$unix(r0, &(0x7f0000004b80)=""/54, 0x36, 0x10000, &(0x7f0000004bc0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004c80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000004d40)={&(0x7f0000004c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004d00)={&(0x7f0000004cc0)={0x2c, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="e5201d6a8413"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9d1beeeb47d8"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20008001) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000004dc0), r1) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000004e80)={&(0x7f0000004d80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004e40)={&(0x7f0000004e00)={0x1c, r3, 0x8, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40010) recvmsg(r1, &(0x7f0000005240)={&(0x7f0000004ec0)=@phonet, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004f40)=""/243, 0xf3}, {&(0x7f0000005040)=""/83, 0x53}, {&(0x7f00000050c0)=""/246, 0xf6}], 0x3, &(0x7f0000005200)}, 0x40000000) r4 = socket$isdn(0x22, 0x3, 0x3) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000005280)=0x8, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000053c0)={&(0x7f00000052c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005380)={&(0x7f0000005300)={0x64, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7ea0d198}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff7}]}, 0x64}, 0x1, 0x0, 0x0, 0x48c0}, 0x24008801) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000005500)={&(0x7f0000005400)={0x10, 0x0, 0x0, 0x827ea51995881462}, 0xc, &(0x7f00000054c0)={&(0x7f0000005440)={0x60, r2, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x100}, @NL80211_ATTR_SCAN_SSIDS={0x38, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0x19, 0x0, @random="358fe003eb1731ce982198b6680fb372e902b5d92e"}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x20a8}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x880) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000005580), r1) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000005640)={&(0x7f0000005540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000005600)={&(0x7f00000055c0)={0x20, r5, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x54}, 0x4) pipe(&(0x7f0000005680)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f00000056c0)={0x30002012}) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000005700)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x4, 0x4, 0x4, 0x4, {0xa, 0x4e22, 0x28040000, @mcast2, 0x3}}}, 0x32) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000005740)={r6}) ioctl$BTRFS_IOC_INO_PATHS(r9, 0xc0389423, &(0x7f00000057c0)={0x2, 0x8, [0x401, 0x3, 0x1, 0x3], &(0x7f0000005780)=[0x0]}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000005840)=@generic={&(0x7f0000005800)='./file0\x00', r7}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000005880)={r1}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r10, &(0x7f00000059c0)={&(0x7f00000058c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005980)={&(0x7f0000005900)={0x58, 0x4, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x19a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004050}, 0x8000) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r10, &(0x7f0000005ac0)={&(0x7f0000005a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005a80)={&(0x7f0000005a40)={0x38, r2, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x10}, @NL80211_ATTR_PMKID={0x14, 0x55, "ffd0a585b8b5196852a33f2a24bb7c9b"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x80) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000005b00)={'bond_slave_0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000005c00)={&(0x7f0000005b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005bc0)={&(0x7f0000005b80)={0x40, 0x1, 0x1, 0x801, 0x0, 0x0, {0xa}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_LABELS_MASK={0x1c, 0x17, [0x0, 0xffffff81, 0x6, 0x9c1e, 0x5, 0x8]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x40800) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000005ec0)={&(0x7f0000005c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000005e80)={&(0x7f0000005cc0)={0x198, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xf}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4f}]}, 0x198}}, 0x80) 1.450536125s ago: executing program 0 (id=1679): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}]}}}]}, 0x40}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.351825125s ago: executing program 1 (id=1680): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff80, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7, &(0x7f00000001c0)={@broadcast, @loopback, 0x0}, &(0x7f0000000200)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r0}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 1.288162629s ago: executing program 2 (id=1681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x9) (rerun: 32) 1.238245248s ago: executing program 0 (id=1682): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000001", @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf2503000000180001801400020073797a5f74756e00000000000000000005000300000000000500050001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r5, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400122a0, 0x0) (async) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) recvmsg(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/219, 0xdb}], 0x1}, 0x40000000) (async) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000080)={r7}, &(0x7f00000001c0)=0x8) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_getrule={0x1c, 0x22, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x30, 0x80, 0x74, 0x6, 0x0, 0x0, 0x4, 0x5}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x804) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, 0x0, &(0x7f00000000c0)) (async) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="05000000", @ANYRES16=r3, @ANYRESDEC=r2, @ANYRES32=r7], 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x24044084) (async) socket(0x5, 0x1, 0x800) 1.059782333s ago: executing program 1 (id=1683): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0xff1a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xce25ea6bc43bcb27}}, [@NFT_MSG_NEWRULE={0xd0, 0x6, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_RULE_USERDATA={0xa2, 0x7, 0x1, 0x0, "4e8cd3c5a26678ada8f788f62ab409fc9ceefe05f052aa66e2305b863917bcbd991be6516225c61889e0f9a2435b279e8020eb1dbebecacc79ee2ece06a016927d6c41a951f470357b94e807c02b4f13f4e4c9702e1d894e7ced084d08cc27717e500df032ebb8178f7448b3d8bb702798c394f684b9c4481b36f1e51bd48fceadd353e57f77c0434e54a29b3e293815f145422ce1979450c113d379a7b0"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0xf8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f0000000140)={'veth1_macvtap\x00', 0x5}) r6 = socket(0x1d, 0x2, 0x6) setsockopt$llc_int(r6, 0x6a, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r7], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r10, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x2, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x0, 0x7}, {0x14, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) r12 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x5, [@volatile={0xb, 0x0, 0x0, 0x9, 0x1}, @enum={0xd, 0x2, 0x0, 0x6, 0x4, [{0x2, 0xf59}, {0x1, 0xffffffff}]}, @restrict={0x5, 0x0, 0x0, 0xb, 0x1}, @struct={0x4, 0x4, 0x0, 0x4, 0x0, 0x2, [{0xf, 0x5, 0x8}, {0x3, 0x1, 0x8}, {0x8, 0x1, 0x401}, {0xc, 0x5, 0x4}]}]}, {0x0, [0x5f, 0x2e, 0x0]}}, &(0x7f0000000600)=""/254, 0x8d, 0xfe, 0x1, 0xb1b8}, 0x28) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x4, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000300000000000000000018776e589d10d34a5a58a4fce497fefbd6ffd3d2e41e940476d2a08834673ac3c2faf8e2ad739e0deb098af15fad3e589d4e2331ef238553a3412742a025ca1d976cfa31ca389583ca415a4995108c88c1066c1b10b3db1051a4c78b0ecb02eae127071eeebbfa2d9a6d91e3abf70b0d90cf4ff54376520228543bf352430c13a13359f8b55e7e05dc392f733d093190e3507d808757b904afcdf3d067cdc6682bea9740083bee4c4280d841c34fcf22dc57e99e6f901d61", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008900000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.05936932s ago: executing program 5 (id=1684): r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) sendmsg$tipc(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc8849}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_getanyicast={0x14, 0x3e, 0x800, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}}, 0x20008088) 1.001004322s ago: executing program 0 (id=1685): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x18, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500000056150a5981fd2af11000000006000000faffffff"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000080)={r0}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811278000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000001c0)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000000000000b000000000c001462726f6164636173742d6c696e6b0000"], 0x28}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8200010}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x9c}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40051) 866.853232ms ago: executing program 2 (id=1686): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000300)=0xd, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000040)=0x7fff, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x60, r5, 0x731, 0x0, 0x20, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x4}}}]}, 0x60}, 0x1, 0x2}, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x60, r5, 0x731, 0x0, 0x20, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x4}}}]}, 0x60}, 0x1, 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x20000000}, 0xc) (async) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x20000000}, 0xc) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000001c0)={@val={0x2000}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x87, 0x0, 0x600, 0x73, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x73, 0x0, @wg=@data={0x4, 0x5, 0x1ff, "cea2d6abd380501ddfc99a448ec4d4b31559364e1f5bd958183b048453eb7502ec8316a689bea3c4796238c65a327993455e4c5a5a333b6315b2bd6f10d08163421f5c046d6ae1f88c93b7111c6fcba11a1d44360b4d039285f617"}}}}}}}, 0x99) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c80)={0x98, r3, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "cabfffa62f6097a3"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="298ef52613abb16ec23bf17cbcd69fc0"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="aa4ba363e7eef573b99baf441232516d"}]}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="150d7345163e14a995f480caaa1c6641cce0a94d525dd9ec"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="84db4eabc038bb5094f25ef5f4523eed"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7bbe308c8b9ccc6c"}]}]}, 0x98}, 0x1, 0x0, 0x0, 0xc1}, 0x4000) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c80)={0x98, r3, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "cabfffa62f6097a3"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="298ef52613abb16ec23bf17cbcd69fc0"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="aa4ba363e7eef573b99baf441232516d"}]}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="150d7345163e14a995f480caaa1c6641cce0a94d525dd9ec"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="84db4eabc038bb5094f25ef5f4523eed"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7bbe308c8b9ccc6c"}]}]}, 0x98}, 0x1, 0x0, 0x0, 0xc1}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 787.605683ms ago: executing program 0 (id=1687): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r0, 0xd7735000) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000000200)={@empty}, 0x14) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000100)=0xfffffffe, 0x4) 787.214408ms ago: executing program 5 (id=1688): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0xf1e, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0xd, 0x13, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x6}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0x6, 0x2, 0x2, 0x100, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5f, '\x00', r2}, 0x94) 640.39209ms ago: executing program 3 (id=1689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x0) 635.668387ms ago: executing program 0 (id=1690): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002000010000000000000000000a00000000000000000000000c001400", @ANYRES16], 0x28}}, 0x0) (async) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="01000400aaaa6400000000000000ffffaaaaaaaaaabbffffff08ffff"]) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000440)=[{0x45, 0x0, 0x3, 0x6}, {}, {0x0, 0x1}, {}, {0x6}]}) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000480)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @private=0xa010100}, {0x2, 0x4e21, @multicast1}, 0x1c, 0x0, 0x0, 0x0, 0x2c11, &(0x7f00000000c0)='veth0_macvtap\x00', 0x1, 0x0, 0x4}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000240)={0xffffffffffffffff}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r4, @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0xc041}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) close(r12) (async) pipe(0x0) (async) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000a00010001000000000000000a09000000000000000000000000080000007fffff9e000000000000000000000000ffffa99299bc994faab11d111349c06d64250a8f6746c82663e2f93fe7c37d099c47a89691985995838ed6563ecf1361dabbe42788aea508350d3379f845d2d31499249e5fbff1ba23e9b0e7d0ea1796c532244466ca231ff1449f3843b18db9fce5bc4b3fee4f38f5f83af477d61d9bf6a13a58d6405d08a5d656664a80c23e940c2e6485e1d150e3", @ANYRES32=r3, @ANYRESOCT=r3, @ANYRES32=r3], 0x4c}}, 0x0) 568.018029ms ago: executing program 5 (id=1691): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, 0x0, &(0x7f0000000040)) 425.286412ms ago: executing program 5 (id=1692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r1}, 0x20) r3 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000180), &(0x7f0000000280)=@tcp6=r3, 0x1}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 390.736678ms ago: executing program 2 (id=1693): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x2000000000000120, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000016000f1000000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x26, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4, 0x6}, 0x10}, 0x94) 315.798569ms ago: executing program 1 (id=1694): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7f18d064", @ANYRES16=0x0, @ANYBLOB="00042abd7000ffdbdf250100000008000200020000000800020002000000080002000200000008000200020000000800020002000000"], 0x3c}}, 0x50) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100ffffffff08000200020000002c0004800500030002"], 0x50}}, 0x0) 304.804044ms ago: executing program 3 (id=1695): ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000000)={{}, "cf7c6de44c4ee629ae9b0cc5006c0551e060dd3e15019203feb051697f2af7261a7c115b84677af5ac2f41d16ad91dbfdd5a9459c460a54260c58badeff0cc8d9608c45f019665788532ec3f3b66cfdb9754bbaefca8561110005d20e5f0abdf5a6a782504842a7c45125f3789ce991f1d5066b239e87f209779b9b405ec1e53a0a6edb8d4963f7e9a0a43050dff3ae032ffe2ab9d50115708620af54fa12dc10767f44cf5bccf835c9225a38961aa0c85e6e91141f604147b74f61b9526b86853367c4fd45ab3e165294f55d270d1458051b40910aa844e853c5e5e42108bddad05134533be72bad7a91a7fb012569a78b3f82705f34f2c6022039751138edf5d9b7cc2af4d6d2aab12e707cd820953e4780770ef68951aed5265c96953110fc5ae6c1f58e1901b7f8fb3f85eab8250e94a0b27f7e4a37aa5f72c1d97a7eb0e5b0bbafacd7bd699d37d3555cf53aabb21ad075a698f312e2d78dc495d6fb1a0ef90b88315ee4c2873800ceccf7abf3acd4df4cbb4bfdb30995597d0a9d421afc2b842afb812eb289c42d22ec31f566f559359e7ff7bfa917abc1527b5323824a6da9beefdcff65d3fbe238a98e25f5472fe2d81db125fcb2d172435ab1712d4646fa6bb5b2d43cf3e2656ea92d227374ce12ac810b7013b1cc7fd7f6ab7c5515f6c48fffe331fb80d67cf3d5c37f9e1c0d6a696c37dbb4b6021a13dba165f839628111c201f84c07472a3e8d75b971bbb0b166c6610220f4c5cbd7ca0911475caacc953607ba69595d8341a3f74a3c0c680332514b664a4b1048bd7cbd68794ee496a14c503b238cedee52b1faeb617ee9e83a2e9761e81e834910206c66379378e9153a94fb8dfca393eddb662c09201cccecd85a8f24ad9c5e98c16c7a0d9b7dea879322fb5885fdb2602a9c694fe095611070f5d544bee27efc21e90acec7819f35a7d65f37fc466fc508e850ed0786189979654e1065e9ddf097a44c2b9beea243206058fa4dd8d4eae0445363024ca22dfa4db4ddb49f7da5bd6b125c8dd3a9afe5f50369b4560cd0b7fa497f8514118e64f0f8a281a185c1fde89f80048b5229c53930117dd85c42b9e6422e56980395312243400356a8d380f90c4eb52375bebc61af188389bb190ec71d695c67eb6d9fde4ca2bd2f436772acb5150c6dac567e386703b4ecc843be921700047e6706f08142f135bd176363eae8e14b26a6133f057a0c994cf3b5f84101a48f23ffe81bc3e6aa6322f03a730c87285406dec27af15c371da8cbe483799188a24c206a05dd5a95b7f8bf9bea995d5ef0ac451df83e5f727c9237cbf15c94bce9a80735ceaaf9321f8a0b05ac04025fd6031e59e86e27c54866a89af84397f8f07b3b5d9f2e13528f9755df78225f4f9e86779daf28f03ea1d1b259e7a2d217a5c3721997a59e2b1585b87823db7c83dd2ec2f16b5456ccae73ea2f5013edd6aff7636fdaeb25e2f2f02ba7042b03886550f3c958156f372268c55200a36c711cd7c006ba3c7550e50351b1b47b2c335020f7db40c1d9dd893a13193ae23ac12266d7088e59ed1d15cef093e5148a407285903908f8dd5a385feba4d92d6ca491fc9d6c8431266ed25524cdcf19985e4f5bb925ffd62d4ff7e674a421bd4883805749300dd13ba75766563891fbf2d06d38ed7cca3100e773a64b6186d5facc38e8e663a55a167df5c5b2583857943835d2bd31daca38f5d5b367d67bd80d226ca2fff6b47792d561a70f7a0762513366eb02ce708a86a9504207707be1624fe4ffa6e883846daf1120cdd442f271a9a944f919ffe6dd9a61755ac15084c87409f5b83c66a964bca68c6481d39c3f79b5424a83d033d563cbc7db0beb578e05c5177efe070cf313c6a01e72cd130ffa54c677b5fbbd9639b6e1d409ac0dfab14771af6ccc39746b7f0f0c0101ca624f5c74809c41ce6b6ae56211aa7a2742e0d8762ad15b4c38d0b0e1336c9dd57c11c807ab59de2359b9f88d7e