last executing test programs: 3m2.022993685s ago: executing program 4 (id=2777): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=@deltaction={0x84, 0x31, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7289}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x804}, 0x8000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00\x00'], 0x50) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) 3m1.773857505s ago: executing program 4 (id=2780): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae8030100000000000000f4c9f3f154da53b856980705aca194d55fee51b2804511db9a4f04d6c068a6d3a3b64ae2556b6e8a824251e2f47379ca61db0fae2416e5e38e02352382f169a948cbb4947b90a9c14d967dd5892b1d73182effb63b0d1a80a6cfa60bedfded3b0f4dc43083137468fb4ece522f98cf8453d4c90f5cb85f1ca2751a31d1f87fd2bd4e96aee9c804b3f3e56f486b95d09e53f9", 0xb6) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x2, &(0x7f00000003c0)={r2, 0x1, 0x4, @remote}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040), 0x0, 0x40800) recvmsg$qrtr(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) 3m1.587487044s ago: executing program 4 (id=2784): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x1}, 0x4) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2000}, 0x4) (async) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@multicast, @local, @void, {@ipv4={0x8864, @igmp={{0x5, 0x4, 0x3, 0x9, 0x1c, 0x65, 0x0, 0x2, 0x2, 0x0, @broadcast, @rand_addr=0x64010102}, {0x16, 0xf, 0x0, @local}}}}}, 0x0) 3m1.460163519s ago: executing program 4 (id=2788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r1, &(0x7f0000000140)="9f", 0x1, 0x4040000, 0x0, 0x0) recvfrom(r1, &(0x7f0000000200)=""/62, 0x3e, 0x99bcb88de02507d2, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 3m1.445849816s ago: executing program 4 (id=2789): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100766c616e000000000400020400001a8004001c00e4f48b5ef876f33355f15237d540d89ec5d70e4f108a3fba37017ea23c3e4788bccbce8674a7b854838edae39f734ede8964fda585b4741a8e16950b79f7a9fee8a605524d58b4e13143b59604d0d4a114c0b041af2082d519caa7616924a53403fb635ca993c3f3d2148edb0cd8f2d05b39aa0d23b88f9dc511fa523707c8c18e8272866d5f0e3a3fa91c0f389a67a0a1c62dbbad6f2425936cee6284aac1264e393f3fb44089b167bb5b46059b241a1fc253eaea34b5956691f835607b509f83086eab18"], 0x3c}}, 0x0) 3m1.146800626s ago: executing program 4 (id=2796): ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000100)={'team0\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffe}, 0x42) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x7c, 0x40, 0x119, 0xfffffffe, 0xffffffff, {0x1, 0x7c}, [@typed={0x8, 0x43, 0x0, 0x0, @pid=r2}, @generic="8f1e19a70700299bb3e53612e20669856bfd6b7d232323e5f1f73d6d36e4bc757ec8c5819618bb5fcf0d712ebe62fc6da7ca8c86a2bd8279b485f81d4f75b53edc0668d52c37a8b9024ed8a760fe69c6ad7296f4b362162b61efa6", @nested={0x4, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48814}, 0x4) (async) r3 = accept$netrom(0xffffffffffffffff, &(0x7f0000000440)={{0x3, @rose}, [@null, @rose, @bcast, @netrom, @bcast, @null, @bcast, @default]}, &(0x7f00000004c0)=0x48) r4 = accept$netrom(r3, &(0x7f0000000500)={{}, [@bcast, @null, @netrom, @rose, @bcast, @remote, @rose, @netrom]}, &(0x7f0000000380)=0x48) (async, rerun: 32) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) (rerun: 32) ioctl$SIOCAX25ADDFWD(r5, 0x89ea, &(0x7f0000000b40)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) connect$netrom(r4, &(0x7f00000003c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x75, "5bdb6df491bfe23167e486d349f442fdd124ec68c8d89579d44e44586cdaba62e49ad5cd92aa119b102df4406b3c30a123f9f2534c05b5960e8c80256d5b7eb6d62bbe9cc3721ba55816670cc15c9e11dcc9becef8cd92bcabbcbb9d1f24ffaae55eecc3f37f1a150d2471445fba7ff0cfd7af1a08"}, &(0x7f0000000140)=0x7d) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000580)={r7, @in6={{0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8d}}}, 0x84) (async) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x14, 0x14}}, 0x1c}}, 0x0) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x90) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r9, &(0x7f0000000300)}, 0x20) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@generic='2']}, 0x18}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) 3m0.831666577s ago: executing program 32 (id=2796): ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000100)={'team0\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffe}, 0x42) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x7c, 0x40, 0x119, 0xfffffffe, 0xffffffff, {0x1, 0x7c}, [@typed={0x8, 0x43, 0x0, 0x0, @pid=r2}, @generic="8f1e19a70700299bb3e53612e20669856bfd6b7d232323e5f1f73d6d36e4bc757ec8c5819618bb5fcf0d712ebe62fc6da7ca8c86a2bd8279b485f81d4f75b53edc0668d52c37a8b9024ed8a760fe69c6ad7296f4b362162b61efa6", @nested={0x4, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48814}, 0x4) (async) r3 = accept$netrom(0xffffffffffffffff, &(0x7f0000000440)={{0x3, @rose}, [@null, @rose, @bcast, @netrom, @bcast, @null, @bcast, @default]}, &(0x7f00000004c0)=0x48) r4 = accept$netrom(r3, &(0x7f0000000500)={{}, [@bcast, @null, @netrom, @rose, @bcast, @remote, @rose, @netrom]}, &(0x7f0000000380)=0x48) (async, rerun: 32) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) (rerun: 32) ioctl$SIOCAX25ADDFWD(r5, 0x89ea, &(0x7f0000000b40)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) connect$netrom(r4, &(0x7f00000003c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x75, "5bdb6df491bfe23167e486d349f442fdd124ec68c8d89579d44e44586cdaba62e49ad5cd92aa119b102df4406b3c30a123f9f2534c05b5960e8c80256d5b7eb6d62bbe9cc3721ba55816670cc15c9e11dcc9becef8cd92bcabbcbb9d1f24ffaae55eecc3f37f1a150d2471445fba7ff0cfd7af1a08"}, &(0x7f0000000140)=0x7d) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000580)={r7, @in6={{0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8d}}}, 0x84) (async) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x14, 0x14}}, 0x1c}}, 0x0) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x90) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r9, &(0x7f0000000300)}, 0x20) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@generic='2']}, 0x18}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) 22.374445495s ago: executing program 5 (id=5039): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv4_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'netdevsim0\x00'}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES16=r3, @ANYBLOB="55108f6e88a7be24f9bdf43d840978eef62b41138b2a55708d6a5d1454482dbde4b8729a79634f09cef05e0fef3c870306e54ed332a27a9cf2a34f1cdc49f0cb13d53d0fb16562b2067600a4771f648d6e0f49f858009cf713cb2f79a9efdc36678ad325695fb281e3c5860aa81919bb8fe80c1de4d314d810c6d007c993d1b5690c102df31d21e0291c0aeee6628a1f9893144bee4ef83efb5f3a6d4cb86f7510560608c36279d7d76193063e69ae67110766c366bf00a93c7bc437bc514e8c8ee8ed96d6b9a346625b083aa633148ec162c3ef6de04159058f", @ANYRESOCT=r3, @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 22.061064834s ago: executing program 5 (id=5043): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x140a, 0x200, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time_for_children\x00') r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1402, 0x800, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) shutdown(r3, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, 0x0, 0x0) 21.847590906s ago: executing program 5 (id=5047): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 21.556284356s ago: executing program 5 (id=5048): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000f06010400000000000000000700000405000100"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x100000, @loopback}, 0x1c) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='team_slave_1\x00', 0x10) sendto$inet6(r4, 0x0, 0x0, 0x2000c000, 0x0, 0x0) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000001c0)={0x1}, 0x1) accept(r1, 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(r11) sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r9, 0x3, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r9, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1199}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x48040) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r6, 0x1, 0x0, 0x0, {0x7}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 21.384331785s ago: executing program 5 (id=5050): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, r1, 0x100, 0x70bd26, 0x25dfcbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd644}]}, 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x1041) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x14, 0x6, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x80) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x6, 0x12) 21.152045232s ago: executing program 5 (id=5051): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)}, 0x40000040) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="f0000000100001000000000000000008fe8000000000000000080000000000aa00000000292938887af48b000000000000ffff0a0101004e2300000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1e01010000000000000000000000008c000000000000000000000000000000000000000000000000000000000000000400000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xf0}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x7}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x1}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xc00c050) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a4de6b62e001000"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{r13}, &(0x7f0000000300), &(0x7f0000000440), 0x2}, 0x20) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r12], 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r15, 0x0) sendfile(r14, r15, 0x0, 0x8) 20.208584301s ago: executing program 0 (id=5068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="73619454b396dea70e00", @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e300000000000000000000000300016802c00018028000100ffff"], 0x68}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd610000e500122f"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000240001800600050046230000060001000200000008000300ac1414aa0800060001000000fa0226ce3641ce4c733e02ad047f227b77ada0"], 0x38}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0x30}}, 0x1) 19.304262809s ago: executing program 0 (id=5086): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x30, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2}}}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x5f) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="2b0326bd7000fbdbdf25120000008800048024000780080001000000000008000300010000000800030098402b1208000100100000000900"], 0xec}, 0x1, 0x0, 0x0, 0x24004050}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 18.972197104s ago: executing program 0 (id=5092): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x9, 0x0, 0x0) close(r1) (async) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xc0, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf7}]}, 0xc0}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'bond_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'bond_slave_0\x00'}) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x4044009) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r9, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000000)={0x30, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf898}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async) sendmsg$TIPC_NL_PEER_REMOVE(r9, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000000)={0x30, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf898}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x9, 0x5, 0x9, 0x4, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 18.534513935s ago: executing program 0 (id=5100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @netrom, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) sendto(r1, 0x0, 0x0, 0x80, &(0x7f0000001080)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80) r2 = socket(0x5, 0x3, 0x3) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000"], 0x7c}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003800800"], 0x34}}, 0xc000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d004e24000006001c"], 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0x4}, {0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0xa}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c884}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x56, &(0x7f0000000000)={@broadcast, @empty, @void, {@canfd={0xd, {{0x0, 0x0, 0x1, 0x1}, 0x9, 0x2, 0x0, 0x0, "5829de07d8c07e820dfb0b5135b297e35e6beef4fe5ed45402e4b65fe4501b3cbba95db824842388046b809ab3de59749ce3a2c9cd4a551495c50ca9d5535b70"}}}}, 0x0) connect$tipc(r2, &(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x10) 18.307022856s ago: executing program 1 (id=5103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0x2f2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) 18.22415957s ago: executing program 0 (id=5104): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100200, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000080)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 18.200010287s ago: executing program 0 (id=5105): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xaa}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2219}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)={0x1e0, r1, 0x100, 0x70bd2b, 0x25dbdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8000, 0x0) read$rfkill(r2, 0x0, 0x0) 18.178498219s ago: executing program 1 (id=5106): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x18, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000190a01020000000000000000000000000900010073797a3000000000090002"], 0x2c}}, 0x0) 18.068266641s ago: executing program 1 (id=5107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x757a596f42de7164}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_NEWSETELEM={0x14, 0x1d, 0xa, 0x805, 0x0, 0x0, {0x1, 0x0, 0xfffc}}], {0x14, 0x10}}, 0x5c}}, 0x0) r1 = epoll_create1(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r2, 0x8946, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a") epoll_wait(r1, &(0x7f0000003040)=[{}], 0x1, 0x3) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x60, 0x3, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xa55d}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x50}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xeb}]}, 0x60}, 0x1, 0x0, 0x0, 0x84}, 0xc0c5) 18.000123975s ago: executing program 1 (id=5108): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf250700000008000300", @ANYRES32=r1, @ANYBLOB="0c009900010000005b00000005005300010000001400040064766d7270300000f2000000000000000800050004"], 0x4c}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f00000000c0)}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x68, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x1) 17.940104072s ago: executing program 1 (id=5109): r0 = socket(0x6, 0x3, 0x8) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x8a, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 17.856380529s ago: executing program 1 (id=5110): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000001c0)={0x7fffffff}, 0x10) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008104e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x44004) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@can_delroute={0x14c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x47, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "56e89243dad36ae9dc7283425f986bbfe5349c4e"}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "80deae486c1a0221"}, 0x6}}]}, 0x14c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x1, 0xfff, 0x5, @dev={0xfe, 0x80, '\x00', 0xf}, @empty, 0x40, 0x0, 0x19, 0x801}}) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket(0x400000000010, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r13 = socket$unix(0x1, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r14, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r12}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0xffffffffffffffff, {0x2, 0x0, 0x4}, 0xfe}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) 17.66267738s ago: executing program 2 (id=5111): sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001440)={&(0x7f0000000040)={0x13ec, 0x15, 0x2, 0x70bd29, 0x25dfdbff, {0x1, 0xb1}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "6fccdf194dcc2df9541aee052f29e3f023cad57c024f76b3de7ad4a38a46b6333ee706c7efdf06d9c154164215e5dfe16eedbecb730a7180fbafd2f79ef9798621c14093dcbe1af1e6c0dc78c4de53169384509473e4985d0a72989682b45c9eeacad91fb13a7dd761473198c849c7bc37197a0b2ea9d7d06390e2df0286e83a40b4811fdd947c7a0544fabcff165757fdf530467262f6a5ef43715551ca839acecb7dab37abc4237df29db105c2145d4feb23d9528cc86c46ad5a52429aeda2b472558c3b25dcd2303cd950663c20c07fe7d1c1bcc7fd428a4ce91d3d3cacaa10b5e64b65c75bb6a3e854faa19e8986319ad819f76bcb57381b65384df34a0db556e486dc92f6ccfcb811f954759c413615b87bf9555299ccc123ed0ee8f836093a29746bbfeeba78dc1f58e174e23a593014f825102b791ab3c58c239b4d67e71c8a028c01b02e953e618aabc83951a55710ed1cf3b42ab9d55415a454e5c9ed3d6a1f7db223ccec4b0792341a6396e70c78970ff1e1af9197e522b07bfed2c17bca8659cb501b3c9b6aaa4a57fb3872c09ab5cb6d56046ebbc1aa7fe24e1c13b7a61663342b74075aa9041b88567de48fb70d7f97999788d0a9697b05eac122af2d4aa928e9a8d4ad83dfc36187e8878f369a429eaf3d68435e3291abf94460f9c68968b5ee6195d4b3621dc61601c3c614e5fc98413921258511490d493df0698b8896a217c44ce5a386efffdf9ecfd3649ac571cb82208b659838d47e7cab1aa1420f87f6547c396688dba82674e9811865485258f8996040a59a3e131f3549999561d87e2bd961033c126cd168a051aea31503eed39b55b6de52118aa81d85705dba4aed0845a7da843e88440894c3b96c6ff3650247c0ef91d8eb4ea17eedd4677716cba203a7d9fb078f5c6dbf80473e91ca4b4cca0f9208a3c4dd1cf9b3547674e65e3dc54a338588d2f8e2a0644c19fafb9135e69ff12bb877264148beaf6947fd6ffadeba6871b343c221db9cbb5cf381f84d39b68c8666ac9cc89c09af132ebf19b58263ff5e49e903f739904038ec5e5adda40629052da161e5cd40714b90c1bcbe2bbed78ad45e6a99291342dd145e0e5d72a637e620dca193102460a0bfa243fbbffadbccd45895fd637ddc5e0a0dca81a16557a3c48852372acfcc7e2ca309fbe0ed5be14424c444ba0d6290002c2fb6463e9950305d7987bf84d88a350cd0eb8bad4f0a54ef52c1bdd50069b30ce4baca6995e96c36be4e43be37252c5daddedf6619d006bb25a8d292e6f977a28fe556c834fc9655f6448a4a83d33f41f9e18a2c993ed0dd15837409a0716a281118121a5fd8d96d9ce61f0b83c9cc1ec77d80ed3126461b0e0d4ec055bf5a28ac0092c4dc19edb116849da5221427449c35e9a360d7dd61e40e8837be7a8184c38770430d7e40970517aedfa6a36c17d261384e0b458d831f4574844ef1e32a58448ed4285290bf208d48575eec06fe07e20af685fb47a8c5292347bea23e6ee0ab3f1e2c6d78ce9cf5f729064413f86f5f5555c87569db8916fd3eb5c9166ddc2a2166ffa4ef8d62b5ad4596f83317f07b9beac488500ffb495a231f9efc008ef176f14587dfd26bfedb5f1810f1aa6160f330f1719293aba7cf5c2380788456463f1f0cb30e19db5af16b2748d1f6cd69465905466968bd979538ed99d72e159537410bec4f5b853309e4675bbb583156bfed9e9e601e7630a9d978f2bd32210e3e6f7f0a1195bd8cfb2227ccd626caafa76cbfe4a94a1ed505e4e3b3df739067447cac049bbb7edec2ddad3360e0c189d1a3c995513879a67bfaf9a19efe4cb801297ac4bdb3c5670324ed95ee522437fef746db9652e0fb2904b3526dfe4c4099977ceba7e4706232d25bec615824620f3f7c75567bc6d6853762f2a26dd514667f5af516cac057566f8a458bd22c07e9f8f0d3035a278cc9f022ab5742756321d3d0e565f1a30c6dbbc4df403ffc4eeb52be1adf75cfce7bb8bd231dbc2b02c64bd4b6f9e4cad5779cda4f23818036349a0150d7d35d956854fc277401ad14a7e0aa35a3e3ef7d1c6ec323a5a819a142864c5fdba21c4309094e1b67a012fbc055d60bd41f6cbaeee1ffa4506a100075574085c6363d8f1fe21b9f6f650c2078db695639a08ea92089b823f5d9541b93deba7de2b13ff3e8624f185b71f8d4a3307ca303ed1e99b2ffc4c6bf667bcda6334fc0dfccc1132758e348bd9b53b7fcdb11348dacd67ea14c18da970a3435e4f96e5a4d8cf2f999f14ddc7125df94a61cbebc0d5c9375b62cdacf0975cf0e6271c5e779351035dba5606d6fe417badc114b819223e76fe327dc28a95e258059a7ce188e2b1bc6532c5e024d20eb3c6c17c036e97c6ac6f882fcd01c8d1b81578ec03d9283fbc8132c66f1bd00aca19d343ff1de39880bdbfe4d2f3f657c48fe6c69fa449f2c4aa13b0cbf2334998f93880d2c3147a1f8a2221a40c5c800062bb1c6689e80c63c1611617729a6b15020820a4f9ea1912efb462aec963ccf537a7d22d2bef73724e10d2290510a6e8b5c9eca0ad867e448d74fbe0a708dc8b8c141cedcc27a1ec7732af281f8e174ba3c253e60559d59bd354f25ba6e884bfb23bbbfba7eac82dc6285fff84e287179b190fe0a15cc6ab4d74724aebc32aeb03870b20ff487030e6fb0cd79cd562ed137dc35829a3e9d135ac93a4fc0941b16b223ede1d3731f1174967a4927f59fbe17d59376fdff8d4e99af18bf5a7283fa7be98d17b2af52f0fd5a749f3ef1a18201b183d70853da52379d72f1c3e908969a8e07424c05c551fbfdaaa471b4c89e1ccf52cfece8ac9905651a4cff208284e251a3eda101151db0604538fcf1cac651ff68bf4d69553ed9f16185f9aadde6eb22d2e222fc37fa82f86e9fed4350773324b2c6b5ae745392a430c8386aacb011a9fda6adf4abee52266a25aa8289880d974da3fc2f340ca973ce42ec09e1e9117daa0497932d789f51ef94207ba9c3d78c12f85a0c55a2651ba8f5d1a24304576b0ee0bc55bf5217265f801fb50752e1b413b5fd1321b50e34768ddf4923d404869d154e5c51c46c3d11f8ea144b17f1c3577b8daaf1c05d8c7111535c2b84b8862fe002eff8273fe68b8ae53a06291739a59b734624091cd8297e140eff03f4c698fc0c1888b5f7980be2d5dba4e4a8e60f9a663375a979d826540297342145ebe8e0fa08afffc56367686cea5cef9ba2888c690cc70e9fac3161c518732155113dfb434831696a3fe21f85a54c7a1a2a13b11caa0812f9cf27ad046a8c4fe39d1ff766e1f8158f9e6454fcd1fa3f391fd52fed4eed4d106c6730edab88b53ad400ec23c36b4b1e0beaf8e99e59026c1ccc49a628c129beca3e85d1efce2340f95ed0f0913037b087abfa003f2ea0a32176e648a19d97a2d531d00de86dc894b091d52f1cdb95df00b56e6e530360f942e7f3b3a81a871391f88080360f6fd3b17dd5270f8654465d85bf3ac5d5dc15b69145ac6da4d06f649448bd94eb3e99c9499a23775594b9ea51f7d543df37e02a49333aaa2ce27e31e8cc76f1f1570895c8e20e8545e940f4214e4aa2554cf7d861e5df885648afde23c2daf0e5d8d829ba3b3cbcfcc568144c6f53669a74d3d8e9464e1d9a6907dc31a6098e3be609226d5fb7e2fc0310a3749962cd08a81f366c0be0127bfd7aa9eb63757f55dd90dc0c7730036c9dae56a46321b872dab5a3944d557901443d8090e3a2c68445243effef45dd2244212d692cc822660148f3c0137e64e5c3dbe050e464acf04049a1c723dbf38fefbd0dfbdc5296717b60e1548d0564288408ae43a177503d14dda4477e86e020bad8032618fb29f9e7fbe5aad8e27cb2eb6fef5357627dca2c4823974d9a6bbfbcf6cfe4b4fdc4e6cdf3ad7e47ad442c63c92f783040f817e4bd7d3f98908c6e98209029d3e1c209e31b5f10558dff46a376b10675ab75260dd327b964d5d8af962f3a6808fde119fd117ec52d8161c5199d9292617e536a8f3b6bd5f65fd6d3910113be0681ae73e4cd18bdd4932c8b76db37f7773097ef4e93071667138f124161e212584ed26ff18019687683f8110b4adfb76a7c94dac7ecf29ed79587e36b841f9f1689ee419f6f38f01b994ef01b1448da6e9654714a9f68eb26f5777a746140354db55eeb295f1fd0b572c841a05c243de987db4bac4f60cd785070b0478ff3a72c3fd153a931aaededa64809df841688f707c94d3ae159b69a6913b362731be95396901e6d4ebe09e0ee38026292279ff29d6b8c7a7d8483ae6388d90c637e9ee68443591127a571f240aa13822a1810a909f132dc949935386513548c00fc71403a80513bc4646c65d17aa81ffac483269de81fb3c65b18e8a5d6f67f04ef8968a45e8a4ab9849f10a08bb952c2e9e035f873057b7995fbcb59d916cb6afd86411986e3e627f5ecf6ef6ad8c12084a5ed4834aa481b3a54a5327fbd791f964f0bd01709ada0d539ecf530f1eb48b5c6a8a4c5d54bc2dd98a7fe965100be88e23c3c9ffd90800c73cb387075f51e4ca3abcd0b3b7c056c9601b8de65eff600885fa1fab6004fe3ad23f252b5edc720d649f3c41677e8309933cbc98c2a0cee4350196dcb962ea16d35ff4fd68f43c4ff4d0087d0670f16e2e5d47e27c06f8d03f2890ee6ed5cd21288138b0de2bba6201637c25837b56e23f7d36064ec8551300cd302d82dc23e7117b517ffc37b5453d3bd04ad9a5e5cb206d191369feede7981ea84b5126145a2c52dd139bfaf7c1fc960bc4248c8f91c2f9c0e24dae3ecbdc1f8015620da8aea88cb9f7c8c7d707331b64094b70de059c2cf9f0008fc898da3ce6131bcc6e067d506f8995b0cb2f8cd5e3aa6441975cb98c3c8c1f2fe07bc485617a9a26380b12cd38a0c2d38b60013d32cee90989773875b4bb2d6d831a4f17d3dfcbb956ee219f9c9e9b0cfad6b05f47bc1a2f3eebb43abd5bd3a0d66366038356486b0d84c3381bbe4a173e75cd9a58bb86afe19c863ac79c337cf7811b4acebb03087e0cb54ad151e83e5ad768bced5ba364d294a62f9c3d39cd562d35fe78a6c89e1a35cc940dc40e8030d4838d5203cb98778d8db2a687973df64a7ea63db72fc59683ca13ed4f3c9c68dd117ec77fe3397e4f4054e07de9d3e4d63a40dbacd6aee39eb5cdab0914ff2f396c6b22bdeebb90fc2509c1f2c7d89eeb0adb2087b581b7a462b3c78befacc7faf2a8bee15f817dfc80dacfd779d4a951a9c2ce9855fc8b9866b247d1b84dcde3db4bb5c9323375e4b0b05ea55762bbef71999b7131586848e62f1330cd25b7d1eec26278518f6ea141599b64309461eb93b1cfd2962772ddab0749cc006efd30fdb260d80266349804ac9d3bca32956239979a21c387772e500d4216fe2847323dfc0e868b69c1de18332130514846e0d188584d60a1afb4c3cb4afb09abdacabc624fe0254ba7ad72793cc074cd7465e62a6a1b66a5bf4aed82a00f8bc37deb2a771344382123b4d102066956257ca805a26d3645b05a96d07915be999445e639a6665f183d81131bfbd3e9d16a0230069c88b58a0292b2678689be3a8d1dcc26db25fa3dab5ce8117bc7317acd9460099ae4101763eb9a4f5dee5bc26196a5f7b586e324e58e4e8227a4957fe7099a036b5127d6dae22e717aa8277d3e69ef0ae5a2e6e20f6e0465e01f13b085be821ec4e57e44bf85ebf1a0d32124fbb3eec1876c24243d843c59e78358fbf0dac1b65f3cfafe3a6157654d4d601f4"}, @INET_DIAG_REQ_BYTECODE={0x6c, 