2394ec72f4c62ab949044c78ea6f3b5de740e6d254f12cadc76874e4e0842fba14daa8fbf75ec43fde0e0d2236948b09bf5c6fb745f2ef0c15692f66bfcae97baaa939fc135c25bad8f5b1649c18d5eddae2f2f051394b757ae800bea07e2d8b82f398eaf37f9745089bdb103e920fddf209c93062ec2a1d9f26e2f6ea4148fccf30d7bf6b41a08ac7c4e928fd147c8af6c552d49e87284fa0aa9e7ebd235f275cc57b853ff4f0afd9b1f386650b1197533e4a971c9c3ca51e17073b94e5890a06259f2ab5bdc6e01f5b99d8abbf6f5a07e51881d7d00a630ab1230612ef693e6c24ef910246bfe46b7767a15e5b011915c58dbfb831dc4f72e6ca836b49764334100a5698f9981e558643843ebd5a3f22aeb11fd325bdf5fa1aee19f224825488c98bb804cbc8353c115581fabf74b3af3964f97e7ceefd38c6db676a96702fd2ecc9044932904b90569f9e3904efa74ab431883b6f055bbaaf22f16c829d7a1f982b8680b8727b734c23b80616d4661d7ee679483c6d140f39acb293e4ed7164c80495795bc28db2f93d60ecaff3a12526d51ff53e0ed255920ddf0ea07c4306dec2854141871ef4183d63d06422d92ecf26aefc1af7bf1064489ce6a712920334908a8c1c332538a284a65cb5b36d4cf8a748c40ab6e0e00639244a211a20ba8cad9c9bcd9846d9b425efbc9f43eb01f8646956548143b49f5cdb6d26361cf47d539374cfa0da567fd9de5a0b57f900472ff4ab5f614e0a132c7d4b209163eb3099725744c51ac2338f498901209366433bdb04895c5476fa8cc0776cd12f3dd67c45d1f497b05884ffac285bc9eccdb858eadc50edea29b3a04986c683133c2737364e66285e6ff7181d60a7e074cb067a8077bd6639e3e831043c25d0e930c67aedc81c6c3b121c6bd3471eeeacddd48f5a985857e7f6e25ffd2bd62bae4a6f12f86c1af8d7d8170699f7e49e573609cf23be8cb6f20704c6edd1fdefb5ccc7ba1a2e8360005afb74873ef67504abdc750366a629d24c2b997ef7a5a282ae24b8029a64858ea5d92f2638b6bc00f60d614c23b40d48e16822d3030bb6a0b08d8d945e46f46b05a825b1e68ebd994b4f14702fb174cef15dbb7ec3e3056e1eaf71d5a2624f80a9a3fbd83caa8aa94903b2615261b7dfdbe539a238f24f8cb845e44e11b46db7dbeeabeb2b7875e6f4bb862477ae340aa713186af5ae9efe0cc81ee1d4746f43606d47ef06e105a5b1fd471a5c0c5c12694e011a41f30c794e56be8f4c3ff2925b397a3bc3b0e9701295bfe95ab719a4f1ed83d679c74ec18996d8d89d28a3e83e868099021b8d66528be75e676176a3870b18632c856ebdef51805fdc21083a4e2abcdd04a6640d24b33102468b977f49f7ae086c2c67e9dca071ee5f3933ecdb898c861eeb46d7a97334ad309946eb10b3b82dc6a509b2efb882b29daad301612ecbf33725d4e57fd73c89bf55f614cf4e451c58f910c0cdebc9909c62d6ad617604083487505266b5e845d069532f86d2c835f946db3525f6905e3eeaa8819401d4e6317cdd41851caf3aa2a308225728ba190151857a64584efaf428888a8a70f162664d979f452cbcba4145b279569cea831f9844e0e65b7f9e5f21271e45f8979a2b628662cc8a21b3089894699cd809e19894d017469edb81ddf2777239f199bc2233b41c79d271b5397b02cdabeec0176f852ec99d99b235b48fcfe6aa9f18891b0d0a29b469d1f81d326aec227f3ee902d59f94c3af91091eb2c6b99ba5dae5274ac945be6c0b1a46a7213adf3b76b86c4a898136cc6ba0c839712ef2175da01264fc3fbcaedc413f549cda06281cadf126eba1ad29f15b0d1f56510043c57402de0dbcad42ef3046c64522c90ae4fbade709fe871eb882ba65e808f8a5f8f0eca557d1429742c4123c3399e9b6d4d7f1f82d8dcf12b10d71a70e0dda8cda9097ceead0b978c87eac68f779d835ffc5556bbba64ec7026f2c80c65c1d5265273d9a319de498ccc200170103038f9ac08c6aff4ea8a0c843776650605838b3256a1e8bd4d2ccc35330120d1e95425c8f5ac131b0d488c4562998be733af3ddc6f8653ae0c6d4a40e4210a23924abb96a7c1786588062e92e380fd4b6259cbaf2a9ec45a22a8388ebc03867c8972f8c44bc760c42ec97349832ea9f6fb15fc478c3e9a0ec0d2e1ad3124edcf82a1a8a7a357112eb913d0eb862478edaf4c305115455241054ee2c37e6a49e9048be5c21907ab7da6d2f313e798aa310bc559103d6e4beb371cbcbf92c0140f8bca0d3cfa5e6683789d549d06ee54d94c8b5ba1c0dd6ddad64fb9c605377cbcd4c1f993399a89fb8bc731954e1831668efdc3e245ca5ce125c270ce2c87fb04d3ed5886e7e18df679484f6fbacb8989504d875cc4d69ac846b57db7ae67f98a7890241b486ef88e02d21c7b78bb89c879f96b4c2dce26076ed9143159bec1215001576ed6f3d56114c3672f33f793ee821cc45d4ccf27a42d2b215e1b6cc79618e2f8e53877a038c41060566ee37ba91ba20dbbe88608286256e4c7e0345b84b4e816723fdf2b34e75bf63df52d2257797429395874f9ac75573351beadd23b15a23bc07e6e3f9f7bfe5f74afaad5e2a462393736c59b06646683977e59ab5724c331dfd4e6075f57fed6c84229d2043100a50e624a22614e666168934fbcf53bcd553bb42e9788ad75656a98fb9c8dc1101839c1197554d0b9bb3601b26b5ef73d4d7ec0b6694453114b9c748b088a8f327d67513c5ea21fed7491937e052825be9b077c47af77ba71c655d11f47d632463a2e97371c04268e5a07420732274cd9f5c0a2e8888af4df0007f9662482f77753cb487a0db4aaa08f8731a307c4277bc9cd23fcc3122e3aaf59d58073cc1aa4154e862134ee65904694578eb564fe416a0267fba21671ef9b47616c1c8e33f2c585f9938d37a1319cda5eff50b5a2350ad0fbd0da82b2a4e917d2bbf83595e051655f42c96247b48d1c7835265f559d2785ff968ac9cfd8af07c6284fa66d210bbe1e6ff4c73138ab07ec30f954a5daa849657379db751f51e88c0b3d6b416b1f6b81076f9dd78f38e4d5e2e4a118a6d231406c971b26c4cda2ceace47723504d8bec0ca1a0600fd1dd5c899a93559c6e78c6b7c0d73f738b7b80e75751b481605ce4e92185c77438cb8c4ddc1c972bda73c82133a7cb5724a820736dc1250fbb3a8afec9ae4d65ad2d8ff46af7704ffd3bacd57086fdfa104a52bb2d5812afd88ea3bec50ac7acf15ec0ce0bec5d3fbf5dbd7faf36c1810cbe4fe1572f5d698d97d18d0311f08520f506228e6d8f8b619b79cff4a1fb0861d0d2f1eed2d2679357a0227508add4020584995211178dc58add007b8d72a80afcfff3df420162580f0b07bfed1fb49f903c21ad048f83944b9d4aa3dc232876a0340e8873c8ce1301be5f1fee32a97010955f46520e7d2c9dd9c0a7eb9c3704e88fabc5890351de09f7dc73fb81aa5b4cfb7a04093a54302271f36bf89e36d714072e8ecc94faabd0c3e8190f3da1dc1ecb3cdc931f09bc158b7c72cefa2ddfd0c629da9d2caf659b8c3d750361878d265b8bd164fe728d7cf0f4431cc0980122b8977ffa2aeeb74e770b779074728ba4c857e35317adb654d553367f7b8d02c37e08a43d33976d5794d983d5c51b884ec58208a308532a307f5a18f7f0f08d1a5b2aa585e4e356a91586849f428a909274dab5164e9b34b6536434a4435c2dd885f7656db52cdb4bab11"}) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001000)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0xbc, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_USERDATA={0x82, 0x8, "e1d2931bc042cc8d94db3260e28be0a222ef9f2a537d1eb60a1a262bd7dda082a543d431b222754a21712a46124f9166bb9d314a3ec444018333a63c4411443cc38e2e8f89682a08a81eff3e743d1cfa194a5e3312b4b2abcaf244ffe1a50824599bc72f295cd34003f5b54cfd7a889294a32c92755eab532bd49798677d"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f00000011c0)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000001240), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001280)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_FIRMWARE_NAME={0xe, 0x14, '\xc6\x96/\\-))%!-'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x4040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001380), r2) syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), r2) r5 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001640)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r8 = gettid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000016c0)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private0}}, &(0x7f00000017c0)=0xe8) r10 = getgid() r11 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r12 = syz_open_procfs$namespace(0x0, &(0x7f0000001800)='ns/pid\x00') r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001880)=@o_path={&(0x7f0000001840)='./file0\x00', 0x0, 0x8, r1}, 0x18) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000018c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001900)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000001a00)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001a40)={0x0, 0x0, 0x0}, &(0x7f0000001a80)=0xc) r17 = getpid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001ac0)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@private1}}, &(0x7f0000001bc0)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001c00)={0x0, 0x0, 0x0}, &(0x7f0000001c40)=0xc) sendmsg$unix(r0, &(0x7f0000001e00)={&(0x7f0000001400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000001480)="2209d9827c1fdb46237b25d6d7493d49e56e6f6ef48a33da03a67c8d391fbfcf42692a661e471f58e01eb84868b3c8a2918c9416b1c6d22bd28420b8eaf851eccfa89773", 0x44}, {&(0x7f0000001500)="d6bb1120349397439f40407ea87266c9fe5fc0d6b38ec04c048d2f960ef71680f325f79e3a31f449757b7bff2bab98e98953f839f64bce175a19cd1e724d310ecbea793c0f4b86ed08714284906606afff43170b2dc810aa23c3010608e1710f08de0204af7ca4a631c6f27ea265ebe3ebd46ea63d428c54d8454396d17a3d4f4dd40bb109c8db7d78e23f4591038f4b80f474be48f4034505fd4d6fdb1b7a509fc87b8bf797f81e1fa1c90f9a5336be12f8e26cac5c4d8d177db7bdf120b285e0d5e03a576a925bf91bffa95b27bff40cf946f16ff74974845c3400d52991bb7d", 0xe1}], 0x2, &(0x7f0000001c80)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xee00, r6}}}, @rights={{0x34, 0x1, 0x1, [r1, r0, r1, r1, r1, r0, r1, r1, r7]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r1, r0, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x1c, 0x1, 0x1, [r1, r11, r1]}}, @rights={{0x20, 0x1, 0x1, [r12, r13, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}], 0x158, 0x4014}, 0x800) r20 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_proto_private(r20, 0x89e3, &(0x7f0000001e40)="cdf0f0197a8fe898166eacdb8c307f1803ad3c") setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e22, @rand_addr=0x64010100}], 0x60) 254.530072ms ago: executing program 5 (id=1696): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x9) sendmsg$netlink(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000001c0)={0x10}, 0x10}, {&(0x7f0000000400)={0x10, 0x3f2}, 0x10}], 0x2}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x14, 0x1, 0x3, 0x801}, 0x14}}, 0x0) 187.994732ms ago: executing program 2 (id=1697): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0xc, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x4, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(fcrypt)\x00'}, 0x58) 183.675357ms ago: executing program 0 (id=1698): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write(r1, 0x0, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "5aee41448c84afb7"}, 0x28) close(0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) write(r1, 0x0, 0x0) (async) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x0) (async) socket(0x2a, 0x2, 0x0) (async) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "5aee41448c84afb7"}, 0x28) (async) close(0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) (async) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6}, 0x10) (async) 122.18403ms ago: executing program 1 (id=1699): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0xd, 0x0, &(0x7f00000002c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f0000000c00), &(0x7f0000000380)=0x3) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x70bd2a, 0x25dfdbff, {0x2, 0x18, 0x1, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x804) 80.751061ms ago: executing program 3 (id=1700): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x150882, 0x0) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x10, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) accept4$tipc(r1, 0x0, &(0x7f0000000180), 0x80000) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)}, 0x10) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000600)={r4, r3, 0x4}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="80fd01000040", 0x6}], 0x1, 0x0, 0x4) 0s ago: executing program 5 (id=1701): r0 = socket(0xb, 0xa, 0x5) getpeername$l2tp(r0, &(0x7f0000000180), &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0xb, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x8}, 0x94) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r1, 0x7}, &(0x7f0000000140)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x83, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001000000300000001b0a01080000000000000000020000000900010073797a30000000000c0002400000000000000104000480140000001100010000000000000000000000000a0000000000000004000000eb1de3dc7bf7faf7051634c13da9290a736aab1caaaf7e77c4ac8160b7768998632000cc38c2721f3ad5fbcd6f65720ce260eafcbeb76da54216fbf5d1f5a02108f2f31303f16de642c719aaaa85eb7d20d906cffa24c33bf4f476269231d0c6ebfee355c01585317fd112114673242a2ab2f2eaf34d345edf6174a0de226d593a0d8e73a5bd896422554804a0a3dcc197b93f2f6e15a6e6f46ad3bb729eec84965999d83e01ade8df"], 0x58}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.119' (ED25519) to the list of known hosts. [ 82.433147][ T5856] cgroup: Unknown subsys name 'net' [ 82.547486][ T5856] cgroup: Unknown subsys name 'cpuset' [ 82.557375][ T5856] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.362848][ T5856] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.882774][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.894366][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.902515][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.914876][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.922749][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.084575][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.093012][ T5869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.101292][ T5869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.111497][ T5869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.124707][ T5869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.169300][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.185485][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.208610][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.218101][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.233304][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.240882][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.248825][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.256906][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.273165][ T5877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.283013][ T5877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.294454][ T5877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.302367][ T5877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.314957][ T5877] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.324862][ T5188] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.335143][ T5188] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.912469][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 88.160727][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 88.171569][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 88.327968][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.346287][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.354348][ T5866] bridge_slave_0: entered allmulticast mode [ 88.367311][ T5866] bridge_slave_0: entered promiscuous mode [ 88.425383][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.432792][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.440385][ T5866] bridge_slave_1: entered allmulticast mode [ 88.449361][ T5866] bridge_slave_1: entered promiscuous mode [ 88.524322][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 88.537476][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 88.593448][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.613543][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.630396][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.637642][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.645142][ T5870] bridge_slave_0: entered allmulticast mode [ 88.652272][ T5870] bridge_slave_0: entered promiscuous mode [ 88.659540][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.667054][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.674410][ T5874] bridge_slave_0: entered allmulticast mode [ 88.681764][ T5874] bridge_slave_0: entered promiscuous mode [ 88.719185][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.726743][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.734085][ T5870] bridge_slave_1: entered allmulticast mode [ 88.741395][ T5870] bridge_slave_1: entered promiscuous mode [ 88.749254][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.756632][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.764055][ T5874] bridge_slave_1: entered allmulticast mode [ 88.771178][ T5874] bridge_slave_1: entered promiscuous mode [ 88.809534][ T5866] team0: Port device team_slave_0 added [ 88.879517][ T5866] team0: Port device team_slave_1 added [ 88.914627][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.928233][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.974378][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.981348][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.008866][ T5869] Bluetooth: hci0: command tx timeout [ 89.014382][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.064927][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.081393][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.089037][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.115873][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.134654][ T5870] team0: Port device team_slave_0 added [ 89.144153][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.161675][ T5869] Bluetooth: hci1: command tx timeout [ 89.195089][ T5870] team0: Port device team_slave_1 added [ 89.246787][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.254954][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.262165][ T5880] bridge_slave_0: entered allmulticast mode [ 89.269732][ T5880] bridge_slave_0: entered promiscuous mode [ 89.305507][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.312719][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.320688][ T5872] bridge_slave_0: entered allmulticast mode [ 89.328262][ T5872] bridge_slave_0: entered promiscuous mode [ 89.338281][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.345723][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.353201][ T5872] bridge_slave_1: entered allmulticast mode [ 89.362909][ T5872] bridge_slave_1: entered promiscuous mode [ 89.384482][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.391666][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.393770][ T5869] Bluetooth: hci2: command tx timeout [ 89.399261][ T5188] Bluetooth: hci3: command tx timeout [ 89.404721][ T5869] Bluetooth: hci4: command tx timeout [ 89.414754][ T5880] bridge_slave_1: entered allmulticast mode [ 89.422510][ T5880] bridge_slave_1: entered promiscuous mode [ 89.490867][ T5874] team0: Port device team_slave_0 added [ 89.516692][ T5866] hsr_slave_0: entered