0x1, "33b4cfeaf9404c86f747132965a11cbda4fe257e37da4d1cc3d5c2f07301944726caf8d53ff71272e9bd01f40ce3fb8884b32d07ae59e3776d7b33342003ee5e0cb58423585a51ee38c83548935f932264ca62de8ffa263eea7a10ce564e2fe10ab284500c67ca64"}, @INET_DIAG_REQ_BYTECODE={0x4f, 0x1, "24d2efd22734db719cfd27a024e95bd58a0544df19020651e0e10ec20c79c62549255bfc42f26fc0ecaf3cde3aaa5ded11ad75985b32bef3fcbd83fa737c0e6c3526d820874440c2d30b98"}, @INET_DIAG_REQ_BYTECODE={0x65, 0x1, "94fd367d71728336d7ff00c1974ca2b7d6878a9b3c0b83d6c0ec08870a13acdb6450fb2bc16b6c1884d05ce4d6db1802fc220afc5eaee91c94ba6c9e4b60d7c186f3e742f2207c3e2a4c2db3514303aed87db9395e4deb73585852c531158bc9a1"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "9190260af47c2b8fffbda99ef7d385b394d379d99110cf33f17cafe8fdad51772d9f1b97d157cd99a60b96832769242c7cc1d0bc3b59275348fcd800e84362c20e2c536fe91de6dcd305eb24aed18dc1167bffb56aa8dee2492727aa4dfe5c6e3ea34afee6834c017741709fd4c7da3051d99e45a1bf2137598da76e378f038f26811294a9ba0484c175087b42c9394f4ee657c858d71774d226a9b132b904fe017022396df27028deb9342762a4e9da1f1a7fd0dc8305ff025ab03c581c54c8f6ee6cc54f88a4c2eedcda8eb4cfb74a51"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "3487354a7befe581293273922b053e8116ea3ff4a1092909cbfeb5fd33cba4009e311df9749a80bc4fddaf60b43be61e64e2adedcef8a854a104a3e0e249e094a252410081e1bc72fde923928785ad76c3"}, @INET_DIAG_REQ_BYTECODE={0x77, 0x1, "02264d2f9474c13b4e9302d9bf666d20a970b27408e4e5a1fa4311edfafe7f201eafdfd201155f5c1e7a23f9cfe3f9edc99f34003800aa778cda6bceda54b1fb583fe6ac1f7e3207873a5f83f6f5c32c222c1e89a2d38e341fb459be570a4cc78a2ace11fc2262ff093465cb288dcb4f3004b4"}, @INET_DIAG_REQ_BYTECODE={0x27, 0x1, "3c46c1f9d0e60d2ba0fb28114722c9c8fa2e23994d2968f5cabc2ddd8c4aa2a94e255e"}, @INET_DIAG_REQ_BYTECODE={0x45, 0x1, "7832cda76fad76b570647536c073c3b407d5cf1e66d4b0875a6055d2bf30a85434cbbd85316592e3aae87671137cad40a2fdb5bfca1846b874b8a794b1a603920f"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "fac832a8188f64146c25d4ffc5b825f9969e754cfddf90a68e92a48f30d2e6843849f688a2491def40519a5c48c6053ffd6b8093f9c4ba0c1dc80bc7ce15fb2cc4e5e688e33813f1af4005ddf6928bec1e38cd98c7b77ea15d72add9ca1179aa7d561bb6d702037385df0144f1d500a12d46f6061d5ee7589eedef46de2db68867b032be404eae8a99562181e54049dbdc3a50"}]}, 0x13ec}, 0x1, 0x0, 0x0, 0x80}, 0x40008040) (async, rerun: 64) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x5, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x440d0}, 0x4000) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001600)={r0, 0x1, 0x10, 0xe}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x24, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0xf}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x15}, 0x4000010) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x20, r2, 0x5d4b32e97b415118, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x66}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x4010) (async, rerun: 64) r4 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000001880)=0x7, 0x4) (async) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0xba13ef0b128f7bda}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x6c, 0xe, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001ac0)={r1, 0x58, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getpeername$packet(r1, &(0x7f0000001b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001b40)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001b80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001cc0)={'sit0\x00', &(0x7f0000001bc0)={'gre0\x00', 0x0, 0x700, 0x700, 0x8001, 0x3, {{0x2a, 0x4, 0x3, 0x2d, 0xa8, 0x64, 0x0, 0x1, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2a}, {[@ssrr={0x89, 0x7, 0xa4, [@multicast2]}, @lsrr={0x83, 0x7, 0x38, [@dev={0xac, 0x14, 0x14, 0x39}]}, @rr={0x7, 0x13, 0xfa, [@dev={0xac, 0x14, 0x14, 0x23}, @empty, @remote, @remote]}, @lsrr={0x83, 0x23, 0x5f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote, @remote, @local, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0x7d, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@rand_addr=0x64010102, 0x6}]}, @lsrr={0x83, 0x7, 0xa5, [@remote]}, @ssrr={0x89, 0x2b, 0xf7, [@rand_addr=0x64010101, @local, @local, @private=0x4, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @noop]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001d80)={'syztnl2\x00', &(0x7f0000001d00)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x6, 0x9, 0x25, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x7800, 0x1fd, 0xffffff80}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000001f40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x108, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000080}, 0xc0) (async, rerun: 64) sendmmsg$inet(r4, &(0x7f0000001f80), 0x0, 0xc040) (async, rerun: 64) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002000), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000002040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r10, &(0x7f0000002100)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x34, r11, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000}, 0x20080000) (async) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002180), r1) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x40524241}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x48, r13, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x53}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002300), r1) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000002540)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002500)={&(0x7f0000002340)={0x1a4, r14, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x75}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xf0, 0x3, 0x0, 0x1, [{0xec, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xe6, 0x1, "71217322c9f00bff2321b74fa39969b5697f10566c4a435b090c2b9f6b404938793fa422833af08f1e04772445903be0bc7be18f1cc62a206c2d00021c5cf11ded266b20aa47bd5c79d93267c227179edfd61daf3b8361f4f6f5888a44cf16cda20747e206a5dfe8f681e227088775e7e4a931d7836a95eb1c61327da51eac01636e2963bdd36c61ff334e83c85ad16e8916dd1d26b6c1fff74efc7513e6cbf06bd364fd45029d494130bec959966e22fafae7af873b030cdad016eabc8b07e7286dfe41baeff171fe9ce3ec37035a41dc91317d788a2abfd0a67e618142f0f47273"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x84, 0x3, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x6f, 0x1, "d304c69f4d5e86067422c31c9a06ac071e80963ccc38e4d321e8e1322d8edf41fb14802517a4cf2dd90bcd96a5fb1d9a38091b044506f50e57a5a1d3dd2064d37c5bb7fba284192dae7b21fba49229205dcda23548e5b404e167816301be860a855c50555b3af2a0ec6da8"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8}}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) (async) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000002580)={'pimreg0\x00', @local}) (async, rerun: 64) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) (rerun: 64) 17.585336232s ago: executing program 2 (id=5112): syz_emit_ethernet(0x6a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0000000000008100300086dd608bb78c00302f00fc000000000000000000000000000000ff0200000000000000000000000000010000883e0030907801070000ba66523bc5dea26a1ca732c6535999ae3164ec5ef5b99e18d31261edd793d61d8464a0e87807d9c52435be98d3f71a30807152d97874143fb67dbcc737f684d4d42cabafbcb653776696368b8639ab531f06fcc8f9d91cbacb8405c01de6660d8debee144446cb3319b68b7661ee3c4c2f378fa2c7704413225f0a23577f57a5a4d2bb140d8c96041cd7c4c9d5cd9ccb89e50f30bf20d23e6f19cb1e4b97764a8158feff"], 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}], 0x1, 0xc0) close(0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x7a44, 0x1700) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000300)={0x0, 0x4, 0xffffffffffffffff, 0x6}) sendto$l2tp6(r6, &(0x7f0000000000)="d6f52a5db0309e67a95843632a08ce51c6dfedc4a7ea79e2fb8eebf929d7c519c48adfdcd7c017573ee310ea907ab74391bf62af0df47a5823a8e3f48c54feb1d1d0e9761a912e4c5d4944aa99e16844b65915941693255e92d85a6180021b507358ec4c5e6c0e3b5bc2ff149eafc4d7b12076b709129e485cbd86a05257af34fb30280a29fcb390197cc831b74e0c", 0x8f, 0x800, 0x0, 0x0) 17.464047635s ago: executing program 3 (id=5113): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) sendmmsg$inet(r0, &(0x7f0000006f40)=[{{&(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000080)="1e2160", 0x3}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}], 0x18}}], 0x2, 0x2404c094) unshare(0x480) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x24, 0x1, 0x70bd26, 0x2, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r4, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x5, 0xc5}, &(0x7f00000004c0)=0x90) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f00000024c0)=[{&(0x7f0000000240)="0d850ecd33a42b86f08a86e396e0af7133653b85edbd976c2a338c922a667eae1c94c629c93d8fda25f9670238c3ed769485a3df4c091e882367ad5d9caedcd48a", 0x41}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x10, 0x7800, 0x8, 0xd4, {{0x1d, 0x4, 0x2, 0x10, 0x74, 0x64, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x1f, 0x8f, [@broadcast, @multicast2, @private=0xa010102, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast2]}, @noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x2c, 0x46, 0x0, 0x0, [0x8, 0x1, 0x8, 0xb8e9, 0xde07, 0x82a9, 0x8, 0xab1, 0x1, 0xd0]}, @generic={0x82, 0xe, "67b4032288ff311289c86de6"}, @noop, @noop]}}}}}) unshare(0x28000600) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x34, &(0x7f0000009000)=r9, 0x4) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in=@rand_addr=0x64010100, @in=@multicast2, 0x4e22, 0x0, 0x4e24, 0x1, 0xa, 0x20, 0x80, 0x2c, r8, 0xffffffffffffffff}, {0x8001, 0x8, 0x5, 0x6, 0x8, 0x9, 0x0, 0x2}, {0x100000001, 0xfff, 0x4, 0xffffffff}, 0xfffffe01, 0x6e6bbc, 0x2, 0x1, 0x2}, {{@in=@broadcast, 0x4d5, 0x32}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3502, 0x4, 0x1, 0x2, 0x7fffffff, 0x9, 0xe9d}}, 0xe8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) 17.463518331s ago: executing program 2 (id=5114): r0 = socket(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @broadcast}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1a00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="200000000000007f0000009b000000000000000000a9f45f5998364ee0"], 0x48) (async) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x24, 0x0, 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) (async) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) (async) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="07000000e31cab8537b87b5b3f8769bd01c8cd610e1dd96fcdd70be1a4e73e806582b04e", @ANYRES16=r7, @ANYBLOB="cd5328bd7000000000001f00000008009a000000000008009a0000000000"], 0x24}}, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r6) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r4) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x15c, r8, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x1}, 0x60009804) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x32a, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff3}, {0xb}, {0xe, 0xffe0}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newtfilter={0x54, 0x2c, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x14014) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a40)=@gettaction={0x68, 0x32, 0x211, 0x70bd28, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008010) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000940)=@gettaction={0x64, 0x32, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000010) (async) socket$netlink(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x28, r9, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000fcdbdf25010000f70b0001800600020067000000"], 0x20}}, 0x20000040) 17.426817476s ago: executing program 2 (id=5115): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000002c0)={0xffff, "7ab864"}, 0x6) (async) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000000)=0x1, 0x4) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xefffffffffffffff}]}, 0x24}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r4, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r3) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r7, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r8}]}, 0x3c}, 0x1, 0x620b}, 0x0) (async) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r9, &(0x7f0000000180)="a40141ad", 0x4, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x20000, @mcast2, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r9, 0x541b, &(0x7f00000000c0)) (async) recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)}, 0x40002000) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x50, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 17.368031434s ago: executing program 2 (id=5116): unshare(0x20000400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f00000001c0)=0x3, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) 17.260114369s ago: executing program 2 (id=5117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc1", @ANYBLOB="3baa7d57c5e2dc1040"], 0xfc}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="4647b4f310d036b398bd576db787e7b4202ee128ae26c942fc41e537802686e8", 0x20}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r3, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080)="15", &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r3}, 0x38) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x1401, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) r5 = openat$cgroup_int(r2, &(0x7f00000001c0)='cpu.max\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000100)=0x3b, 0x4) setsockopt$IP_VS_SO_SET_EDIT(r6, 0x0, 0x483, &(0x7f0000000000)={0x2, @rand_addr=0x64010101, 0x4e21, 0x0, 'lc\x00', 0x14, 0x0, 0x4a}, 0x2c) r7 = openat$cgroup_int(r2, &(0x7f0000000240)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000280)=0x5, 0x12) r8 = socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r9, @ANYBLOB="010000000000000000000100000004000180ac000280"], 0xc4}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x8, 0x10, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @mcast1, 0x20, 0xba08, 0xfffffc00, 0x1000}}) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r2) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x68, r10, 0x211ef5bba19cf913, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xb, @media='ib\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10000}, 0x48841) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r12 = accept4(r11, 0x0, 0x0, 0x0) sendmmsg$alg(r12, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="4bafcd7ebae5f0def07fcee3888dd79853b9ece6de358600db1551c185e070e028fa0818037da842b28d42ca81e281e87483f9ba845046d5af66abc540e0cd73a0036bf756d117a318fb", 0x4a}], 0x1}], 0x1, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) 16.6179176s ago: executing program 3 (id=5118): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 16.576583567s ago: executing program 3 (id=5119): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x4c}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast2, @in=@multicast2, 0x4e21, 0x1000, 0x4e24, 0x4, 0x2, 0x0, 0xa0, 0x3a, r3}, {0x9a3, 0x8, 0x9, 0x6, 0x1, 0x10001, 0xa451, 0x200000000}, {0x5, 0x8, 0x9, 0xfff}, 0x5, 0x6e6bb6, 0x1, 0x1, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x6c}, 0x2, @in=@remote, 0x3500, 0x1, 0x1, 0x9, 0x4, 0x10000, 0x400}}, 0xe8) 16.432294109s ago: executing program 3 (id=5120): bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/cgroup\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x6, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000000}, 0x44010) r2 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001"], 0xb0}}, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x8005}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000a000000000008000b002417"], 0x44}, 0x1, 0x2000000000000000, 0x0, 0x8044085}, 0x0) 15.605892694s ago: executing program 3 (id=5121): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) (async) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) accept$ax25(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) (async) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000140)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d7729d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7187e45a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f00000000", 0xe5}, {&(0x7f0000000cc0)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1c", 0xdc}, {&(0x7f00000003c0)="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", 0x14f}, {&(0x7f0000000700)="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", 0xfe}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb32e16330e0d7d520f4887da0d6f356f8ef230b9b237409", 0x6a}, {&(0x7f0000000300)="77729a", 0x3}], 0x7, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}}], 0x10) (async) bind$can_raw(r4, &(0x7f0000000040), 0x9) (async) close(r4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 15.563397166s ago: executing program 3 (id=5122): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x8) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x7c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="00001aa802010600ffffff7f06040325600706060009aaaaaa7d852d7c6eaf4acf4b96abc5868100"/54], 0x36) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001800)=@nat={'nat\x00', 0x670, 0x5, 0xb68, 0x8b0, 0xa00, 0xffffffff, 0x0, 0xa00, 0xad0, 0xad0, 0xffffffff, 0xad0, 0xad0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'macsec0\x00', {0xff}, {}, 0x16, 0x1}, 0x0, 0x878, 0x8b0, 0x48, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x400, 0x1}, {0x0, 0x1}, {0x5, 0x31ad6b86d1e81068}, {0x92, 0x3}, {0x1d3, 0x2}, {0x3}, {0x1, 0x2}, {}, {0x5, 0x1}, {0x80000001, 0x1}, {0xffffffff, 0x3}], [{0x3, 0x9}, {0x6, 0x1}, {0x7, 0x5}, {0x7, 0x7}, {0x200, 0x6}, {0x420, 0x89f}, {0x3, 0xffffffff}, {0x4, 0x1}, {0x2, 0x6}, {0x0, 0x9}, {0x2, 0x7}], 0x6, 0x3}, {[{0x5}, {0x40, 0x2}, {0xf37b, 0x3}, {0x6, 0x3}, {0x9, 0x2}, {0xd175}, {0xb, 0x3}, {0x80000000, 0x3}, {0x7, 0x1}, {0x80000000, 0x3}, {0x9, 0x1}], [{0xfffff915, 0x7}, {0x4, 0x7fff}, {0x7, 0x6}, {0x5, 0x1}, {0x7, 0x3}, {0x9, 0x3}, {0xfffffffe, 0x6}, {0x8, 0x3}, {0x5fd42ece, 0x7}, {0x1, 0x6}, {0xfffffff9, 0xe}], 0x4, 0x4}, {[{0x1000, 0x2}, {0x80000001}, {0x4, 0x2}, {0x1}, {0x2, 0x1}, {0x8001, 0x1}, {0x0, 0x2}, {0x80000001, 0x3}, {0x4, 0x3}, {0x7, 0x6}, {0x0, 0x1}], [{0x7f, 0x4}, {0xa, 0x6}, {0x80, 0x400}, {0x6, 0xbcdd}, {0xe, 0x40}, {0x9016, 0x1}, {0x0, 0x7ff}, {0x40, 0x1}, {0x5, 0x7}, {0x7, 0x7f}, {0x7, 0x5}], 0x9, 0x2}, {[{0xdb, 0x1}, {0x4}, {0xc, 0x2}, {0xfd0f, 0x1}, {0x4, 0x1}, {0x85bf, 0x2}, {0x5, 0x3}, {0x8}, {0x1000}, {0x6, 0x3}, {0x9e20, 0x2}], [{0x9, 0x4}, {0xfffffff8, 0x1}, {0x3ff, 0x800}, {0x3, 0xd2}, {0x9, 0x400}, {0x6, 0xcf7}, {0x3, 0x7}, {0x5, 0x3}, {0x275, 0x3}, {0x9, 0x4}, {0x1, 0x59a}], 0x7, 0x9}, {[{0x8, 0x1}, {0x1, 0x26cf73c538c095eb}, {0xff}, {0x8, 0x3}, {0x100, 0x2}, {0x7f}, {0x8, 0x1}, {0x821a, 0x1}, {0x10, 0x1}, {0x39c}, {0x2, 0x3}], [{0x4c2a, 0xffff}, {0x1, 0x4}, {0x0, 0x9}, {0x9, 0x3ff}, {0x8, 0x3c}, {0x4, 0x3}, {0x80000001, 0x7}, {0x69, 0x2}, {0xfe4, 0x944a}, {0x3}, {0x49, 0xe8b7}], 0x9, 0x3}, {[{0xfffffffc, 0x2}, {0x98}, {0xea}, {0x970c, 0x2}, {0xf}, {0x8001, 0x1}, {0x9}, {0x8000, 0x3}, {0x3}, {0x9, 0x1}, {0x5}], [{0xb, 0x247}, {0x1, 0x9}, {}, {0x581, 0x3}, {0x2}, {0x4, 0x33}, {0x6, 0x7}, {0x4, 0x9}, {0x6, 0x7}, {0x7ff, 0xffffffff}, {0x8, 0x401}], 0x6, 0x1}, {[{0x89, 0x2}, {0xfcd, 0x3}, {0x2, 0x2}, {0xdd, 0x1}, {0x5ec6, 0x2}, {0xfffffffd, 0x3}, {0x7f, 0x2}, {0x8}, {0x7fff, 0x1}, {0x8, 0x1}, {0x4, 0x1}], [{0x1, 0x81}, {0x7fff, 0x8}, {0x0, 0x7fffffff}, {0x4, 0x1000}, {0x0, 0x1}, {0x3c, 0x80000000}, {0xff, 0x2}, {0x6, 0xe4}, {0x1cc43331, 0x80000000}, {0x8, 0x3}, {0x6bf9, 0x7}], 0xf, 0x7}, {[{0xe, 0x2}, {0x9, 0x2}, {0x9, 0x1}, {0x0, 0x1}, {0x3, 0x2}, {0x4de7, 0x3}, {0x3, 0x3}, {0x56}, {0x7, 0x3}, {0xdc6, 0x2}, {0x5, 0x2}], [{0x200000, 0x9}, {0xffff, 0xca}, {0x1, 0x4}, {0x9, 0xd3}, {0x7fffffff}, {0x6, 0x7}, {0x1400, 0x1}, {0x8, 0x2}, {0x7, 0x9}, {0x6, 0xa37}, {0x9, 0x6}], 0x7, 0x3}, {[{0xffff, 0x3}, {0x6, 0x2}, {}, {0x3ff, 0x2}, {0x9b09, 0x2}, {0x80000001, 0x1}, {0xb, 0x3}, {0x4}, {0x46d1ae2e, 0x1}, {0x0, 0x2}, {0x8, 0x3}], [{0x6, 0x83}, {0x1, 0x8001}, {0x4, 0x80}, {0x4, 0x4}, {0xdd, 0x8}, {0x10000, 0xffe}, {0x8, 0x3}, {0x3, 0x4}, {0x45db, 0x6}, {0x200, 0x9}, {0x82, 0x7}], 0x6, 0x6}, {[{0x2, 0x2}, {0x2a, 0x2}, {0x8, 0x2}, {0x6, 0x1}, {0xc82, 0x3}, {0x4, 0x3}, {0x4}, {0x10001, 0x3}, {0xaa31, 0x1}, {0x9, 0x2}, {0x2, 0x1}], [{0x2a, 0x3}, {0x1, 0x9e}, {}, {0x5, 0xfffff001}, {0x5, 0x8}, {0x8, 0x2}, {0x10, 0x7}, {0xff, 0x5}, {0x1, 0x400}, {0x4f, 0xf2b2}, {0x6, 0x1}], 0x6, 0xfd}, {[{0x48}, {0x7, 0x3}, {0xffe, 0x1}, {0x2, 0x1}, {0x6}, {0x40, 0x1}, {0x5, 0x2}, {0x7ff, 0x3}, {0x7, 0x2}, {0x7, 0x2}, {0x51}], [{0x7ec7, 0xf}, {0x3, 0x954}, {0xbe}, {0x57, 0x663}, {0x2, 0x3}, {0x8, 0x9}, {0xd, 0x2}, {0x40, 0x1000}, {0x1101, 0x9}, {0x800, 0x8}, {0x5, 0x92}], 0xb, 0x1}], 0x9}}, @common=@icmp={{0x28}, {0xd, 'qt'}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @broadcast, @multicast2, @gre_key=0x3, @icmp_id=0x66}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0xff, 0xff000000, 'veth1\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x11, 0x2, 0x59}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @rand_addr=0x64010100, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@multicast2, @private=0xa010102, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @port=0x4e23, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @rand_addr=0x64010100, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xbc8) 6.114765952s ago: executing program 33 (id=5051): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)}, 0x40000040) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="f0000000100001000000000000000008fe8000000000000000080000000000aa00000000292938887af48b000000000000ffff0a0101004e2300000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1e01010000000000000000000000008c000000000000000000000000000000000000000000000000000000000000000400000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xf0}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x7}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x1}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xc00c050) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a4de6b62e001000"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{r13}, &(0x7f0000000300), &(0x7f0000000440), 0x2}, 0x20) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r12], 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r15, 