promiscuous mode [ 89.526377][ T5866] hsr_slave_1: entered promiscuous mode [ 89.534111][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.541082][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.568208][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.595846][ T5874] team0: Port device team_slave_1 added [ 89.605517][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.618440][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.632489][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.642769][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.649911][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.676493][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.704843][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.798895][ T5872] team0: Port device team_slave_0 added [ 89.822894][ T5880] team0: Port device team_slave_0 added [ 89.830049][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.837408][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.864045][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.885509][ T5872] team0: Port device team_slave_1 added [ 89.894180][ T5880] team0: Port device team_slave_1 added [ 89.900890][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.908354][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.934682][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.044201][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.051284][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.080056][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.121520][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.129359][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.157388][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.177840][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.185101][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.216899][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.241285][ T5870] hsr_slave_0: entered promiscuous mode [ 90.248686][ T5870] hsr_slave_1: entered promiscuous mode [ 90.254970][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 90.260808][ T5870] Cannot create hsr debugfs directory [ 90.269154][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.276246][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.302389][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.476962][ T5874] hsr_slave_0: entered promiscuous mode [ 90.484316][ T5874] hsr_slave_1: entered promiscuous mode [ 90.507429][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 90.514459][ T5874] Cannot create hsr debugfs directory [ 90.563731][ T5880] hsr_slave_0: entered promiscuous mode [ 90.570283][ T5880] hsr_slave_1: entered promiscuous mode [ 90.577454][ T5880] debugfs: 'hsr0' already exists in 'hsr' [ 90.583911][ T5880] Cannot create hsr debugfs directory [ 90.644169][ T5872] hsr_slave_0: entered promiscuous mode [ 90.650528][ T5872] hsr_slave_1: entered promiscuous mode [ 90.657574][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 90.663408][ T5872] Cannot create hsr debugfs directory [ 91.020663][ T5866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.033522][ T5866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.074496][ T5869] Bluetooth: hci0: command tx timeout [ 91.088246][ T5866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.139465][ T5866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.233969][ T5869] Bluetooth: hci1: command tx timeout [ 91.269538][ T5870] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.290652][ T5870] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.311363][ T5870] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.338625][ T5870] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.408527][ T5874] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.445640][ T5874] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.474786][ T5869] Bluetooth: hci3: command tx timeout [ 91.474913][ T5188] Bluetooth: hci4: command tx timeout [ 91.480238][ T5869] Bluetooth: hci2: command tx timeout [ 91.494126][ T5874] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.518929][ T5874] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.626022][ T5880] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.640518][ T5880] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.651280][ T5880] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.680704][ T5880] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.775981][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.833339][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.855389][ T5872] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.866733][ T5872] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.899000][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.920063][ T5872] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.932499][ T5872] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.962804][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.997874][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.005475][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.019723][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.027489][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.073469][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.080849][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.091272][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.098406][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.118555][ T1076] cfg80211: failed to load regulatory.db [ 92.220844][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.288496][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.335952][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.343361][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.359411][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.366644][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.517216][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.629702][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.701621][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.721013][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.728405][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.804801][ T3482] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.812149][ T3482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.867365][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.949497][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.002163][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.009386][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.028078][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.035321][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.125203][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.154651][ T5869] Bluetooth: hci0: command tx timeout [ 93.189433][ T5866] veth0_vlan: entered promiscuous mode [ 93.217866][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.301543][ T5866] veth1_vlan: entered promiscuous mode [ 93.323879][ T5869] Bluetooth: hci1: command tx timeout [ 93.417451][ T5870] veth0_vlan: entered promiscuous mode [ 93.456179][ T5870] veth1_vlan: entered promiscuous mode [ 93.479791][ T5866] veth0_macvtap: entered promiscuous mode [ 93.519522][ T5866] veth1_macvtap: entered promiscuous mode [ 93.555199][ T5869] Bluetooth: hci4: command tx timeout [ 93.555235][ T51] Bluetooth: hci2: command tx timeout [ 93.567319][ T5188] Bluetooth: hci3: command tx timeout [ 93.753231][ T5870] veth0_macvtap: entered promiscuous mode [ 93.779888][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.821562][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.857729][ T5870] veth1_macvtap: entered promiscuous mode [ 93.881581][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.945902][ T1322] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.976638][ T1322] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.986652][ T1322] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.998260][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.018609][ T1322] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.069103][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.080509][ T5880] veth0_vlan: entered promiscuous mode [ 94.110963][ T1322] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.140854][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.153887][ T5880] veth1_vlan: entered promiscuous mode [ 94.161115][ T1322] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.171081][ T1322] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.201653][ T1322] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.250583][ T5874] veth0_vlan: entered promiscuous mode [ 94.310647][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.337010][ T5874] veth1_vlan: entered promiscuous mode [ 94.338439][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.395628][ T5880] veth0_macvtap: entered promiscuous mode [ 94.460905][ T5880] veth1_macvtap: entered promiscuous mode [ 94.494165][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.506490][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.514926][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.516234][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.536811][ T5872] veth0_vlan: entered promiscuous mode [ 94.571993][ T5872] veth1_vlan: entered promiscuous mode [ 94.601070][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.614399][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.622309][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.646520][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.667163][ T5874] veth0_macvtap: entered promiscuous mode [ 94.680802][ T5866] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.710539][ T5874] veth1_macvtap: entered promiscuous mode [ 94.740204][ T64] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.767955][ T64] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.820305][ T64] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.829855][ T64] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.888219][ T5872] veth0_macvtap: entered promiscuous mode [ 94.906009][ T5872] veth1_macvtap: entered promiscuous mode [ 94.939857][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.969988][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.055681][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.075221][ T399] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.085504][ T399] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.096299][ T3482] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.134778][ T3482] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.181513][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.234357][ T5188] Bluetooth: hci0: command tx timeout [ 95.241452][ T3482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.255282][ T3482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.382477][ T1322] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.391845][ T1322] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.405071][ T5188] Bluetooth: hci1: command tx timeout [ 95.473265][ T1322] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.497090][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.508233][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.538766][ T1322] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.610576][ T6003] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8'. [ 95.624353][ T6003] netlink: 6 bytes leftover after parsing attributes in process `syz.0.8'. [ 95.634478][ T5188] Bluetooth: hci3: command tx timeout [ 95.636326][ T51] Bluetooth: hci2: command tx timeout [ 95.644043][ T5188] Bluetooth: hci4: command tx timeout [ 95.687021][ T6005] syzkaller1: entered promiscuous mode [ 95.693021][ T6005] syzkaller1: entered allmulticast mode [ 95.705332][ T6001] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8'. [ 95.719747][ T399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.737266][ T399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.979475][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.979803][ T3543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.023330][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.043920][ T3543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.199152][ T6014] syz.0.13 uses obsolete (PF_INET,SOCK_PACKET) [ 96.300125][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.316005][ T6017] Zero length message leads to an empty skb [ 96.369352][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.462751][ T6022] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 34 [ 97.352363][ T6043] netlink: 'syz.2.20': attribute type 1 has an invalid length. [ 97.371579][ T6043] netlink: 184 bytes leftover after parsing attributes in process `syz.2.20'. [ 97.391399][ T6043] netlink: 'syz.2.20': attribute type 1 has an invalid length. [ 97.600013][ T6060] delete_channel: no stack [ 97.697828][ T6060] erspan0: entered promiscuous mode [ 98.166464][ T6086] netlink: 'syz.4.27': attribute type 6 has an invalid length. [ 98.285717][ T6086] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.27'. [ 98.693534][ T6101] pimreg: entered allmulticast mode [ 98.747327][ T6106] warning: `syz.3.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.839178][ T6115] netlink: 36 bytes leftover after parsing attributes in process `syz.2.36'. [ 99.251619][ T6136] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.353286][ T6136] netlink: 'syz.1.39': attribute type 11 has an invalid length. [ 99.406680][ T6136] netlink: 'syz.1.39': attribute type 11 has an invalid length. [ 99.423833][ T6136] netlink: 152 bytes leftover after parsing attributes in process `syz.1.39'. [ 100.435109][ T6178] netlink: 72 bytes leftover after parsing attributes in process `syz.4.50'. [ 100.457754][ T6178] netlink: 72 bytes leftover after parsing attributes in process `syz.4.50'. [ 100.527519][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 100.634734][ T6188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 100.762579][ T6197] netlink: 'syz.4.53': attribute type 1 has an invalid length. [ 100.801220][ T1322] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.834859][ T64] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.843664][ T6197] __nla_validate_parse: 1 callbacks suppressed [ 100.843684][ T6197] netlink: 220 bytes leftover after parsing attributes in process `syz.4.53'. [ 100.885517][ T64] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.929407][ T64] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.103256][ T6200] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 101.438656][ T6230] netlink: 40 bytes leftover after parsing attributes in process `syz.0.60'. [ 101.510789][ T6231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.60'. [ 102.331640][ T6261] vlan2: entered allmulticast mode [ 102.361323][ T6261] bond0: entered allmulticast mode [ 102.375589][ T6261] bond_slave_0: entered allmulticast mode [ 102.399409][ T6261] bond_slave_1: entered allmulticast mode [ 102.484235][ T6265] netlink: 10 bytes leftover after parsing attributes in process `syz.4.71'. [ 102.850745][ T6285] netlink: 16 bytes leftover after parsing attributes in process `syz.3.74'. [ 102.982590][ T2154] IPVS: starting estimator thread 0... [ 103.094661][ T6296] IPVS: using max 26 ests per chain, 62400 per kthread [ 103.618398][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.83'. [ 103.740240][ T6322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.83'. [ 104.433290][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'. [ 104.643061][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 104.695239][ T6380] netlink: 'syz.2.91': attribute type 1 has an invalid length. [ 104.712696][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.92'. [ 104.737641][ T6385] netlink: 'syz.1.92': attribute type 12 has an invalid length. [ 104.780508][ T6385] netlink: 'syz.1.92': attribute type 11 has an invalid length. [ 105.035295][ T6396] openvswitch: netlink: IP tunnel dst address not specified [ 105.407361][ T6409] tipc: Started in network mode [ 105.437434][ T6409] tipc: Node identity ac14140f, cluster identity 4711 [ 105.471965][ T6409] tipc: New replicast peer: 255.255.255.255 [ 105.518633][ T6409] tipc: Enabled bearer , priority 10 [ 105.694874][ T6423] netlink: 'syz.3.104': attribute type 1 has an invalid length. [ 105.987295][ T6428] veth0: entered promiscuous mode [ 106.098604][ T6433] veth0: left promiscuous mode [ 106.252692][ T6454] __nla_validate_parse: 4 callbacks suppressed [ 106.252712][ T6454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.111'. [ 106.312434][ T6457] netlink: 144 bytes leftover after parsing attributes in process `syz.4.112'. [ 106.348218][ T6456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.111'. [ 106.614383][ T6475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.115'. [ 106.639366][ T24] tipc: Node number set to 2886997007 [ 106.659001][ T6475] netlink: 'syz.1.115': attribute type 5 has an invalid length. [ 106.691474][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.115'. [ 106.824400][ T6480] netlink: 108 bytes leftover after parsing attributes in process `syz.4.117'. [ 107.170366][ T6494] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.200003][ T6506] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.223399][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.121'. [ 107.261990][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.124'. [ 107.289885][ T6505] netlink: 'syz.3.124': attribute type 14 has an invalid length. [ 107.371944][ T3009] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.402953][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.124'. [ 107.429797][ T6505] netlink: 'syz.3.124': attribute type 14 has an invalid length. [ 107.528609][ T3009] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.582487][ T3009] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.606657][ T3009] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.842608][ T6524] netlink: 32 bytes leftover after parsing attributes in process `syz.3.129'. [ 109.153526][ T6590] netlink: 'syz.0.148': attribute type 27 has an invalid length. [ 110.446078][ T6643] team0: Device wireguard0 is of different type [ 110.951588][ T6673] tipc: Started in network mode [ 110.958384][ T6673] tipc: Node identity 6e05adc1dd22, cluster identity 4711 [ 110.967340][ T6673] tipc: Enabled bearer , priority 0 [ 111.013978][ T6673] syzkaller0: entered promiscuous mode [ 111.019628][ T6673] syzkaller0: entered allmulticast mode [ 111.074855][ T6673] tipc: Resetting bearer [ 111.105278][ T6673] netlink: 'syz.3.172': attribute type 1 has an invalid length. [ 111.256075][ T6692] openvswitch: netlink: Missing key (keys=40, expected=80) [ 111.366350][ T6695] __nla_validate_parse: 7 callbacks suppressed [ 111.366373][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.179'. [ 111.369893][ T6676] bond2: (slave bridge1): making interface the new active one [ 111.373525][ T6695] netlink: 20 bytes leftover after parsing attributes in process `syz.0.179'. [ 111.430272][ T6676] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 111.492439][ T6695] geneve2: entered promiscuous mode [ 111.525628][ T6695] geneve2: entered allmulticast mode [ 111.542610][ T6671] tipc: Resetting bearer [ 111.595269][ T6705] netlink: 'syz.2.181': attribute type 1 has an invalid length. [ 111.619983][ T6695] sock: sock_timestamping_bind_phc: sock not bind to device [ 111.645406][ T6671] tipc: Disabling bearer [ 111.689593][ T6695] netlink: 44 bytes leftover after parsing attributes in process `syz.0.179'. [ 111.709919][ T6706] raw_sendmsg: syz.4.182 forgot to set AF_INET. Fix it! [ 112.110090][ T6730] netlink: 36 bytes leftover after parsing attributes in process `syz.2.188'. [ 112.361475][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'. [ 112.371155][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 112.840576][ T6765] netlink: 'syz.4.197': attribute type 1 has an invalid length. [ 113.012723][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.199'. [ 113.080417][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.199'. [ 113.124287][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.200'. [ 113.151424][ T6777] netlink: 20 bytes leftover after parsing attributes in process `syz.0.200'. [ 113.183920][ T6778] tipc: Enabling of bearer rejected, failed to enable media [ 113.227780][ T6778] netlink: 'syz.2.201': attribute type 83 has an invalid length. [ 113.252806][ T6363] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.283129][ T6363] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.302335][ T6363] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.308718][ T6781] Bluetooth: MGMT ver 1.23 [ 113.368625][ T6363] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.722959][ T6796] team_slave_0: entered promiscuous mode [ 113.728897][ T6796] team_slave_1: entered promiscuous mode [ 113.737911][ T6796] macsec3: entered promiscuous mode [ 113.745496][ T6796] team0: entered promiscuous mode [ 113.751470][ T6796] macsec3: entered allmulticast mode [ 113.782090][ T6796] team0: entered allmulticast mode [ 113.789810][ T6796] team_slave_0: entered allmulticast mode [ 113.805267][ T6796] team_slave_1: entered allmulticast mode [ 113.823235][ T6796] team0: Device macsec3 is already an upper device of the team interface [ 113.877440][ T6796] team0: left allmulticast mode [ 113.882574][ T6796] team_slave_0: left allmulticast mode [ 113.909349][ T6796] team_slave_1: left allmulticast mode [ 113.920114][ T6796] team0: left promiscuous mode [ 113.929344][ T6796] team_slave_0: left promiscuous mode [ 113.934935][ T6796] team_slave_1: left promiscuous mode [ 114.295074][ T6812] bond1: entered promiscuous mode [ 114.315024][ T6812] bond1: entered allmulticast mode [ 114.321603][ T6812] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.329808][ T6816] netlink: 'syz.1.215': attribute type 14 has an invalid length. [ 115.187210][ T6852] netlink: 'syz.1.227': attribute type 7 has an invalid length. [ 115.395934][ T5188] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 115.403930][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 115.723816][ T6881] openvswitch: netlink: Key 6 has unexpected len 65 expected 2 [ 115.818206][ T6883] vxcan1: tx address claim with different name [ 115.905860][ T6891] netlink: 'syz.0.240': attribute type 12 has an invalid length. [ 115.957855][ T6883] pim6reg1: entered promiscuous mode [ 115.996955][ T6883] pim6reg1: entered allmulticast mode [ 116.176781][ T6903] trusted_key: syz.4.243 sent an empty control message without MSG_MORE. [ 116.279678][ T6910] ieee802154 phy0 wpan0: encryption failed: -22 [ 116.522991][ T6917] __nla_validate_parse: 9 callbacks suppressed [ 116.523011][ T6917] netlink: 72 bytes leftover after parsing attributes in process `syz.4.248'. [ 116.675288][ T6923] netlink: 'syz.3.247': attribute type 1 has an invalid length. [ 116.683262][ T6923] netlink: 128 bytes leftover after parsing attributes in process `syz.3.247'. [ 116.757872][ T6923] netlink: 'syz.3.247': attribute type 2 has an invalid length. [ 116.817124][ T6923] netlink: 'syz.3.247': attribute type 1 has an invalid length. [ 117.261373][ T6939] veth0_virt_wifi: renamed from vlan0 [ 117.347363][ T5952] IPVS: starting estimator thread 0... [ 117.434221][ T6957] IPVS: using max 23 ests per chain, 55200 per kthread [ 117.550996][ T6956] veth3: entered allmulticast mode [ 117.614380][ T6952] netlink: 52 bytes leftover after parsing attributes in process `syz.3.256'. [ 117.964973][ T6977] netlink: 'syz.1.260': attribute type 18 has an invalid length. [ 117.996992][ T6978] netlink: 'syz.1.260': attribute type 18 has an invalid length. [ 118.337113][ T6997] netlink: 'syz.4.266': attribute type 3 has an invalid length. [ 118.574185][ T7002] nbd0: detected capacity change from 0 to 63 [ 118.611071][ T5188] block nbd0: Receive control failed (result -32) [ 118.654008][ T5916] block nbd0: Dead connection, failed to find a fallback [ 118.907181][ T7031] netlink: 20 bytes leftover after parsing attributes in process `syz.3.271'. [ 119.475737][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 119.536864][ T7059] netlink: 68 bytes leftover after parsing attributes in process `syz.3.279'. [ 119.853946][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'. [ 120.039284][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.286'. [ 120.465549][ T7100] netlink: 'syz.0.292': attribute type 10 has an invalid length. [ 120.510899][ T7100] veth0_macvtap: left promiscuous mode [ 121.147730][ T7130] netlink: 'syz.0.302': attribute type 32 has an invalid length. [ 121.183826][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'. [ 121.246801][ T7130] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 121.662869][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.308'. [ 121.721707][ T7154] ipvlan2: entered promiscuous mode [ 121.729572][ T7154] bridge0: port 3(ipvlan2) entered blocking state [ 121.736815][ T7154] bridge0: port 3(ipvlan2) entered disabled state [ 121.768814][ T7154] ipvlan2: entered allmulticast mode [ 121.784022][ T7154] bridge0: entered allmulticast mode [ 121.803482][ T7154] ipvlan2: left allmulticast mode [ 121.810207][ T7154] bridge0: left allmulticast mode [ 121.962326][ T7155] vlan2: left allmulticast mode [ 121.968113][ T7155] bond0: left allmulticast mode [ 121.973783][ T7155] bond_slave_0: left allmulticast mode [ 121.983232][ T7155] bond_slave_1: left allmulticast mode [ 121.991060][ T7155] veth3: left allmulticast mode [ 122.514324][ T5188] Bluetooth: hci4: command tx timeout [ 122.615299][ T7186] netlink: 256 bytes leftover after parsing attributes in process `syz.4.313'. [ 122.640066][ T7186] unsupported nlmsg_type 40 [ 122.726854][ T7191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.315'. [ 122.749756][ T7191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.315'. [ 122.900170][ T7194] netlink: 68 bytes leftover after parsing attributes in process `syz.3.316'. [ 122.978691][ T7194] netlink: 'syz.3.316': attribute type 10 has an invalid length. [ 123.021173][ T7194] veth0_vlan: entered allmulticast mode [ 123.061736][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.318'. [ 123.072622][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.318'. [ 123.093431][ T7199] netlink: 32 bytes leftover after parsing attributes in process `syz.0.318'. [ 123.100092][ T7194] veth0_vlan: left promiscuous mode [ 123.112494][ T7194] veth0_vlan: entered promiscuous mode [ 123.128719][ T7194] team0: Device veth0_vlan failed to register rx_handler [ 123.175101][ T7205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.320'. [ 123.226470][ T7194] syz.3.316 (7194) used greatest stack depth: 18552 bytes left [ 123.431349][ T7211] IPv6: sit1: Disabled Multicast RS [ 123.484016][ T7211] sit1: entered allmulticast mode [ 123.552368][ T7212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.073132][ T7239] netlink: 'syz.3.330': attribute type 1 has an invalid length. [ 124.108273][ T7239] netlink: 'syz.3.330': attribute type 3 has an invalid length. [ 124.130625][ T7239] netlink: 224 bytes leftover after parsing attributes in process `syz.3.330'. [ 124.606367][ T7264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.064927][ T7337] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 126.180191][ T7343] netlink: 'syz.3.354': attribute type 29 has an invalid length. [ 126.189769][ T7343] netlink: 'syz.3.354': attribute type 29 has an invalid length. [ 126.519780][ T7354] tipc: Enabling of bearer rejected, failed to enable media [ 126.928305][ T7376] __nla_validate_parse: 6 callbacks suppressed [ 126.928327][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.362'. [ 126.972100][ T7382] netlink: 24 bytes leftover after parsing attributes in process `syz.1.363'. [ 127.025133][ T7376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.362'. [ 127.045163][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.365'. [ 127.201644][ T7382] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 127.256898][ T7391] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 127.487997][ T7403] netlink: 'syz.3.368': attribute type 1 has an invalid length. [ 127.531023][ T7403] netlink: 224 bytes leftover after parsing attributes in process `syz.3.368'. [ 127.567748][ T7403] netlink: 'syz.3.368': attribute type 1 has an invalid length. [ 127.727840][ T7405] netlink: 'syz.2.370': attribute type 1 has an invalid length. [ 127.848206][ T7417] bond1: (slave gretap1): making interface the new active one [ 127.857175][ T7417] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 128.175753][ T7438] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 128.198746][ T7438] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 128.885281][ T7454] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.894549][ T7454] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.925138][ T7460] openvswitch: netlink: Missing valid actions attribute. [ 128.932917][ T7460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.168823][ T7454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.190433][ T7454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.588626][ T7471] bond2: entered promiscuous mode [ 129.594193][ T7471] bond2: entered allmulticast mode [ 129.601303][ T7471] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.626124][ T7013] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.640902][ T7476] netlink: 104 bytes leftover after parsing attributes in process `syz.0.389'. [ 129.660306][ T7013] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.686923][ T7013] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.714024][ T7013] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.724734][ T7482] netlink: 'syz.0.389': attribute type 5 has an invalid length. [ 129.828657][ T7489] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.394'. [ 129.883896][ T7013] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.930060][ T7013] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.993935][ T7013] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.002976][ T7013] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.342344][ T7518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.399'. [ 130.530772][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.399'. [ 130.836058][ T7539] sch_fq: defrate 0 ignored. [ 131.117601][ T7554] netlink: 28 bytes leftover after parsing attributes in process `syz.4.408'. [ 131.711691][ T7584] hsr_slave_1 (unregistering): left promiscuous mode [ 132.356291][ T7611] syzkaller0: refused to change device tx_queue_len [ 132.637853][ T7623] netlink: 'syz.3.427': attribute type 1 has an invalid length. [ 132.659806][ T7623] netlink: 'syz.3.427': attribute type 1 has an invalid length. [ 132.684353][ T7627] __nla_validate_parse: 2 callbacks suppressed [ 132.684371][ T7627] netlink: 36 bytes leftover after parsing attributes in process `syz.1.429'. [ 132.894799][ T7636] netlink: 'syz.3.431': attribute type 1 has an invalid length. [ 133.087646][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.098791][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.118401][ T7636] 8021q: adding VLAN 0 to HW filter on device bond3 [ 133.226426][ T7645] 8021q: adding VLAN 0 to HW filter on device bond3 [ 133.264481][ T7645] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 133.308340][ T7645] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 133.433275][ T7649] veth3: entered promiscuous mode [ 133.457099][ T7649] bond3: (slave veth3): Enslaving as an active interface with a down link [ 133.483364][ T7664] netlink: 36 bytes leftover after parsing attributes in process `syz.1.438'. [ 133.505771][ T7636] vlan2: entered allmulticast mode [ 133.511042][ T7636] bond3: entered allmulticast mode [ 133.513419][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 133.542732][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 133.616814][ T7666] netlink: 'syz.0.440': attribute type 1 has an invalid length. [ 133.664512][ T7666] netlink: 220 bytes leftover after parsing attributes in process `syz.0.440'. [ 133.679320][ T7667] netlink: 40 bytes leftover after parsing attributes in process `syz.0.440'. [ 133.728598][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.441'. [ 133.792926][ T7670] openvswitch: netlink: IPv4 tunnel dst address is zero [ 133.863702][ T7670] netlink: 'syz.4.441': attribute type 24 has an invalid length. [ 134.018775][ T7686] netlink: 'syz.3.444': attribute type 4 has an invalid length. [ 134.126731][ T7678] netlink: 'syz.3.444': attribute type 4 has an invalid length. [ 134.349433][ T7702] netlink: 'syz.2.450': attribute type 10 has an invalid length. [ 134.371796][ T7697] netlink: 24 bytes leftover after parsing attributes in process `syz.4.448'. [ 134.397367][ T7702] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 134.715340][ T7714] netlink: 60 bytes leftover after parsing attributes in process `syz.1.452'. [ 134.754749][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.452'. [ 134.851491][ T7717] dvmrp1: entered allmulticast mode [ 134.891580][ T7721] dvmrp1: left allmulticast mode [ 135.255287][ T7743] netlink: 'syz.0.459': attribute type 23 has an invalid length. [ 135.520558][ T7755] IPv6: sit1: Disabled Multicast RS [ 136.099069][ T7780] netlink: 'syz.0.469': attribute type 1 has an invalid length. [ 136.145611][ T7785] : entered promiscuous mode [ 136.207148][ T7792] tipc: Enabled bearer , priority 0 [ 136.215223][ T7793] syzkaller0: entered promiscuous mode [ 136.221631][ T7793] syzkaller0: entered allmulticast mode [ 136.322628][ T7793] tipc: Resetting bearer [ 136.395817][ T7791] tipc: Resetting bearer [ 136.469373][ T7791] tipc: Disabling bearer [ 137.749677][ T7873] __nla_validate_parse: 7 callbacks suppressed [ 137.749696][ T7873] netlink: 16 bytes leftover after parsing attributes in process `syz.2.490'. [ 137.804113][ T7872] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 138.201735][ T7894] Bluetooth: MGMT ver 1.23 [ 138.323044][ T7898] netlink: 'syz.2.495': attribute type 29 has an invalid length. [ 138.563428][ T7906] netlink: 'syz.3.497': attribute type 11 has an invalid length. [ 138.601127][ T7906] netlink: 224 bytes leftover after parsing attributes in process `syz.3.497'. [ 138.908017][ T7914] netlink: 28 bytes leftover after parsing attributes in process `syz.3.501'. [ 139.007503][ T7916] netlink: 132 bytes leftover after parsing attributes in process `syz.2.503'. [ 139.235515][ T7921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.505'. [ 139.291459][ T7924] netlink: 156 bytes leftover after parsing attributes in process `syz.1.502'. [ 139.327838][ T7924] netlink: 156 bytes leftover after parsing attributes in process `syz.1.502'. [ 139.404939][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.505'. [ 139.653102][ T7942] netlink: 'syz.3.509': attribute type 1 has an invalid length. [ 139.839729][ T7943] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 139.892931][ T7949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.510'. [ 140.047812][ T7958] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 140.217552][ T7967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.412313][ T7974] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 140.427724][ T7978] netlink: 60 bytes leftover after parsing attributes in process `syz.2.518'. [ 140.928709][ T7994] veth0: entered promiscuous mode [ 141.005771][ T8000] veth0: left promiscuous mode [ 141.436930][ T8020] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 141.563296][ T8020] hsr_slave_0: left