0x0) sendfile(r14, r15, 0x0, 0x8) 3.088981542s ago: executing program 34 (id=5105): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xaa}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2219}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)={0x1e0, r1, 0x100, 0x70bd2b, 0x25dbdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8000, 0x0) read$rfkill(r2, 0x0, 0x0) 2.0636835s ago: executing program 35 (id=5110): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000080)) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000001c0)={0x7fffffff}, 0x10) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008104e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x44004) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@can_delroute={0x14c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x47, 0x0, 0x0, 0x0, 0x0, "e520043f593ec7e217fca22551bf518a103c21127694a923126b01f7576fd01d5a58f799e22be3ca84f32a95d37609e21c24a2f5467ea3232437f6ea56885246fe904c518de7c87f4ef7e4be8881f8c68a68e6be8752bee10849efee53f02ad9e57b13cce241c2bce7cedb98c7a0864bc99d99d59276b74ecc359020d8adcbed21b54d64b468164ea88c84fc2d5bc5716a91216467534baae2ef35eaf299241096748df577f56e4f2566ae4e9a80bba4b2fb2cbdf7c58715e6316ebe8e916728b692387a6fc8a2b06ab352344a4dc169092066fa74315e4f44c059c7e187cff96c7798cd7223d4a6df8c3062d84690b79c8ecf0c5c6982d322ffcd66a866d2fc", 0x0, "56e89243dad36ae9dc7283425f986bbfe5349c4e"}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "80deae486c1a0221"}, 0x6}}]}, 0x14c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x1, 0xfff, 0x5, @dev={0xfe, 0x80, '\x00', 0xf}, @empty, 0x40, 0x0, 0x19, 0x801}}) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket(0x400000000010, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r13 = socket$unix(0x1, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r14, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r12}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0xffffffffffffffff, {0x2, 0x0, 0x4}, 0xfe}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) 2.034311102s ago: executing program 36 (id=5117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc1", @ANYBLOB="3baa7d57c5e2dc1040"], 0xfc}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="4647b4f310d036b398bd576db787e7b4202ee128ae26c942fc41e537802686e8", 0x20}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r3, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080)="15", &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r3}, 0x38) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x1401, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) r5 = openat$cgroup_int(r2, &(0x7f00000001c0)='cpu.max\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000100)=0x3b, 0x4) setsockopt$IP_VS_SO_SET_EDIT(r6, 0x0, 0x483, &(0x7f0000000000)={0x2, @rand_addr=0x64010101, 0x4e21, 0x0, 'lc\x00', 0x14, 0x0, 0x4a}, 0x2c) r7 = openat$cgroup_int(r2, &(0x7f0000000240)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000280)=0x5, 0x12) r8 = socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r9, @ANYBLOB="010000000000000000000100000004000180ac000280"], 0xc4}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x8, 0x10, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @mcast1, 0x20, 0xba08, 0xfffffc00, 0x1000}}) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r2) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x68, r10, 0x211ef5bba19cf913, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xb, @media='ib\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10000}, 0x48841) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r12 = accept4(r11, 0x0, 0x0, 0x0) sendmmsg$alg(r12, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="4bafcd7ebae5f0def07fcee3888dd79853b9ece6de358600db1551c185e070e028fa0818037da842b28d42ca81e281e87483f9ba845046d5af66abc540e0cd73a0036bf756d117a318fb", 0x4a}], 0x1}], 0x1, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) 0s ago: executing program 37 (id=5122): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x8) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x7c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="00001aa802010600ffffff7f06040325600706060009aaaaaa7d852d7c6eaf4acf4b96abc5868100"/54], 0x36) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001800)=@nat={'nat\x00', 0x670, 0x5, 0xb68, 0x8b0, 0xa00, 0xffffffff, 0x0, 0xa00, 0xad0, 0xad0, 0xffffffff, 0xad0, 0xad0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'macsec0\x00', {0xff}, {}, 0x16, 0x1}, 0x0, 0x878, 0x8b0, 0x48, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x400, 0x1}, {0x0, 0x1}, {0x5, 0x31ad6b86d1e81068}, {0x92, 0x3}, {0x1d3, 0x2}, {0x3}, {0x1, 0x2}, {}, {0x5, 0x1}, {0x80000001, 0x1}, {0xffffffff, 0x3}], [{0x3, 0x9}, {0x6, 0x1}, {0x7, 0x5}, {0x7, 0x7}, {0x200, 0x6}, {0x420, 0x89f}, {0x3, 0xffffffff}, {0x4, 0x1}, {0x2, 0x6}, {0x0, 0x9}, {0x2, 0x7}], 0x6, 0x3}, {[{0x5}, {0x40, 0x2}, {0xf37b, 0x3}, {0x6, 0x3}, {0x9, 0x2}, {0xd175}, {0xb, 0x3}, {0x80000000, 0x3}, {0x7, 0x1}, {0x80000000, 0x3}, {0x9, 0x1}], [{0xfffff915, 0x7}, {0x4, 0x7fff}, {0x7, 0x6}, {0x5, 0x1}, {0x7, 0x3}, {0x9, 0x3}, {0xfffffffe, 0x6}, {0x8, 0x3}, {0x5fd42ece, 0x7}, {0x1, 0x6}, {0xfffffff9, 0xe}], 0x4, 0x4}, {[{0x1000, 0x2}, {0x80000001}, {0x4, 0x2}, {0x1}, {0x2, 0x1}, {0x8001, 0x1}, {0x0, 0x2}, {0x80000001, 0x3}, {0x4, 0x3}, {0x7, 0x6}, {0x0, 0x1}], [{0x7f, 0x4}, {0xa, 0x6}, {0x80, 0x400}, {0x6, 0xbcdd}, {0xe, 0x40}, {0x9016, 0x1}, {0x0, 0x7ff}, {0x40, 0x1}, {0x5, 0x7}, {0x7, 0x7f}, {0x7, 0x5}], 0x9, 0x2}, {[{0xdb, 0x1}, {0x4}, {0xc, 0x2}, {0xfd0f, 0x1}, {0x4, 0x1}, {0x85bf, 0x2}, {0x5, 0x3}, {0x8}, {0x1000}, {0x6, 0x3}, {0x9e20, 0x2}], [{0x9, 0x4}, {0xfffffff8, 0x1}, {0x3ff, 0x800}, {0x3, 0xd2}, {0x9, 0x400}, {0x6, 0xcf7}, {0x3, 0x7}, {0x5, 0x3}, {0x275, 0x3}, {0x9, 0x4}, {0x1, 0x59a}], 0x7, 0x9}, {[{0x8, 0x1}, {0x1, 0x26cf73c538c095eb}, {0xff}, {0x8, 0x3}, {0x100, 0x2}, {0x7f}, {0x8, 0x1}, {0x821a, 0x1}, {0x10, 0x1}, {0x39c}, {0x2, 0x3}], [{0x4c2a, 0xffff}, {0x1, 0x4}, {0x0, 0x9}, {0x9, 0x3ff}, {0x8, 0x3c}, {0x4, 0x3}, {0x80000001, 0x7}, {0x69, 0x2}, {0xfe4, 0x944a}, {0x3}, {0x49, 0xe8b7}], 0x9, 0x3}, {[{0xfffffffc, 0x2}, {0x98}, {0xea}, {0x970c, 0x2}, {0xf}, {0x8001, 0x1}, {0x9}, {0x8000, 0x3}, {0x3}, {0x9, 0x1}, {0x5}], [{0xb, 0x247}, {0x1, 0x9}, {}, {0x581, 0x3}, {0x2}, {0x4, 0x33}, {0x6, 0x7}, {0x4, 0x9}, {0x6, 0x7}, {0x7ff, 0xffffffff}, {0x8, 0x401}], 0x6, 0x1}, {[{0x89, 0x2}, {0xfcd, 0x3}, {0x2, 0x2}, {0xdd, 0x1}, {0x5ec6, 0x2}, {0xfffffffd, 0x3}, {0x7f, 0x2}, {0x8}, {0x7fff, 0x1}, {0x8, 0x1}, {0x4, 0x1}], [{0x1, 0x81}, {0x7fff, 0x8}, {0x0, 0x7fffffff}, {0x4, 0x1000}, {0x0, 0x1}, {0x3c, 0x80000000}, {0xff, 0x2}, {0x6, 0xe4}, {0x1cc43331, 0x80000000}, {0x8, 0x3}, {0x6bf9, 0x7}], 0xf, 0x7}, {[{0xe, 0x2}, {0x9, 0x2}, {0x9, 0x1}, {0x0, 0x1}, {0x3, 0x2}, {0x4de7, 0x3}, {0x3, 0x3}, {0x56}, {0x7, 0x3}, {0xdc6, 0x2}, {0x5, 0x2}], [{0x200000, 0x9}, {0xffff, 0xca}, {0x1, 0x4}, {0x9, 0xd3}, {0x7fffffff}, {0x6, 0x7}, {0x1400, 0x1}, {0x8, 0x2}, {0x7, 0x9}, {0x6, 0xa37}, {0x9, 0x6}], 0x7, 0x3}, {[{0xffff, 0x3}, {0x6, 0x2}, {}, {0x3ff, 0x2}, {0x9b09, 0x2}, {0x80000001, 0x1}, {0xb, 0x3}, {0x4}, {0x46d1ae2e, 0x1}, {0x0, 0x2}, {0x8, 0x3}], [{0x6, 0x83}, {0x1, 0x8001}, {0x4, 0x80}, {0x4, 0x4}, {0xdd, 0x8}, {0x10000, 0xffe}, {0x8, 0x3}, {0x3, 0x4}, {0x45db, 0x6}, {0x200, 0x9}, {0x82, 0x7}], 0x6, 0x6}, {[{0x2, 0x2}, {0x2a, 0x2}, {0x8, 0x2}, {0x6, 0x1}, {0xc82, 0x3}, {0x4, 0x3}, {0x4}, {0x10001, 0x3}, {0xaa31, 0x1}, {0x9, 0x2}, {0x2, 0x1}], [{0x2a, 0x3}, {0x1, 0x9e}, {}, {0x5, 0xfffff001}, {0x5, 0x8}, {0x8, 0x2}, {0x10, 0x7}, {0xff, 0x5}, {0x1, 0x400}, {0x4f, 0xf2b2}, {0x6, 0x1}], 0x6, 0xfd}, {[{0x48}, {0x7, 0x3}, {0xffe, 0x1}, {0x2, 0x1}, {0x6}, {0x40, 0x1}, {0x5, 0x2}, {0x7ff, 0x3}, {0x7, 0x2}, {0x7, 0x2}, {0x51}], [{0x7ec7, 0xf}, {0x3, 0x954}, {0xbe}, {0x57, 0x663}, {0x2, 0x3}, {0x8, 0x9}, {0xd, 0x2}, {0x40, 0x1000}, {0x1101, 0x9}, {0x800, 0x8}, {0x5, 0x92}], 0xb, 0x1}], 0x9}}, @common=@icmp={{0x28}, {0xd, 'qt'}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @broadcast, @multicast2, @gre_key=0x3, @icmp_id=0x66}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0xff, 0xff000000, 'veth1\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x11, 0x2, 0x59}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @rand_addr=0x64010100, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@multicast2, @private=0xa010102, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @port=0x4e23, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @rand_addr=0x64010100, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xbc8) kernel console output (not intermixed with test programs): idge_slave_1: entered allmulticast mode [ 312.716057][T15940] bridge_slave_1: entered promiscuous mode [ 312.789878][T15940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.845241][T15940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.986801][T15940] team0: Port device team_slave_0 added [ 313.016672][T15940] team0: Port device team_slave_1 added [ 313.204949][T15940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.222679][T15940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.264543][T15940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.291325][T16135] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 313.337667][T15940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.351531][T15940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.379678][T15940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.444711][ T7426] hsr_slave_0: left promiscuous mode [ 313.467476][ T7426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.477407][ T7426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.489291][ T7426] batman_adv: batadv0: Removing interface: dummy0 [ 313.633227][T16149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3014'. [ 314.154584][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 314.272617][T16149] : entered promiscuous mode [ 314.278510][T16150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3016'. [ 314.304101][ T5832] Bluetooth: hci0: command tx timeout [ 314.404316][T16157] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3018'. [ 314.427832][T15940] hsr_slave_0: entered promiscuous mode [ 314.435120][T15940] hsr_slave_1: entered promiscuous mode [ 314.448625][T15940] debugfs: 'hsr0' already exists in 'hsr' [ 314.462895][T15940] Cannot create hsr debugfs directory [ 314.637769][T16162] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 314.658623][T16162] bond6 (unregistering): Released all slaves [ 314.710471][T16161] tipc: Invalid UDP bearer configuration [ 314.710531][T16161] tipc: Enabling of bearer rejected, failed to enable media [ 314.776545][T16163] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 314.799923][T16163] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 314.820604][T16163] gretap2: entered promiscuous mode [ 314.831789][T16163] gretap2: entered allmulticast mode [ 314.849461][T16183] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3023'. [ 314.884308][T16181] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3023'. [ 314.925598][T16182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3024'. [ 315.071240][T16186] xt_hashlimit: size too large, truncated to 1048576 [ 315.129459][ T7426] IPVS: stop unused estimator thread 0... [ 315.304388][T16192] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3027'. [ 315.774213][T16218] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3036'. [ 315.785596][T16218] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3036'. [ 315.808339][T16222] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3037'. [ 315.917193][T15940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 315.949919][T15940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 315.972044][T15940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 315.985468][T15940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 316.027772][T16232] bond0: entered allmulticast mode [ 316.034357][T16232] bond_slave_0: entered allmulticast mode [ 316.040202][T16232] bond_slave_1: entered allmulticast mode [ 316.047936][T16232] bridge_slave_1: entered allmulticast mode [ 316.055251][T16232] team0: entered allmulticast mode [ 316.060511][T16232] team_slave_0: entered allmulticast mode [ 316.068236][T16232] team_slave_1: entered allmulticast mode [ 316.210282][T15940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.241140][T15940] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.256315][T11326] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.263614][T11326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.304518][T11326] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.311835][T11326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.391726][ T5832] Bluetooth: hci0: command tx timeout [ 316.724934][T16272] tunl0: entered promiscuous mode [ 316.730316][T16272] netlink: 'syz.2.3048': attribute type 3 has an invalid length. [ 316.880533][T15940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.018143][T15940] veth0_vlan: entered promiscuous mode [ 317.038807][T15940] veth1_vlan: entered promiscuous mode [ 317.118266][T15940] veth0_macvtap: entered promiscuous mode [ 317.130624][T15940] veth1_macvtap: entered promiscuous mode [ 317.207048][T15940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.236237][T15940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.251316][T11323] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.281880][T11323] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.294551][T16297] x_tables: duplicate underflow at hook 1 [ 317.327526][T11323] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.336904][T11323] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.355575][T16300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.400870][T16301] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 317.417028][T16301] bond6 (unregistering): Released all slaves [ 317.603789][ T1031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.622685][ T1031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.693413][T16311] netlink: 'syz.5.3059': attribute type 7 has an invalid length. [ 317.700724][T11323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.710473][T11323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.944452][T16324] xt_CT: You must specify a L4 protocol and not use inversions on it [ 318.214531][T16333] netlink: 'syz.1.3066': attribute type 13 has an invalid length. [ 318.421677][T16333] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 318.713287][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 318.728548][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 318.751768][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 318.760641][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 318.769177][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 318.842927][T16350] Z7nz>RA speed is unknown, defaulting to 1000 [ 318.858926][T16353] tipc: Enabled bearer , priority 0 [ 318.899554][T16360] __nla_validate_parse: 8 callbacks suppressed [ 318.899575][T16360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3074'. [ 318.952257][T16351] tipc: Disabling bearer [ 318.965850][T16360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3074'. [ 318.982098][T16360] netlink: 'syz.0.3074': attribute type 6 has an invalid length. [ 319.015679][T11326] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.041667][T11326] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.078643][T11326] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.098632][T11326] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.222256][T16367] syzkaller0: entered promiscuous mode [ 319.227807][T16367] syzkaller0: entered allmulticast mode [ 319.256482][T16376] netlink: 'syz.5.3079': attribute type 1 has an invalid length. [ 319.267662][T16378] netlink: 'syz.0.3078': attribute type 10 has an invalid length. [ 319.268092][T16376] netlink: 'syz.5.3079': attribute type 11 has an invalid length. [ 319.286202][ T9463] IPVS: starting estimator thread 0... [ 319.303356][T16376] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3079'. [ 319.311095][T16378] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3078'. [ 319.315327][T16381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3079'. [ 319.348056][T16378] batadv0: entered promiscuous mode [ 319.354215][T16378] batadv0: entered allmulticast mode [ 319.360322][T16378] bridge0: port 3(batadv0) entered blocking state [ 319.368597][T16378] bridge0: port 3(batadv0) entered disabled state [ 319.379523][T16378] bridge0: port 3(batadv0) entered blocking state [ 319.386199][T16378] bridge0: port 3(batadv0) entered forwarding state [ 319.412533][T16382] IPVS: using max 33 ests per chain, 79200 per kthread [ 319.494333][ T7423] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 319.503893][ T7423] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 319.561669][T16389] netlink: 'syz.0.3082': attribute type 2 has an invalid length. [ 319.593616][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3083'. [ 319.604204][T16391] netlink: 'syz.5.3083': attribute type 3 has an invalid length. [ 319.625544][T16394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.861741][ T5832] Bluetooth: hci5: command tx timeout [ 320.904538][T16389] 9: entered promiscuous mode [ 321.203322][T16350] chnl_net:caif_netlink_parms(): no params data found [ 321.238047][T16416] sch_fq: defrate 0 ignored. [ 321.252355][T16413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3089'. [ 321.286312][T16413] bond9: left promiscuous mode [ 321.291469][T16413] bridge0: port 1(bond9) entered disabled state [ 321.306252][T16421] netlink: 'syz.1.3089': attribute type 1 has an invalid length. [ 321.324254][T16421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3089'. [ 321.338868][T16421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3089'. [ 321.401902][T16413] bond6: (slave bridge0): Releasing backup interface [ 321.419960][T16413] bridge0 (unregistering): left promiscuous mode [ 321.594682][T16441] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 321.759542][T16350] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.800633][T16350] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.838962][T16350] bridge_slave_0: entered allmulticast mode [ 321.883992][T16350] bridge_slave_0: entered promiscuous mode [ 321.930950][T16350] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.955966][T16350] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.972760][T16350] bridge_slave_1: entered allmulticast mode [ 322.002532][T16350] bridge_slave_1: entered promiscuous mode [ 322.079734][T16468] tap0: tun_chr_ioctl cmd 1074025677 [ 322.099429][T16468] tap0: linktype set to 65534 [ 322.159269][T16350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.198882][T16350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.327457][T16485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3100'. [ 322.333817][T16350] team0: Port device team_slave_0 added [ 322.386649][T16350] team0: Port device team_slave_1 added [ 322.519593][T16350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.539924][T16350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.568564][T16350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.609166][T16350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.622344][T16350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.675520][T16350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.811001][T16350] hsr_slave_0: entered promiscuous mode [ 322.820260][T16350] hsr_slave_1: entered promiscuous mode [ 322.828491][T16350] debugfs: 'hsr0' already exists in 'hsr' [ 322.835171][T16350] Cannot create hsr debugfs directory [ 322.871333][T16512] openvswitch: netlink: Key type 31 is not supported [ 322.889891][T16513] netlink: 'syz.2.3109': attribute type 3 has an invalid length. [ 323.080705][ T5832] Bluetooth: hci5: command tx timeout [ 323.424315][T16535] netlink: 'syz.1.3116': attribute type 1 has an invalid length. [ 323.432303][T16535] netlink: 'syz.1.3116': attribute type 2 has an invalid length. [ 323.664912][T16350] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.726020][T16545] bond0: left allmulticast mode [ 323.731103][T16545] bond_slave_0: left allmulticast mode [ 323.747588][T16545] bond_slave_1: left allmulticast mode [ 323.759494][T16545] bridge_slave_1: left allmulticast mode [ 323.765597][T16545] team0: left allmulticast mode [ 323.773380][T16545] team_slave_0: left allmulticast mode [ 323.783066][T16545] team_slave_1: left allmulticast mode [ 323.914000][T16350] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.949282][T16542] __nla_validate_parse: 45 callbacks suppressed [ 323.949301][T16542] netlink: 45 bytes leftover after parsing attributes in process `syz.5.3118'. [ 323.997772][T16542] netlink: 45 bytes leftover after parsing attributes in process `syz.5.3118'. [ 324.066758][T16350] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.102627][T16542] netlink: 45 bytes leftover after parsing attributes in process `syz.5.3118'. [ 324.113101][T16542] netlink: 45 bytes leftover after parsing attributes in process `syz.5.3118'. [ 324.124150][T16542] netlink: 45 bytes leftover after parsing attributes in process `syz.5.3118'. [ 324.255785][T16577] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3128'. [ 324.266734][T16542] netlink: 45 bytes leftover after parsing attributes in process `syz.5.3118'. [ 324.277644][T16578] netlink: 'syz.1.3127': attribute type 29 has an invalid length. [ 324.287860][T16542] netlink: 45 bytes leftover after parsing attributes in process `syz.5.3118'. [ 324.314154][T16582] netlink: 'syz.1.3127': attribute type 29 has an invalid length. [ 324.510892][T16350] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 324.521203][T16593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3130'. [ 324.527764][T16350] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 324.547555][T16594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3130'. [ 324.560272][T16350] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 324.575530][T16350] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 324.664397][T16604] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 324.672485][T16604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.804307][T16350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.854900][T16350] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.887917][T11326] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.895807][T11326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.927764][ T7426] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.935000][ T7426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.101672][ T5832] Bluetooth: hci5: command tx timeout [ 325.233344][T16624] syzkaller0: entered promiscuous mode [ 325.250778][T16624] syzkaller0: entered allmulticast mode [ 325.292206][T16626] netlink: 'syz.0.3140': attribute type 4 has an invalid length. [ 325.325458][T16626] netlink: 'syz.0.3140': attribute type 4 has an invalid length. [ 325.327268][T16634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.496530][T16350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.520705][T16639] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 325.561811][T16641] bond11: option arp_all_targets: invalid value (18446744073709551613) [ 325.573542][T16641] bond11 (unregistering): Released all slaves [ 325.625969][T16642] bond11: option arp_all_targets: invalid value (18446744073709551613) [ 