promiscuous mode [ 141.696428][ T8029] netlink: 'syz.1.530': attribute type 4 has an invalid length. [ 141.794038][ T5188] Bluetooth: hci4: command 0x0401 tx timeout [ 142.518147][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 142.524965][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.532821][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.540870][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.548853][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.556942][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.564815][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.572756][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.580721][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.588714][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.596672][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.604815][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.612656][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.620905][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.628791][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.636859][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.644780][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.652813][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.660697][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.668690][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.676656][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.684652][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.692489][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.700492][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.708494][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.716494][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.724401][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.732394][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.740289][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.748299][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.756514][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.764602][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.772540][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.780645][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.788541][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.796601][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.804618][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.812686][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.820676][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.828746][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.836733][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.844720][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.852659][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.860748][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.868902][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.876898][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.884785][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.892734][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.900631][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.908717][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.916623][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.924628][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.932631][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.940681][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.951722][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.959778][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.967685][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.975710][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.983761][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 142.991719][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 142.999726][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 143.007736][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 143.015642][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 143.025944][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 143.033962][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 143.041910][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 143.049890][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 143.057868][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 143.065751][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 143.073750][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 143.081776][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 143.089771][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 143.097673][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 143.105682][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 143.113746][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 143.121704][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 143.129697][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 143.137829][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 143.145991][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 143.153980][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 143.161828][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 143.169906][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 143.177965][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 143.186126][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 143.194011][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 143.201969][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 143.209945][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 143.589669][ T8082] netlink: 'syz.4.541': attribute type 29 has an invalid length. [ 143.609525][ T8082] __nla_validate_parse: 7 callbacks suppressed [ 143.609548][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.541'. [ 143.632617][ T8082] netlink: 184 bytes leftover after parsing attributes in process `syz.4.541'. [ 143.943182][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.546'. [ 144.014007][ T8105] netlink: 84 bytes leftover after parsing attributes in process `syz.0.547'. [ 144.124475][ T24] IPVS: starting estimator thread 0... [ 144.214580][ T8114] IPVS: using max 23 ests per chain, 55200 per kthread [ 144.438775][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.552'. [ 144.461851][ T8125] netlink: 'syz.1.551': attribute type 11 has an invalid length. [ 145.040238][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.556'. [ 145.147706][ T8140] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.155685][ T8140] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.169747][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.557'. [ 145.211014][ T8148] netlink: 224 bytes leftover after parsing attributes in process `syz.3.557'. [ 145.254632][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.557'. [ 145.697898][ T8140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.806006][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.563'. [ 145.846165][ T8140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.210442][ T8181] vlan2: entered allmulticast mode [ 146.217878][ T8181] bond0: entered allmulticast mode [ 146.223414][ T8181] bond_slave_0: entered allmulticast mode [ 146.252242][ T8181] bond_slave_1: entered allmulticast mode [ 146.338184][ T7015] netdevsim netdevsim2 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.413724][ T7015] netdevsim netdevsim2 ÿÿÿÿÿÿ: set [1, 1] type 2 family 0 port 20000 - 0 [ 146.450118][ T7015] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.487445][ T7015] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 146.582798][ T7015] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.603455][ T7015] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 146.784424][ T7015] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.821418][ T7015] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 147.984270][ T8266] netlink: 'syz.4.585': attribute type 13 has an invalid length. [ 148.078061][ T8266] netlink: 'syz.4.585': attribute type 13 has an invalid length. [ 148.134560][ T8271] netem: change failed [ 148.164503][ T8266] macvtap0: entered allmulticast mode [ 148.178054][ T8266] macvtap0: refused to change device tx_queue_len [ 148.442901][ T8284] bridge_slave_1: left allmulticast mode [ 148.490492][ T8284] bridge_slave_1: left promiscuous mode [ 148.533375][ T8152] hid-generic 0005:16C0:05DC.0001: item fetching failed at offset 0/1 [ 148.575552][ T8284] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.637803][ T8152] hid-generic 0005:16C0:05DC.0001: probe with driver hid-generic failed with error -22 [ 148.685125][ T8284] bridge_slave_0: left allmulticast mode [ 148.713774][ T8284] bridge_slave_0: left promiscuous mode [ 148.754740][ T8284] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.092672][ T8309] __nla_validate_parse: 3 callbacks suppressed [ 149.092693][ T8309] netlink: 36 bytes leftover after parsing attributes in process `syz.0.597'. [ 149.225206][ T8309] netlink: 'syz.0.597': attribute type 5 has an invalid length. [ 150.995076][ T5188] Bluetooth: hci0: command tx timeout [ 150.998106][ T8367] netlink: 'syz.2.609': attribute type 2 has an invalid length. [ 151.027447][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'. [ 153.344153][ T8421] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 153.579654][ T8430] pimreg: entered allmulticast mode [ 153.865467][ T8444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.624'. [ 154.285153][ T8462] netlink: 44 bytes leftover after parsing attributes in process `syz.0.628'. [ 154.368467][ T8468] netlink: 'syz.4.630': attribute type 10 has an invalid length. [ 154.439914][ T8468] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 154.488673][ T8468] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 154.760190][ T8488] netlink: 39075 bytes leftover after parsing attributes in process `syz.2.635'. [ 154.899301][ T8495] tipc: Started in network mode [ 154.914369][ T8495] tipc: Node identity 12dff96dd1ac, cluster identity 4711 [ 154.922012][ T8495] tipc: Enabled bearer , priority 0 [ 154.954078][ T8497] syzkaller0: entered promiscuous mode [ 154.987684][ T8497] syzkaller0: entered allmulticast mode [ 155.035620][ T8495] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 155.134595][ T8495] tipc: Resetting bearer [ 155.686250][ T8494] tipc: Resetting bearer [ 155.812230][ T8494] tipc: Disabling bearer [ 155.895654][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.642'. [ 155.963846][ T8149] tipc: Node number set to 3279157613 [ 156.021988][ T8534] netlink: 32 bytes leftover after parsing attributes in process `syz.2.643'. [ 156.060750][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'. [ 156.102003][ T8536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.645'. [ 156.139108][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'. [ 156.302925][ T8526] veth0: entered promiscuous mode [ 156.383514][ T8529] veth0 (unregistering): left promiscuous mode [ 156.523381][ T8537] vlan2: entered allmulticast mode [ 156.583642][ T8537] bridge0: entered allmulticast mode [ 156.589636][ T8537] bridge3: port 1(vlan2) entered blocking state [ 156.625451][ T8537] bridge3: port 1(vlan2) entered disabled state [ 156.679342][ T8537] vlan2: entered promiscuous mode [ 156.698198][ T8537] bridge0: entered promiscuous mode [ 157.176496][ T8575] syzkaller0: entered promiscuous mode [ 157.182203][ T8575] syzkaller0: entered allmulticast mode [ 157.561113][ T8593] netlink: 'syz.4.661': attribute type 1 has an invalid length. [ 157.758131][ T8607] netlink: 32 bytes leftover after parsing attributes in process `syz.4.661'. [ 157.774237][ T8599] netlink: 80 bytes leftover after parsing attributes in process `syz.2.662'. [ 157.796859][ T8610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.667'. [ 157.847351][ T8593] bond1: entered promiscuous mode [ 157.858051][ T8593] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.915289][ T8601] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.934681][ T8601] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 157.955610][ T8601] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 157.972962][ T8601] bond1: (slave wireguard0): making interface the new active one [ 157.982963][ T8601] wireguard0: entered promiscuous mode [ 157.990992][ T8601] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 158.101188][ T8616] hsr_slave_0 (unregistering): left promiscuous mode [ 158.207684][ T8624] team_slave_0: entered promiscuous mode [ 158.213662][ T8624] team_slave_1: entered promiscuous mode [ 158.306402][ T8624] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 158.330757][ T8624] team0: Device macvtap1 is already an upper device of the team interface [ 158.347109][ T8624] team_slave_0: left promiscuous mode [ 158.352789][ T8624] team_slave_1: left promiscuous mode [ 158.790998][ T8654] sctp: [Deprecated]: syz.4.676 (pid 8654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.790998][ T8654] Use struct sctp_sack_info instead [ 159.047801][ T8663] tipc: Enabled bearer , priority 0 [ 159.061931][ T8663] tipc: Resetting bearer [ 159.322209][ T8680] netlink: 'syz.1.682': attribute type 10 has an invalid length. [ 159.417432][ T8680] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 159.459384][ T8689] __nla_validate_parse: 5 callbacks suppressed [ 159.459404][ T8689] netlink: 16 bytes leftover after parsing attributes in process `syz.3.686'. [ 159.535049][ T8689] netlink: 32 bytes leftover after parsing attributes in process `syz.3.686'. [ 159.610038][ T8689] gretap1: entered promiscuous mode [ 159.664884][ T8689] gretap1: entered allmulticast mode [ 159.735141][ T8696] pim6reg1: entered promiscuous mode [ 159.758625][ T8696] pim6reg1: entered allmulticast mode [ 159.806458][ T8703] netlink: 22 bytes leftover after parsing attributes in process `syz.1.688'. [ 159.865764][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.689'. [ 160.167855][ T8717] netlink: 'syz.4.691': attribute type 64 has an invalid length. [ 160.185727][ T8717] netlink: 5 bytes leftover after parsing attributes in process `syz.4.691'. [ 160.259051][ T8720] netlink: 'syz.1.693': attribute type 2 has an invalid length. [ 161.223993][ T8759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.708'. [ 161.628448][ T8783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 161.647184][ T8783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.772764][ T8783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.996817][ T8836] openvswitch: netlink: Actions may not be safe on all matching packets [ 163.061114][ T8841] netlink: 24 bytes leftover after parsing attributes in process `syz.4.731'. [ 163.494362][ T8854] netlink: 'syz.4.734': attribute type 1 has an invalid length. [ 163.544778][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.734'. [ 163.576722][ T8854] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.682311][ T8870] netlink: 108 bytes leftover after parsing attributes in process `syz.1.739'. [ 165.018415][ T8860] bond2 (unregistering): Released all slaves [ 165.233342][ T8872] netlink: 'syz.1.739': attribute type 13 has an invalid length. [ 165.253015][ T8879] __nla_validate_parse: 1 callbacks suppressed [ 165.253037][ T8879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.740'. [ 165.732955][ T8908] netlink: 'syz.2.748': attribute type 3 has an invalid length. [ 165.827431][ T8908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.018790][ T8916] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 166.367247][ T8942] netlink: 'syz.2.756': attribute type 2 has an invalid length. [ 166.384662][ T8942] netlink: 244 bytes leftover after parsing attributes in process `syz.2.756'. [ 167.583510][ T8978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.769'. [ 167.617795][ T8979] netlink: 'syz.4.771': attribute type 1 has an invalid length. [ 167.655694][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.772'. [ 167.659387][ T8979] netlink: 232 bytes leftover after parsing attributes in process `syz.4.771'. [ 167.704061][ T8979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.771'. [ 167.746231][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.772'. [ 167.760418][ T8981] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 167.819951][ T8991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.775'. [ 167.952789][ T8995] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 168.556057][ T9024] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.565011][ T9024] team0: Cannot enslave team device to itself [ 168.616618][ T9025] tipc: Enabled bearer , priority 0 [ 168.659223][ T9026] syzkaller0: entered promiscuous mode [ 168.674577][ T9026] syzkaller0: entered allmulticast mode [ 168.725138][ T9024] tipc: Enabling of bearer rejected, already enabled [ 168.838723][ T9024] tipc: Resetting bearer [ 168.903245][ T9024] tipc: Disabling bearer [ 168.965318][ T9038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.269117][ T9046] sctp: [Deprecated]: syz.2.792 (pid 9046) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.269117][ T9046] Use struct sctp_sack_info instead [ 169.446091][ T9063] netlink: 256 bytes leftover after parsing attributes in process `syz.3.798'. [ 169.706805][ T9075] netlink: 'syz.3.801': attribute type 1 has an invalid length. [ 169.745307][ T9075] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.801'. [ 170.363515][ T9113] net veth1_virt_wifi .: renamed from virt_wifi0 [ 170.412542][ T9115] netlink: 'syz.0.813': attribute type 1 has an invalid length. [ 170.422365][ T9115] __nla_validate_parse: 1 callbacks suppressed [ 170.422386][ T9115] netlink: 140 bytes leftover after parsing attributes in process `syz.0.813'. [ 170.445127][ T9115] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.469583][ T24] IPVS: starting estimator thread 0... [ 170.508252][ T9118] netlink: 'syz.3.814': attribute type 24 has an invalid length. [ 170.526602][ T9118] netlink: 56 bytes leftover after parsing attributes in process `syz.3.814'. [ 170.549514][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.814'. [ 170.564391][ T9116] IPVS: using max 24 ests per chain, 57600 per kthread [ 170.572508][ T9118] netlink: 31 bytes leftover after parsing attributes in process `syz.3.814'. [ 170.582938][ T9118] netlink: 'syz.3.814': attribute type 3 has an invalid length. [ 170.597541][ T9118] netlink: 'syz.3.814': attribute type 2 has an invalid length. [ 170.605977][ T9118] netlink: 31 bytes leftover after parsing attributes in process `syz.3.814'. [ 171.121348][ T9140] netlink: 28 bytes leftover after parsing attributes in process `syz.1.819'. [ 171.448053][ T9155] netlink: 16 bytes leftover after parsing attributes in process `syz.3.825'. [ 171.505770][ T9159] netlink: 16 bytes leftover after parsing attributes in process `syz.3.825'. [ 171.660087][ T9164] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 171.724760][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.827'. [ 171.789025][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.829'. [ 171.849376][ T9169] netlink: 'syz.4.830': attribute type 4 has an invalid length. [ 171.940369][ T9168] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 172.159402][ T9178] 8021q: VLANs not supported on syzkaller1 [ 172.459742][ T9199] 8021q: VLANs not supported on ip_vti0 [ 172.866774][ T9216] pimreg: left allmulticast mode [ 173.125804][ T9217] tc_dump_action: action bad kind [ 173.284127][ T9217] syz.4.844 (9217) used greatest stack depth: 15384 bytes left [ 173.453381][ T9240] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 173.498229][ T9240] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 173.579819][ T9240] gretap2: entered promiscuous mode [ 173.629304][ T9240] gretap2: entered allmulticast mode [ 173.854963][ T9258] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.885011][ T9258] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.152566][ T9314] netlink: 'syz.0.870': attribute type 11 has an invalid length. [ 175.178044][ T9314] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 175.399515][ T9326] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 175.711485][ T9332] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.718772][ T9332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.869860][ T9339] __nla_validate_parse: 13 callbacks suppressed [ 175.869875][ T9339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.876'. [ 176.275546][ T9355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.292836][ T9355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.622114][ T9374] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.884'. [ 176.950822][ T9385] netlink: 'syz.4.890': attribute type 10 has an invalid length. [ 177.107141][ T9385] team0: Device hsr_slave_0 failed to register rx_handler [ 177.132386][ T9396] netlink: 'syz.3.893': attribute type 10 has an invalid length. [ 177.352589][ T9406] netlink: 160 bytes leftover after parsing attributes in process `syz.1.895'. [ 177.586838][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.900'. [ 177.619414][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.900'. [ 177.936151][ T9436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.906'. [ 177.996715][ T9436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.906'. [ 178.421763][ T9466] netlink: 'syz.0.912': attribute type 12 has an invalid length. [ 178.429933][ T9466] netlink: 32 bytes leftover after parsing attributes in process `syz.0.912'. [ 178.904216][ T9486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.917'. [ 179.146120][ T9494] netlink: 'syz.2.920': attribute type 2 has an invalid length. [ 179.174519][ T9494] netlink: 'syz.2.920': attribute type 8 has an invalid length. [ 179.237755][ T9494] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.920'. [ 179.419054][ T9506] syzkaller1: entered promiscuous mode [ 179.441542][ T9506] syzkaller1: entered allmulticast mode [ 179.465508][ T9506] tipc: Started in network mode [ 179.478093][ T9506] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 179.487687][ T9506] tipc: Enabled bearer , priority 0 [ 180.783942][ T8150] tipc: Node number set to 11578026 [ 180.829993][ T9554] macvlan3: entered promiscuous mode [ 180.851027][ T9554] macvlan3: entered allmulticast mode [ 180.879230][ T9554] veth1_to_bond: entered promiscuous mode [ 180.903988][ T9554] veth1_to_bond: entered allmulticast mode [ 180.953336][ T9554] team0: Port device macvlan3 added [ 180.985737][ T9558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.937'. [ 181.014073][ T9558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.937'. [ 182.579938][ T9570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.940'. [ 182.929296][ T9574] netlink: 'syz.4.942': attribute type 1 has an invalid length. [ 182.937463][ T9574] netlink: 20 bytes leftover after parsing attributes in process `syz.4.942'. [ 183.317577][ T9582] !€ÿ: renamed from hsr0 (while UP) [ 183.357977][ T9580] netlink: 'syz.3.945': attribute type 1 has an invalid length. [ 183.432559][ T9587] netlink: 'syz.2.946': attribute type 8 has an invalid length. [ 183.502434][ T9580] 8021q: adding VLAN 0 to HW filter on device bond4 [ 183.537276][ T9586] bond4: (slave veth5): Enslaving as an active interface with a down link [ 183.573991][ T9592] nbd1: detected capacity change from 0 to 127 [ 183.589122][ T9591] bond4: (slave veth0_to_bond): making interface the new active one [ 183.606231][ T9591] veth0_to_bond: entered promiscuous mode [ 183.613019][ T9591] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 184.051257][ T9613] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.952'. [ 184.066353][ T5188] block nbd1: Receive control failed (result -104) [ 184.261881][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.955'. [ 184.342120][ T9615] netlink: 'syz.4.954': attribute type 12 has an invalid length. [ 184.363726][ T9615] netlink: 'syz.4.954': attribute type 29 has an invalid length. [ 184.372278][ T9625] Driver unsupported XDP return value 0 on prog (id 243) dev N/A, expect packet loss! [ 184.420338][ T9615] netlink: 148 bytes leftover after parsing attributes in process `syz.4.954'. [ 184.487516][ T9615] netlink: 'syz.4.954': attribute type 2 has an invalid length. [ 184.504124][ T9615] netlink: 23 bytes leftover after parsing attributes in process `syz.4.954'. [ 184.590616][ T9643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.960'. [ 184.768442][ T9650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.961'. [ 185.038906][ T9666] IPv6: sit1: Disabled Multicast RS [ 185.069747][ T9666] sit1: entered allmulticast mode [ 188.591315][ T5238] udevd[5238]: worker [5916] /devices/virtual/block/nbd0 is taking a long time [ 194.518138][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.663901][ T7015] veth0_to_bond: left promiscuous mode [ 204.593257][ T9684] __nla_validate_parse: 2 callbacks suppressed [ 204.593280][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'. [ 204.685076][ T9692] netlink: 16 bytes leftover after parsing attributes in process `syz.1.972'. [ 204.703815][ T9692] netlink: 16 bytes leftover after parsing attributes in process `syz.1.972'. [ 204.805735][ T9699] netlink: 'syz.0.977': attribute type 4 has an invalid length. [ 204.849202][ T9700] netlink: 20 bytes leftover after parsing attributes in process `syz.4.976'. [ 204.879306][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.976'. [ 205.090301][ T9710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.981'. [ 205.374524][ T9727] netlink: 44 bytes leftover after parsing attributes in process `syz.2.986'. [ 205.619944][ T9733] netlink: 'syz.1.988': attribute type 10 has an invalid length. [ 205.669301][ T9736] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.990'. [ 205.669743][ T9733] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.720994][ T9733] bond0: (slave team0): Enslaving as an active interface with an up link [ 205.803376][ T9742] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 205.809899][ T9741] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 206.180228][ T9774] netlink: 24 bytes leftover after parsing attributes in process `syz.0.999'. [ 206.566944][ T9752] team0 (unregistering): Port device team_slave_0 removed [ 206.581459][ T9752] team0 (unregistering): Port device team_slave_1 removed [ 206.786386][ T9789] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1002'. [ 206.819839][ T9790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.252159][ T9814] bridge1: entered promiscuous mode [ 207.258063][ T9814] bridge1: entered allmulticast mode [ 207.600382][ T9821] netlink: zone id is out of range [ 208.538186][ T9864] Bluetooth: MGMT ver 1.23 [ 208.775881][ T9875] netlink: zone id is out of range [ 208.787740][ T9875] netlink: zone id is out of range [ 208.793320][ T9875] netlink: zone id is out of range [ 208.799716][ T9875] netlink: zone id is out of range [ 208.808086][ T9875] netlink: zone id is out of range [ 208.813521][ T9875] netlink: zone id is out of range [ 208.820579][ T9875] netlink: zone id is out of range [ 208.828890][ T9875] netlink: zone id is out of range [ 210.058575][ T9916] __nla_validate_parse: 7 callbacks suppressed [ 210.058598][ T9916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1042'. [ 210.130165][ T5877] Bluetooth: hci2: command 0x0401 tx timeout [ 210.271751][ T9916] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.497002][ T9918] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.517117][ T9918] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 210.546388][ T9918] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 210.567022][ T9928] netlink: 'syz.3.1046': attribute type 1 has an invalid length. [ 210.575034][ T9928] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1046'. [ 210.584306][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'. [ 210.691148][ T9924] bond0: (slave bond_slave_1): Releasing backup interface [ 210.724926][ T9933] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1045'. [ 210.812479][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1045'. [ 211.954918][ T5188] Bluetooth: hci0: command 0x0406 tx timeout [ 211.955704][ T5877] Bluetooth: hci1: command 0x0406 tx timeout [ 211.963181][ T5188] Bluetooth: hci3: command 0x0406 tx timeout [ 212.193865][ T5883] Bluetooth: hci2: command 0x0401 tx timeout [ 212.235790][ T9994] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1064'. [ 213.190681][ T9993] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 213.224423][ T9993] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 213.255353][ T9993] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 213.535223][T10050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1079'. [ 213.631116][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1081'. [ 213.722239][ T55] block nbd1: Possible stuck request ffff888024fb7000: control (read@0,1024B). Runtime 30 seconds [ 213.734667][ T55] block nbd1: Possible stuck request ffff888024fb71c0: control (read@1024,1024B). Runtime 30 seconds [ 213.746095][ T55] block nbd1: Possible stuck request ffff888024fb7380: control (read@2048,1024B). Runtime 30 seconds [ 213.757291][ T55] block nbd1: Possible stuck request ffff888024fb7540: control (read@3072,1024B). Runtime 30 seconds [ 213.773038][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1081'. [ 213.865052][T10063] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 213.921556][T10063] bond5: (slave vcan1): Error -95 calling set_mac_address [ 214.533792][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1093'. [ 214.688337][T10103] netlink: 'syz.3.1095': attribute type 2 has an invalid length. [ 214.718046][T10103] netlink: 'syz.3.1095': attribute type 1 has an invalid length. [ 215.332312][T10127] bridge_slave_0: left allmulticast mode [ 215.382484][T10127] bridge_slave_0: left promiscuous mode [ 215.434038][T10127] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.456981][T10137] netlink: 'syz.4.1106': attribute type 21 has an invalid length. [ 215.495989][T10137] __nla_validate_parse: 1 callbacks suppressed [ 215.496009][T10137] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1106'. [ 215.546965][T10127] bridge_slave_1: left allmulticast mode [ 215.554894][T10127] bridge_slave_1: left promiscuous mode [ 215.561124][T10127] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.638934][T10127] bond0: (slave bond_slave_0): Releasing backup interface [ 215.705391][T10127] bond0: (slave bond_slave_1): Releasing backup interface [ 215.762116][T10127] team0: Port device team_slave_0 removed [ 215.794082][T10127] team0: Port device team_slave_1 removed [ 215.815061][T10127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.829572][T10127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.856511][T10127] vlan2: left promiscuous mode [ 215.861614][T10127] bridge0: left promiscuous mode [ 215.868660][T10127] bridge3: port 1(vlan2) entered disabled state [ 215.890179][T10136] team0: Mode changed to "activebackup" [ 215.912355][ T6368] tipc: Resetting bearer [ 216.128412][T10163] netlink: 'syz.4.1115': attribute type 1 has an invalid length. [ 216.139708][T10160] netlink: 'syz.2.1114': attribute type 5 has an invalid length. [ 216.378713][T10166] bond3: (slave gretap2): making interface the new active one [ 216.389892][T10166] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 216.400021][T10170] tipc: Started in network mode [ 216.422013][T10170] tipc: Node identity e0000002, cluster identity 4711 [ 216.437373][T10170] tipc: Enabling of bearer rejected, failed to enable media [ 216.552627][T10183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1121'. [ 217.165283][T10213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1132'. [ 217.200053][T10217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1134'. [ 217.641002][T10238] ieee802154 phy0 wpan0: encryption failed: -90 [ 217.690590][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1140'. [ 218.000815][T10257] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1146'. [ 218.275100][T10269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1149'. [ 218.405311][T10269] macvtap1: entered promiscuous mode [ 218.410792][T10269] vlan0: entered promiscuous mode [ 218.417949][T10269] macvtap1: entered allmulticast mode [ 218.423484][T10269] vlan0: entered allmulticast mode [ 218.428987][T10269] veth0_vlan: entered allmulticast mode [ 218.436635][T10274] net_ratelimit: 396 callbacks suppressed [ 218.436654][T10274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.467230][T10275] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 218.550572][T10279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1153'. [ 218.666944][T10279] 8021q: adding VLAN 0 to HW filter on device bond4 [ 218.744968][T10283] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 218.774781][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1157'. [ 218.791945][T10289] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1156'. [ 218.803286][T10289] netlink: 'syz.1.1156': attribute type 7 has an invalid length. [ 218.811812][T10289] netlink: 'syz.1.1156': attribute type 8 has an invalid length. [ 220.197381][T10348] 8021q: adding VLAN 0 to HW filter on device bond6 [ 220.209591][T10348] team0: Port device bond6 added [ 220.510325][T10355] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 220.521957][T10355] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 220.546727][T10362] __nla_validate_parse: 8 callbacks suppressed [ 220.546773][T10362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1180'. [ 220.612430][T10362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1180'. [ 220.684039][T10359] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1179'. [ 220.834092][T10367] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 220.918749][T10370] netlink: 'syz.2.1182': attribute type 3 has an invalid length. [ 220.960777][T10370] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1182'. [ 220.978476][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1183'. [ 221.007234][T10378] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1182'. [ 221.069723][T10370] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1182'. [ 221.139202][T10370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1182'. [ 221.175225][T10382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1185'. [ 221.200558][T10370] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1182'. [ 221.249782][T10370] netlink: 'syz.2.1182': attribute type 2 has an invalid length. [ 221.642162][T10399] tipc: Enabled bearer , priority 0 [ 221.674923][T10399] syzkaller0: entered promiscuous mode [ 221.680468][T10399] syzkaller0: entered allmulticast mode [ 221.981255][T10424] tipc: Resetting bearer [ 222.432733][T10393] tipc: Resetting bearer [ 222.583976][T10393] tipc: Disabling bearer [ 223.699064][T10504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 223.923825][T10516] C: renamed from lo [ 224.063247][T10525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.308451][T10577] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 225.321792][T10577] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 225.686660][T10589] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 225.906482][T10599] __nla_validate_parse: 15 callbacks suppressed [ 225.906506][T10599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1250'. [ 225.975700][T10599] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1250'. [ 226.023898][T10607] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 226.031539][T10607] IPv6: NLM_F_CREATE should be set when creating new route [ 226.252684][T10615] netlink: 'syz.0.1257': attribute type 1 has an invalid length. [ 226.598113][T10627] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1261'. [ 226.634990][T10629] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1261'. [ 227.123080][T10641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1263'. [ 227.129236][T10644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1263'. [ 227.416427][ T7014] bridge_slave_1: left allmulticast mode [ 227.433315][ T7014] bridge_slave_1: left promiscuous mode [ 227.456147][ T7014] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.540957][ T7014] bridge_slave_0: left allmulticast mode [ 227.564085][ T7014] bridge_slave_0: left promiscuous mode [ 227.584654][ T7014] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.593060][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1269'. [ 227.637137][T10656] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1266'. [ 227.870543][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1271'. [ 227.922058][T10669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1271'. [ 228.012758][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 228.041391][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 228.049955][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 228.062444][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 228.077374][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 228.135648][ T7014] bond3 (unregistering): (slave gretap2): Releasing active interface [ 228.387659][ T7014] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 228.578065][ T7014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.587106][ T7014] bond_slave_0: left allmulticast mode [ 228.597110][ T7014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.607083][ T7014] bond_slave_1: left allmulticast mode [ 228.615309][ T7014] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 228.624720][ T7014] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 228.647615][ T7014] bond0 (unregistering): Released all slaves [ 228.753489][ T7014] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 228.762448][ T7014] wireguard0: left promiscuous mode [ 228.770670][ T7014] bond1 (unregistering): Released all slaves [ 228.786972][ T7014] bond2 (unregistering): Released all slaves [ 228.802785][ T7014] bond3 (unregistering): Released all slaves [ 228.912641][ T7014] bond4 (unregistering): Released all slaves [ 228.927720][T10647] netlink: 'syz.3.1266': attribute type 29 has an invalid length. [ 229.209259][ T7014] tipc: Disabling bearer [ 229.224341][ T7014] tipc: Left network mode [ 229.835277][T10702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.856298][T10704] delete_channel: no stack [ 230.060884][T10717] netlink: 'syz.3.1285': attribute type 2 has an invalid length. [ 230.090454][T10709] tipc: Enabling of bearer rejected, already enabled [ 230.100131][T10713] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 230.108115][T10713] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 230.116177][ T5883] Bluetooth: hci3: command tx timeout [ 230.553057][T10670] chnl_net:caif_netlink_parms(): no params data found [ 230.827236][ T7014] hsr_slave_0: left promiscuous mode [ 230.847684][ T7014] hsr_slave_1: left promiscuous mode [ 230.907857][ T7014] vlan0: left allmulticast mode [ 230.917110][T10747] netlink: zone id is out of range [ 230.918666][ T7014] veth0_vlan: left allmulticast mode [ 230.928613][ T7014] vlan0: left promiscuous mode [ 230.939929][T10747] netlink: zone id is out of range [ 230.955909][T10747] netlink: zone id is out of range [ 230.966697][T10747] netlink: zone id is out of range [ 230.988331][T10747] netlink: zone id is out of range [ 231.002882][T10747] netlink: zone id is out of range [ 231.010919][T10747] netlink: zone id is out of range [ 231.028825][T10747] netlink: zone id is out of range [ 231.040587][T10747] netlink: zone id is out of range [ 231.949173][T10772] netlink: 'syz.3.1297': attribute type 9 has an invalid length. [ 232.001892][T10777] netlink: 'syz.3.1297': attribute type 2 has an invalid length. [ 232.034575][ T7014] pimreg (unregistering): left allmulticast mode [ 232.194367][ T5883] Bluetooth: hci3: command tx timeout [ 232.964526][T10788] sctp: [Deprecated]: syz.0.1303 (pid 10788) Use of int in maxseg socket option. [ 232.964526][T10788] Use struct sctp_assoc_value instead [ 233.036391][T10792] sctp: [Deprecated]: syz.0.1303 (pid 10792) Use of int in maxseg socket option. [ 233.036391][T10792] Use struct sctp_assoc_value instead [ 233.194838][T10785] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.223341][T10785] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.292458][T10670] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.310835][T10670] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.340249][T10670] bridge_slave_0: entered allmulticast mode [ 233.376066][T10670] bridge_slave_0: entered promiscuous mode [ 233.404838][T10670] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.412715][T10670] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.430451][T10670] bridge_slave_1: entered allmulticast mode [ 233.439638][T10670] bridge_slave_1: entered promiscuous mode [ 233.468383][T10785] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.513635][T10785] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.607002][T10816] netlink: 'syz.0.1308': attribute type 6 has an invalid length. [ 233.726524][T10785] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.770573][T10819] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 233.801711][T10785] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.883020][T10670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.932796][T10670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.011514][T10785] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.022371][T10785] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.150415][T10827] __nla_validate_parse: 5 callbacks suppressed [ 234.150439][T10827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1311'. [ 234.172429][T10833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1313'. [ 234.181888][T10827] tc_dump_action: action bad kind [ 234.192764][T10670] team0: Port device team_slave_0 added [ 234.208530][T10670] team0: Port device team_slave_1 added [ 234.273763][ T5883] Bluetooth: hci3: command tx timeout [ 234.412159][T10670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.430198][T10670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.461817][T10670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.477237][T10670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.484819][T10670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.513364][T10670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.660635][ T7014] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.676209][ T7014] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.760949][ T7014] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.771100][ T7014] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.800885][T10670] hsr_slave_0: entered promiscuous mode [ 234.813441][T10670] hsr_slave_1: entered promiscuous mode [ 234.823011][T10670] debugfs: 'hsr0' already exists in 'hsr' [ 234.831832][T10670] Cannot create hsr debugfs directory [ 234.919546][ T7020] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.944114][ T7020] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.964393][ T7020] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.973394][ T7020] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.155363][T10862] atomic_op ffff88807c49c998 conn xmit_atomic 0000000000000000 [ 235.381293][T10870] netlink: 'syz.0.1323': attribute type 1 has an invalid length. [ 235.647056][T10873] vlan3: entered allmulticast mode [ 235.662606][T10873] veth1: entered allmulticast mode [ 235.969306][T10670] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 236.028178][T10670] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 236.059909][T10670] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 236.186760][T10884] : entered promiscuous mode [ 236.195120][T10670] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 236.302583][T10890] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 236.314179][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1332'. [ 236.353746][ T5883] Bluetooth: hci3: command tx timeout [ 236.441434][T10905] netlink: 'syz.0.1335': attribute type 11 has an invalid length. [ 236.459524][T10905] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1335'. [ 236.655727][T10915] tipc: Enabled bearer , priority 0 [ 236.665465][T10915] tunl0: entered promiscuous mode [ 236.670557][T10915] tunl0: entered allmulticast mode [ 236.699052][T10918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1336'. [ 236.770174][T10915] tipc: Resetting bearer [ 236.774419][T10919] netlink: 'syz.0.1338': attribute type 1 has an invalid length. [ 236.779621][T10922] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1337'. [ 236.802161][T10670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.990263][T10919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1338'. [ 237.080205][T10925] 8021q: adding VLAN 0 to HW filter on device bond6 [ 237.090873][T10925] bond5: (slave bond6): making interface the new active one [ 237.099961][T10925] bond5: (slave bond6): Enslaving as an active interface with an up link [ 237.122459][T10919] bond5: entered promiscuous mode [ 237.127742][T10919] bond6: entered promiscuous mode [ 237.136133][T10919] bond5: entered allmulticast mode [ 237.141422][T10919] bond6: entered allmulticast mode [ 237.148940][T10919] 8021q: adding VLAN 0 to HW filter on device bond5 [ 237.223005][T10670] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.238357][T10902] tipc: Disabling bearer [ 237.280440][ T7017] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.288706][ T7017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.373119][ T7017] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.380403][ T7017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.484117][T10944] tipc: Enabling of bearer rejected, failed to enable media [ 237.532241][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1345'. [ 237.655800][T10670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.941509][T10960] netlink: 'syz.2.1349': attribute type 1 has an invalid length. [ 237.952907][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1350'. [ 237.966164][T10960] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1349'. [ 238.088166][T10963] bridge4: entered promiscuous mode [ 238.098554][T10963] bridge4: entered allmulticast mode [ 238.389341][T10670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.508142][T10976] vlan2: entered promiscuous mode [ 238.524466][T10976] bridge0: entered promiscuous mode [ 238.842232][T10959] delete_channel: no stack [ 238.871182][T10995] tipc: Enabling of bearer rejected, failed to enable media [ 239.479104][T10670] veth0_vlan: entered promiscuous mode [ 239.539196][T10670] veth1_vlan: entered promiscuous mode [ 239.576396][T11013] __nla_validate_parse: 2 callbacks suppressed [ 239.576418][T11013] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1363'. [ 239.692041][T10670] veth0_macvtap: entered promiscuous mode [ 239.717330][T11013] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20004 [ 239.738318][T10670] veth1_macvtap: entered promiscuous mode [ 239.812596][T10670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.860037][T10670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.942890][ T6368] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.962828][ T7013] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.022967][ T6368] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.039801][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1369'. [ 240.052956][ T6368] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.261590][ T7017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.294114][ T7017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.340831][T11039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1373'. [ 240.448974][ T7013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.479966][ T7013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.515866][T11045] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1374'. [ 240.751323][T11051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1376'. [ 241.094902][T11061] net_ratelimit: 4 callbacks suppressed [ 241.094925][T11061] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 241.513128][T11080] netlink: 'syz.5.1385': attribute type 11 has an invalid length. [ 241.537858][T11080] netlink: 'syz.5.1385': attribute type 10 has an invalid length. [ 241.566916][T11080] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.578711][T11080] bridge_slave_1: left allmulticast mode [ 241.587272][T11080] bridge_slave_1: left promiscuous mode [ 241.599294][T11080] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.623465][T11080] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 241.647900][T11085] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1384'. [ 243.095184][T11132] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1396'. [ 243.202707][T11135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1398'. [ 243.551443][T11150] sctp: [Deprecated]: syz.1.1401 (pid 11150) Use of int in max_burst socket option. [ 243.551443][T11150] Use struct sctp_assoc_value instead [ 243.632720][T11150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1401'. [ 243.692876][T11150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1401'. [ 243.796705][ T55] block nbd1: Possible stuck request ffff888024fb7000: control (read@0,1024B). Runtime 60 seconds [ 243.808954][ T55] block nbd1: Possible stuck request ffff888024fb71c0: control (read@1024,1024B). Runtime 60 seconds [ 243.820483][ T55] block nbd1: Possible stuck request ffff888024fb7380: control (read@2048,1024B). Runtime 60 seconds [ 243.832032][ T55] block nbd1: Possible stuck request ffff888024fb7540: control (read@3072,1024B). Runtime 60 seconds [ 244.621957][T11187] syzkaller1: entered promiscuous mode [ 244.629406][T11187] syzkaller1: entered allmulticast mode [ 244.734519][T11190] __nla_validate_parse: 6 callbacks suppressed [ 244.734541][T11190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1415'. [ 244.745414][T11192] netlink: 'syz.3.1416': attribute type 1 has an invalid length. [ 244.817895][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1416'. [ 244.827350][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1416'. [ 245.170260][T11207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1421'. [ 245.194268][T11213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1423'. [ 245.256338][T11214] netlink: 'syz.2.1423': attribute type 1 has an invalid length. [ 245.361361][T11214] 8021q: adding VLAN 0 to HW filter on device bond4 [ 245.542015][T11215] bond4: (slave veth3): Enslaving as an active interface with a down link [ 245.996418][T11250] netlink: 'syz.5.1432': attribute type 1 has an invalid length. [ 246.004874][T11250] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1432'. [ 246.085714][T11217] team0 (unregistering): Port device team_slave_0 removed [ 246.107229][T11217] team0 (unregistering): Port device team_slave_1 removed [ 246.118741][T11217] veth1_to_bond: left allmulticast mode [ 246.126013][T11217] veth1_to_bond: left promiscuous mode [ 246.134755][T11217] team0 (unregistering): Port device macvlan3 removed [ 246.146123][T11217] team0 (unregistering): Port device bond6 removed [ 246.170358][T11213] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 246.553080][T11269] syzkaller1: entered promiscuous mode [ 246.569322][T11269] syzkaller1: entered allmulticast mode [ 246.626725][ T5883] block nbd2: Receive control failed (result -32) [ 246.629755][T11275] netlink: 'syz.3.1442': attribute type 1 has an invalid length. [ 247.001166][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1447'. [ 247.121779][T11296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.183303][T11290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1447'. [ 247.191817][T11299] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 247.271369][T11295] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1447'. [ 248.398814][T11417] sch_fq: defrate 0 ignored. [ 248.897918][T11454] pimreg3: entered allmulticast mode [ 249.020116][T11469] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1465'. [ 249.830835][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1472'. [ 250.559652][T11526] netlink: 'syz.5.1480': attribute type 1 has an invalid length. [ 250.612032][T11526] netlink: 'syz.5.1480': attribute type 2 has an invalid length. [ 250.668463][T11530] netlink: 'syz.5.1480': attribute type 1 has an invalid length. [ 250.693408][T11530] netlink: 'syz.5.1480': attribute type 2 has an invalid length. [ 250.806470][T11535] Bluetooth: MGMT ver 1.23 [ 251.422598][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1492'. [ 251.687991][T11581] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1497'. [ 251.937389][T11590] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1499'. [ 252.024072][T11600] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 252.185952][T11608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1499'. [ 252.214311][T11606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1503'. [ 252.225861][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1503'. [ 252.237980][T11605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.268700][T11590] netlink: 'syz.3.1499': attribute type 1 has an invalid length. [ 252.289411][T11590] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1499'. [ 