325.638312][T16642] bond11 (unregistering): Released all slaves [ 325.766480][T16350] veth0_vlan: entered promiscuous mode [ 325.800001][T16350] veth1_vlan: entered promiscuous mode [ 325.879280][T16350] veth0_macvtap: entered promiscuous mode [ 325.910467][T16350] veth1_macvtap: entered promiscuous mode [ 326.006264][T16350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.091200][T16350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.135780][ T1031] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.147757][ T1031] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.168577][ T1031] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.204294][ T1031] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.220858][T16670] netlink: 'syz.0.3153': attribute type 12 has an invalid length. [ 326.234119][T16670] netlink: 'syz.0.3153': attribute type 11 has an invalid length. [ 326.324646][T16676] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 326.332465][T16677] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 326.442804][ T7426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.460001][ T7426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.537375][ T7426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.555437][ T7426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.898819][T16693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.906529][T16693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.934898][T16693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.959005][T16693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.183158][ T5832] Bluetooth: hci5: command tx timeout [ 327.486063][T11322] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.505634][T11322] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.551204][T16713] netlink: 'syz.1.3167': attribute type 1 has an invalid length. [ 327.586333][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 327.596593][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 327.611759][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 327.622267][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 327.630197][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 327.669516][T16713] 8021q: adding VLAN 0 to HW filter on device bond11 [ 327.701128][T11322] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.712530][T11322] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.764093][T16714] Z7nz>RA speed is unknown, defaulting to 1000 [ 327.853737][T11322] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.887427][T11322] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.007280][T11322] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.018809][T11322] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.974772][T11322] bond4 (unregistering): (slave gretap2): Releasing active interface [ 329.020823][T11322] dvmrp0 (unregistering): left allmulticast mode [ 329.538553][T11322] bond0 (unregistering): Released all slaves [ 329.635503][T11322] bond1 (unregistering): Released all slaves [ 329.662567][ T5832] Bluetooth: hci1: command tx timeout [ 329.738452][T11322] bond2 (unregistering): Released all slaves [ 329.755018][T11322] bond3 (unregistering): Released all slaves [ 329.770808][T11322] bond4 (unregistering): Released all slaves [ 329.865873][T11322] bond5 (unregistering): Released all slaves [ 329.880202][T11322] bond6 (unregistering): Released all slaves [ 329.895324][T11322] bond7 (unregistering): Released all slaves [ 329.909784][T11322] bond8 (unregistering): Released all slaves [ 329.979469][ T7423] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.009141][T16780] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 330.123005][ T7423] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.149690][ T7423] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.159305][T11322] 9: left promiscuous mode [ 330.224709][ T7423] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.295818][T16714] chnl_net:caif_netlink_parms(): no params data found [ 330.346447][T16799] __nla_validate_parse: 10 callbacks suppressed [ 330.346469][T16799] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3189'. [ 330.373797][T16799] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3189'. [ 330.436528][T11322] tipc: Disabling bearer [ 330.457893][T11322] tipc: Left network mode [ 330.910386][T16831] Cannot find add_set index 0 as target [ 330.956565][T16714] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.971943][T16714] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.979262][T16714] bridge_slave_0: entered allmulticast mode [ 331.000228][T16714] bridge_slave_0: entered promiscuous mode [ 331.072659][T16714] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.079908][T16714] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.117960][T16840] IPv4: Oversized IP packet from 127.202.26.0 [ 331.141819][T16714] bridge_slave_1: entered allmulticast mode [ 331.173619][T16714] bridge_slave_1: entered promiscuous mode [ 331.203171][T16846] netlink: 'syz.0.3203': attribute type 8 has an invalid length. [ 331.363934][T16714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.384962][T16714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.416133][T16857] netlink: 'syz.0.3206': attribute type 1 has an invalid length. [ 331.481166][T11322] hsr_slave_1: left promiscuous mode [ 331.508685][T11322] veth1_macvtap: left promiscuous mode [ 331.515350][T11322] veth0_macvtap: left promiscuous mode [ 331.524224][T11322] veth1_vlan: left promiscuous mode [ 331.744031][ T5832] Bluetooth: hci1: command tx timeout [ 332.497283][T16857] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 332.596659][T16714] team0: Port device team_slave_0 added [ 332.658103][T16714] team0: Port device team_slave_1 added [ 332.723727][T16871] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3210'. [ 332.819101][T16714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.830776][T16714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.859664][T16714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.887926][T16714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.895593][T16714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.922474][T16714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.037907][T16882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3213'. [ 333.048552][T16882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3213'. [ 333.266763][T16714] hsr_slave_0: entered promiscuous mode [ 333.283695][T16714] hsr_slave_1: entered promiscuous mode [ 333.295600][T16714] debugfs: 'hsr0' already exists in 'hsr' [ 333.311784][T16714] Cannot create hsr debugfs directory [ 333.323621][T16895] tipc: Enabled bearer , priority 0 [ 333.352919][T16890] syzkaller0: entered promiscuous mode [ 333.386913][T16890] syzkaller0: entered allmulticast mode [ 333.423297][T16892] tipc: Enabling of bearer rejected, already enabled [ 333.465122][T16908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3221'. [ 333.526976][T11322] IPVS: stop unused estimator thread 0... [ 333.564329][T16892] tipc: Resetting bearer [ 333.612959][T16892] tipc: Disabling bearer [ 333.671917][T16914] netlink: 'syz.0.3223': attribute type 10 has an invalid length. [ 333.740083][T16914] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.763842][T16914] bridge_slave_1: left allmulticast mode [ 333.782214][T16914] bridge_slave_1: left promiscuous mode [ 333.795960][T16914] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.815556][T16914] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 333.825051][ T5832] Bluetooth: hci1: command tx timeout [ 333.886578][T16922] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.073567][T16935] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 334.081507][T16931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3228'. [ 334.103827][T16938] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3231'. [ 334.144945][T16938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3231'. [ 334.175451][T16938] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3231'. [ 334.256257][T16940] v: renamed from vlan0 [ 334.601790][T16963] openvswitch: netlink: Duplicate or invalid key (type 0). [ 334.609104][T16963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.870751][T16968] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.970808][T16968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.989387][T16968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.161682][T11322] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.195667][T11322] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.205828][T11322] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.215730][T11322] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.239926][T11322] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.280905][T11322] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.322188][T11322] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.331139][T11322] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.369814][T16981] tipc: Enabling of bearer rejected, failed to enable media [ 335.563198][T16714] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 335.584232][T16714] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 335.606491][T16714] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 335.634916][T16714] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 335.904444][ T5832] Bluetooth: hci1: command tx timeout [ 335.916195][T16714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.945299][T17009] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 335.973977][T17009] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 335.987290][T17009] gretap2: entered promiscuous mode [ 336.000172][T17009] gretap2: entered allmulticast mode [ 336.034784][T17012] bridge_slave_1: left allmulticast mode [ 336.043678][T17012] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.060271][T17012] bridge_slave_0: left allmulticast mode [ 336.068053][T17012] bridge_slave_0: left promiscuous mode [ 336.074568][T17012] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.180977][T16714] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.225399][T11322] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.232638][T11322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.295987][T11322] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.303278][T11322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.429614][T17033] netlink: 'syz.0.3260': attribute type 5 has an invalid length. [ 336.457119][T17033] netlink: 'syz.0.3260': attribute type 1 has an invalid length. [ 336.494968][T17033] netlink: 'syz.0.3260': attribute type 4 has an invalid length. [ 336.508776][T17033] __nla_validate_parse: 2 callbacks suppressed [ 336.508800][T17033] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3260'. [ 336.777944][T16714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.865600][T17041] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3263'. [ 336.875833][T16714] veth0_vlan: entered promiscuous mode [ 336.887374][T17041] ksmbd: Unknown IPC event: 1, ignore. [ 336.890738][T16714] veth1_vlan: entered promiscuous mode [ 336.901124][T17041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3263'. [ 336.947201][T16714] veth0_macvtap: entered promiscuous mode [ 336.958116][T16714] veth1_macvtap: entered promiscuous mode [ 336.990598][T16714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.014854][T16714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.045402][T11326] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.071352][T11326] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.099729][T11326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.128128][T11326] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.287541][T11323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.305690][T11324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.319702][T11324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.328326][T11323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.386832][T17060] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 