252.557778][T11626] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1508'. [ 252.854417][T11635] syzkaller1: entered promiscuous mode [ 252.864005][T11635] syzkaller1: entered allmulticast mode [ 253.130148][T11656] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1515'. [ 253.186181][T11657] netlink: 'syz.0.1517': attribute type 2 has an invalid length. [ 253.229472][T11657] netlink: 'syz.0.1517': attribute type 1 has an invalid length. [ 254.357125][ T5883] block nbd3: Receive control failed (result -32) [ 254.471826][T11724] netlink: 'syz.1.1532': attribute type 83 has an invalid length. [ 254.539658][T11727] netlink: 'syz.5.1534': attribute type 1 has an invalid length. [ 254.801047][T11730] bond1: (slave gretap1): making interface the new active one [ 254.817429][T11730] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 255.055666][T11751] netlink: 'syz.3.1540': attribute type 1 has an invalid length. [ 255.100825][T11750] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 255.118151][T11756] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.361590][T11769] netlink: 'syz.5.1545': attribute type 3 has an invalid length. [ 255.465494][T11769] __nla_validate_parse: 1 callbacks suppressed [ 255.465514][T11769] netlink: 201372 bytes leftover after parsing attributes in process `syz.5.1545'. [ 255.584404][T11776] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1548'. [ 255.899403][T11792] tunl0: entered promiscuous mode [ 255.938675][T11792] netlink: 'syz.0.1551': attribute type 3 has an invalid length. [ 255.958407][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.994017][T11792] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1551'. [ 256.012916][T11795] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1553'. [ 256.033218][T11795] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1553'. [ 256.628619][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1557'. [ 256.664982][T11821] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1557'. [ 256.690828][T11821] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1557'. [ 256.725732][T11825] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1557'. [ 256.809594][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 256.881589][T11832] netlink: 'syz.2.1562': attribute type 13 has an invalid length. [ 256.952496][T11832] macvtap0: entered allmulticast mode [ 256.982196][T11832] macvtap0: refused to change device tx_queue_len [ 257.795205][T11865] vlan2: entered allmulticast mode [ 257.823389][T11865] bridge0: entered allmulticast mode [ 257.857233][T11865] bridge1: port 1(vlan2) entered blocking state [ 257.890245][T11865] bridge1: port 1(vlan2) entered disabled state [ 257.906843][T11865] vlan2: entered promiscuous mode [ 257.912387][T11865] bridge0: entered promiscuous mode [ 258.091078][T11880] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 258.268615][T11892] netem: incorrect gi model size [ 258.274434][T11892] netem: change failed [ 258.627173][T11905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.674834][ T5883] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 258.823680][T11915] netlink: 'syz.5.1585': attribute type 1 has an invalid length. [ 258.858129][T11916] netlink: 'syz.5.1585': attribute type 1 has an invalid length. [ 258.912586][T11913] wg1: entered promiscuous mode [ 259.360189][T11938] bond0: Error: Cannot enslave bond to itself. [ 259.523217][T11946] netlink: 'syz.5.1596': attribute type 16 has an invalid length. [ 259.541750][T11944] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.584167][T11946] netlink: 'syz.5.1596': attribute type 17 has an invalid length. [ 259.755467][T11946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.493249][T11992] __nla_validate_parse: 16 callbacks suppressed [ 260.493271][T11992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1610'. [ 261.242312][T12022] netlink: 16146 bytes leftover after parsing attributes in process `syz.2.1617'. [ 261.286258][T12025] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1619'. [ 261.446572][T12034] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1622'. [ 261.476308][T12034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1622'. [ 261.497326][T12034] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1622'. [ 261.807588][T12045] vlan3: entered allmulticast mode [ 261.812940][T12045] bond0: entered allmulticast mode [ 261.896863][T12045] bond_slave_0: entered allmulticast mode [ 261.902856][T12045] bond_slave_1: entered allmulticast mode [ 261.940429][T12045] bridge_slave_1: entered allmulticast mode [ 262.290218][T12079] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 262.397309][T12084] veth1_macvtap: left promiscuous mode [ 262.562255][T12089] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1640'. [ 262.619778][T12078] "syz.3.1637" (12078) uses obsolete ecb(arc4) skcipher [ 262.839575][T12102] netlink: 'syz.3.1645': attribute type 4 has an invalid length. [ 262.863006][T12102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1645'. [ 263.090771][T12110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1646'. [ 263.280957][T12118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1649'. [ 263.382015][T12124] netlink: 'syz.1.1648': attribute type 1 has an invalid length. [ 263.927971][T12135] syzkaller1: entered promiscuous mode [ 263.950836][T12135] syzkaller1: entered allmulticast mode [ 263.998573][T12135] bond0: (slave bond_slave_1): Releasing backup interface [ 264.556606][T12174] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 265.661783][T12218] netlink: 'syz.1.1680': attribute type 6 has an invalid length. [ 265.711650][T12218] __nla_validate_parse: 8 callbacks suppressed [ 265.711669][T12218] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1680'. [ 265.997274][T12236] netlink: 'syz.1.1683': attribute type 3 has an invalid length. [ 266.025689][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1683'. [ 266.113182][T12237] openvswitch: netlink: IP tunnel TTL not specified. [ 266.680628][T12263] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1694'. [ 266.853419][ T31] INFO: task udevd:5916 blocked for more than 143 seconds. [ 266.890258][ T31] Not tainted 6.16.0-syzkaller-12111-gd7e82594a45c #0 [ 266.930084][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 266.964081][ T31] task:udevd state:D stack:23304 pid:5916 tgid:5916 ppid:5238 task_flags:0x400140 flags:0x00004002 [ 267.018889][ T31] Call Trace: [ 267.053676][ T31] [ 267.056773][ T31] __schedule+0x1798/0x4cc0 [ 267.088552][ T31] ? blk_mq_flush_plug_list+0x41f/0x550 [ 267.103618][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 267.110312][ T31] ? __lock_acquire+0xab9/0xd20 [ 267.119440][ T31] ? __pfx___schedule+0x10/0x10 [ 267.125607][ T31] ? schedule+0x91/0x360 [ 267.130108][ T31] schedule+0x165/0x360 [ 267.139065][ T31] schedule_timeout+0x12b/0x270 [ 267.145451][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 267.152361][ T31] ? __pfx_process_timeout+0x10/0x10 [ 267.173871][ T31] ? prepare_to_wait_event+0x437/0x480 [ 267.180720][ T31] nbd_queue_rq+0x662/0xf10 [ 267.187362][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 267.192616][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 267.203360][ T31] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 267.210257][ T31] ? sbitmap_find_bit+0x3ff/0x490 [ 267.219989][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 267.227734][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 267.234331][ T31] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 267.240914][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 267.248730][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 267.254735][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 267.264883][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 267.270739][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 267.277041][ T31] blk_mq_dispatch_list+0xd0c/0xe00 [ 267.282534][ T31] ? blk_mq_dispatch_list+0x1c0/0xe00 [ 267.288804][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 267.295558][ T31] ? __pfx_update_io_ticks+0x10/0x10 [ 267.301104][ T31] blk_mq_flush_plug_list+0x469/0x550 [ 267.307229][ T31] ? trace_block_plug+0x7a/0x1f0 [ 267.312420][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 267.318242][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 267.324751][ T31] ? blk_mq_submit_bio+0xbcb/0x2520 [ 267.330158][ T31] __blk_flush_plug+0x3d3/0x4b0 [ 267.338420][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 267.346056][ T31] __submit_bio+0x2d3/0x5a0 [ 267.350786][ T31] ? ktime_get+0x3e/0x1f0 [ 267.361388][ T31] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 267.368580][ T31] ? __pfx___submit_bio+0x10/0x10 [ 267.374262][ T31] ? blk_cgroup_bio_start+0x59d/0x640 [ 267.380149][ T31] ? bio_associate_blkg+0x6d/0x230 [ 267.385923][ T31] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 267.391953][ T31] ? bio_associate_blkg+0x6d/0x230 [ 267.398129][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 267.405796][ T31] ? submit_bio_noacct+0xd65/0x1a70 [ 267.411246][ T31] block_read_full_folio+0x599/0x830 [ 267.420620][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 267.428275][ T31] filemap_read_folio+0x117/0x380 [ 267.437476][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 267.443201][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 267.451518][ T31] do_read_cache_folio+0x350/0x590 [ 267.457387][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 267.466097][ T31] read_part_sector+0xb6/0x2b0 [ 267.471055][ T31] adfspart_check_ICS+0xa4/0xa50 [ 267.486738][ T31] ? snprintf+0xda/0x120 [ 267.491185][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 267.498529][ T31] bdev_disk_changed+0x75f/0x14b0 [ 267.504285][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 267.510094][ T31] ? wait_on_inode+0xc0/0x230 [ 267.515333][ T31] blkdev_get_whole+0x380/0x510 [ 267.520375][ T31] bdev_open+0x31e/0xd30 [ 267.525380][ T31] blkdev_open+0x3a8/0x510 [ 267.530033][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 267.535688][ T31] do_dentry_open+0x953/0x13f0 [ 267.540816][ T31] vfs_open+0x3b/0x340 [ 267.546892][ T31] ? path_openat+0x2ecd/0x3830 [ 267.552194][ T31] path_openat+0x2ee5/0x3830 [ 267.557481][ T31] ? arch_stack_walk+0xfc/0x150 [ 267.562393][ T31] ? stack_depot_save_flags+0x40/0x860 [ 267.568660][ T31] ? __pfx_path_openat+0x10/0x10 [ 267.573964][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.580438][ T31] do_filp_open+0x1fa/0x410 [ 267.585780][ T31] ? __lock_acquire+0xab9/0xd20 [ 267.590969][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 267.596439][ T31] ? _raw_spin_unlock+0x28/0x50 [ 267.601485][ T31] ? alloc_fd+0x64c/0x6c0 [ 267.606188][ T31] do_sys_openat2+0x121/0x1c0 [ 267.610903][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 267.617408][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 267.622757][ T31] ? rcu_is_watching+0x15/0xb0 [ 267.627896][ T31] __x64_sys_openat+0x138/0x170 [ 267.632784][ T31] do_syscall_64+0xfa/0x3b0 [ 267.637778][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.644430][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 267.650880][ T31] ? clear_bhb_loop+0x60/0xb0 [ 267.656095][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.662199][ T31] RIP: 0033:0x7f505bea7407 [ 267.667520][ T31] RSP: 002b:00007fff1c08f880 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 267.676659][ T31] RAX: ffffffffffffffda RBX: 00007f505c593880 RCX: 00007f505bea7407 [ 267.685194][ T31] RDX: 00000000000a0800 RSI: 0000560505056ac0 RDI: ffffffffffffff9c [ 267.693373][ T31] RBP: 0000560505045910 R08: 0000000000000000 R09: 0000000000000000 [ 267.701424][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000560505059fc0 [ 267.709836][ T31] R13: 00005605050531b0 R14: 0000000000000000 R15: 0000560505059fc0 [ 267.718397][ T31] [ 267.721494][ T31] [ 267.721494][ T31] Showing all locks held in the system: [ 267.731985][ T31] 1 lock held by khungtaskd/31: [ 267.764507][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 267.777347][ T31] 2 locks held by getty/5633: [ 267.782325][ T31] #0: ffff8880337e30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 267.800332][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 267.825523][ T31] 1 lock held by syz-executor/5870: [ 267.830784][ T31] 3 locks held by udevd/5916: [ 267.835828][ T31] #0: ffff888024e7c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 267.849574][ T31] #1: ffff888024c14110 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 267.860481][ T31] #2: ffff888024f57178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 267.877158][ T31] 1 lock held by udevd/9251: [ 267.882170][ T31] #0: ffff888024ee8358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 267.892030][ T31] [ 267.895079][ T31] ============================================= [ 267.895079][ T31] [ 267.903834][ T31] NMI backtrace for cpu 1 [ 267.903852][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12111-gd7e82594a45c #0 PREEMPT(full) [ 267.903885][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.903898][ T31] Call Trace: [ 267.903906][ T31] [ 267.903914][ T31] dump_stack_lvl+0x189/0x250 [ 267.903946][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.903969][ T31] ? __pfx__printk+0x10/0x10 [ 267.904011][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 267.904035][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 267.904059][ T31] ? __pfx__printk+0x10/0x10 [ 267.904091][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 267.904124][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 267.904148][ T31] watchdog+0xf93/0xfe0 [ 267.904181][ T31] ? watchdog+0x1de/0xfe0 [ 267.904214][ T31] kthread+0x70e/0x8a0 [ 267.904243][ T31] ? __pfx_watchdog+0x10/0x10 [ 267.904269][ T31] ? __pfx_kthread+0x10/0x10 [ 267.904295][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 267.904318][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.904339][ T31] ? __pfx_kthread+0x10/0x10 [ 267.904364][ T31] ret_from_fork+0x3fc/0x770 [ 267.904388][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 267.904415][ T31] ? __switch_to_asm+0x39/0x70 [ 267.904439][ T31] ? __switch_to_asm+0x33/0x70 [ 267.904462][ T31] ? __pfx_kthread+0x10/0x10 [ 267.904487][ T31] ret_from_fork_asm+0x1a/0x30 [ 267.904529][ T31] [ 267.904536][ T31] Sending NMI from CPU 1 to CPUs 0: [ 268.060448][ C0] NMI backtrace for cpu 0 [ 268.060467][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-syzkaller-12111-gd7e82594a45c #0 PREEMPT(full) [ 268.060486][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 268.060496][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 268.060519][ C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 77 0f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 268.060533][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 268.060549][ C0] RAX: 3294f2665a208100 RBX: ffffffff81968308 RCX: 3294f2665a208100 [ 268.060561][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b4911 RDI: ffffffff8be32680 [ 268.060571][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 268.060582][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa34630 [ 268.060593][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 268.060643][ C0] FS: 0000000000000000(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000 [ 268.060663][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.060674][ C0] CR2: 00007ff6f1b8fe9c CR3: 000000005f5e4000 CR4: 00000000003526f0 [ 268.060690][ C0] Call Trace: [ 268.060696][ C0] [ 268.060702][ C0] default_idle+0x13/0x20 [ 268.060722][ C0] default_idle_call+0x74/0xb0 [ 268.060745][ C0] do_idle+0x1e8/0x510 [ 268.060759][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 268.060779][ C0] ? __pfx_do_idle+0x10/0x10 [ 268.060797][ C0] ? do_idle+0x4ed/0x510 [ 268.060813][ C0] cpu_startup_entry+0x44/0x60 [ 268.060828][ C0] rest_init+0x2de/0x300 [ 268.060850][ C0] start_kernel+0x3a9/0x410 [ 268.060871][ C0] x86_64_start_reservations+0x24/0x30 [ 268.060892][ C0] x86_64_start_kernel+0x143/0x1c0 [ 268.060913][ C0] common_startup_64+0x13e/0x147 [ 268.060941][ C0] [ 268.061557][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 268.257224][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12111-gd7e82594a45c #0 PREEMPT(full) [ 268.269246][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 268.279497][ T31] Call Trace: [ 268.282822][ T31] [ 268.285790][ T31] dump_stack_lvl+0x99/0x250 [ 268.290412][ T31] ? __asan_memcpy+0x40/0x70 [ 268.295504][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.301056][ T31] ? __pfx__printk+0x10/0x10 [ 268.305850][ T31] vpanic+0x281/0x750 [ 268.309876][ T31] ? __pfx_vpanic+0x10/0x10 [ 268.314394][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 268.320134][ T31] ? preempt_schedule+0xae/0xc0 [ 268.325175][ T31] ? preempt_schedule_common+0x83/0xd0 [ 268.330658][ T31] panic+0xb9/0xc0 [ 268.334403][ T31] ? __pfx_panic+0x10/0x10 [ 268.338970][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 268.344805][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 268.351091][ T31] watchdog+0xfd2/0xfe0 [ 268.355356][ T31] ? watchdog+0x1de/0xfe0 [ 268.359700][ T31] kthread+0x70e/0x8a0 [ 268.363911][ T31] ? __pfx_watchdog+0x10/0x10 [ 268.368595][ T31] ? __pfx_kthread+0x10/0x10 [ 268.373304][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 268.378533][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.383881][ T31] ? __pfx_kthread+0x10/0x10 [ 268.388482][ T31] ret_from_fork+0x3fc/0x770 [ 268.393110][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 268.398503][ T31] ? __switch_to_asm+0x39/0x70 [ 268.403306][ T31] ? __switch_to_asm+0x33/0x70 [ 268.408160][ T31] ? __pfx_kthread+0x10/0x10 [ 268.412807][ T31] ret_from_fork_asm+0x1a/0x30 [ 268.417628][ T31] [ 268.420911][ T31] Kernel Offset: disabled [ 268.425240][ T31] Rebooting in 86400 seconds..