337.397254][T17057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3269'. [ 337.432553][T17057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3269'. [ 337.434407][T17060] nbd: socks must be embedded in a SOCK_ITEM attr [ 337.464042][T17060] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3270'. [ 337.526452][T17064] Bluetooth: MGMT ver 1.23 [ 338.090638][T17086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3279'. [ 338.314446][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.325881][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.337689][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.347714][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.356587][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 338.413575][T17108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3281'. [ 338.572433][T17102] Z7nz>RA speed is unknown, defaulting to 1000 [ 338.679286][T17115] netlink: zone id is out of range [ 338.695536][T17115] netlink: set zone limit has 4 unknown bytes [ 338.707478][T17119] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3286'. [ 339.105778][T17121] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 339.215266][T17135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3288'. [ 339.420908][T17102] chnl_net:caif_netlink_parms(): no params data found [ 339.569811][T17147] netlink: 'syz.3.3294': attribute type 10 has an invalid length. [ 339.601273][T17147] dummy0: entered promiscuous mode [ 339.608602][T17147] bridge0: port 3(dummy0) entered blocking state [ 339.621933][T17147] bridge0: port 3(dummy0) entered disabled state [ 339.629171][T17147] dummy0: entered allmulticast mode [ 339.649798][T17147] bridge0: port 3(dummy0) entered blocking state [ 339.656410][T17147] bridge0: port 3(dummy0) entered forwarding state [ 339.769635][T17102] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.784617][T17102] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.803238][T17102] bridge_slave_0: entered allmulticast mode [ 339.811687][T17102] bridge_slave_0: entered promiscuous mode [ 339.829904][T17102] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.837487][T17102] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.845106][T17102] bridge_slave_1: entered allmulticast mode [ 339.853531][T17102] bridge_slave_1: entered promiscuous mode [ 339.913732][T17162] Cannot find add_set index 0 as target [ 339.925128][T17102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.947091][T17102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.055667][T17102] team0: Port device team_slave_0 added [ 340.078379][T17102] team0: Port device team_slave_1 added [ 340.173283][T17102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.191460][T17102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.251483][T17102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.279651][T17102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.298806][T17102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.326831][T17102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.382843][ T5832] Bluetooth: hci4: command tx timeout [ 340.493241][T17102] hsr_slave_0: entered promiscuous mode [ 340.510584][T17102] hsr_slave_1: entered promiscuous mode [ 340.530703][T17102] debugfs: 'hsr0' already exists in 'hsr' [ 340.536613][T17102] Cannot create hsr debugfs directory [ 340.599149][T17188] veth3: entered allmulticast mode [ 340.629802][T17189] veth5: entered allmulticast mode [ 341.073067][T17205] team0 (unregistering): Port device team_slave_0 removed [ 341.088153][T17205] team0 (unregistering): Port device team_slave_1 removed [ 341.125636][T17227] netlink: 'syz.3.3319': attribute type 13 has an invalid length. [ 341.131921][T17217] netlink: 'syz.2.3317': attribute type 2 has an invalid length. [ 341.175034][T17227] gretap0: refused to change device tx_queue_len [ 341.193074][T17227] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 341.308396][T17102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.326548][T17102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.503508][T17102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.520935][T17102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.545886][T17244] __nla_validate_parse: 5 callbacks suppressed [ 341.545909][T17244] netlink: 216 bytes leftover after parsing attributes in process `syz.5.3324'. [ 341.696941][T17102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.714273][T17102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.732271][T17241] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3324'. [ 341.746245][T17245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3326'. [ 341.808342][T17245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3326'. [ 341.849155][T17264] netlink: 'syz.5.3330': attribute type 1 has an invalid length. [ 341.863472][T17257] bond1: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 341.877537][T17257] bond1: entered promiscuous mode [ 341.884490][T17257] bond1: entered allmulticast mode [ 341.890962][T17257] 8021q: adding VLAN 0 to HW filter on device bond1 [ 341.950749][T17102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.965654][T17102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.067137][T17271] IPVS: set_ctl: invalid protocol: 243 255.255.255.255:20000 [ 342.078737][T17271] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3333'. [ 342.208439][T17102] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 342.249531][T17102] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 342.270346][T17102] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 342.295621][T17102] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 342.364487][T17289] netlink: 'syz.0.3339': attribute type 29 has an invalid length. [ 342.427842][T17289] netlink: 'syz.0.3339': attribute type 29 has an invalid length. [ 342.465717][ T5832] Bluetooth: hci4: command tx timeout [ 342.479820][T17293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3340'. [ 342.538384][T17102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.605101][T17303] netlink: 280 bytes leftover after parsing attributes in process `syz.0.3343'. [ 342.617518][T17102] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.642203][T17298] netlink: 'syz.2.3342': attribute type 3 has an invalid length. [ 342.649549][T11324] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.657208][T11324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.667768][T17296] netlink: 'syz.2.3342': attribute type 3 has an invalid length. [ 342.705471][T11324] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.712739][T11324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.958719][T17319] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3348'. [ 343.227391][T17102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.327061][T17102] veth0_vlan: entered promiscuous mode [ 343.333994][ T9490] IPVS: starting estimator thread 0... [ 343.347644][T17335] netlink: 'syz.0.3355': attribute type 1 has an invalid length. [ 343.357925][T17102] veth1_vlan: entered promiscuous mode [ 343.364675][T17335] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3355'. [ 343.425390][T17102] veth0_macvtap: entered promiscuous mode [ 343.450018][T17102] veth1_macvtap: entered promiscuous mode [ 343.456213][T17338] IPVS: using max 33 ests per chain, 79200 per kthread [ 343.508291][T17102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.545456][T17102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.565853][T17346] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3357'. [ 343.628603][T11324] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.665683][T11324] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.705642][T11324] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.742418][T11324] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.855778][T17362] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 343.867947][T17364] netlink: 'syz.0.3360': attribute type 1 has an invalid length. [ 343.888884][T17362] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 343.941952][T17362] gretap1: entered promiscuous mode [ 343.947402][T17362] gretap1: entered allmulticast mode [ 344.054693][T17373] dvmrp6: entered allmulticast mode [ 344.096845][T17367] IPVS: Unknown mcast interface: nr0 [ 344.121551][T17370] syz_tun: entered allmulticast mode [ 344.471722][T11322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.498391][T11322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.542068][ T5839] Bluetooth: hci4: command tx timeout [ 344.561955][T17365] syz_tun: left allmulticast mode [ 344.622528][T11326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.640974][T11326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.753216][T17401] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 344.764061][T17400] netlink: 'syz.3.3372': attribute type 23 has an invalid length. [ 344.986298][T17410] netlink: 'syz.3.3375': attribute type 29 has an invalid length. [ 345.029959][T17410] netlink: 'syz.3.3375': attribute type 29 has an invalid length. [ 345.209040][T17424] tipc: Started in network mode [ 345.217872][T17424] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 345.235726][T17424] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 345.245322][T17424] tipc: Enabled bearer , priority 10 [ 345.320903][T17428] Cannot find add_set index 0 as target [ 346.404337][ T9490] tipc: Node number set to 1 [ 346.622316][ T5839] Bluetooth: hci4: command 0x0419 tx timeout [ 346.711064][T17468] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 346.730736][T17468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.929582][T17485] __nla_validate_parse: 13 callbacks suppressed [ 346.929607][T17485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3399'. [ 346.957118][T17486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3398'. [ 346.991627][T17486] tc_dump_action: action bad kind [ 346.998864][T17485] nft_compat: unsupported protocol 0 [ 347.067991][T17492] tipc: Enabled bearer , priority 0 [ 347.090762][T17492] tipc: Enabling of bearer rejected, already enabled [ 347.170063][T17493] tipc: Disabling bearer [ 347.216616][T17501] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3403'. [ 347.295317][T17453] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 347.505552][T17517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3407'. [ 347.533193][T17512] validate_nla: 1 callbacks suppressed [ 347.533213][T17512] netlink: 'syz.3.3407': attribute type 25 has an invalid length. [ 347.548204][T17512] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3407'. [ 347.560386][T17519] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3408'. [ 347.782341][T17525] syzkaller0: entered promiscuous mode [ 347.798288][T17525] syzkaller0: entered allmulticast mode [ 347.823073][T17531] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3416'. [ 347.843732][T17533] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3415'. [ 347.929141][T17540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3417'. [ 347.929481][T17539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3418'. [ 348.262587][T17550] : renamed from hsr0 (while UP) [ 348.416158][T17556] sctp: [Deprecated]: syz.1.3425 (pid 17556) Use of int in max_burst socket option deprecated. [ 348.416158][T17556] Use struct sctp_assoc_value instead [ 348.543713][ T5832] Bluetooth: hci0: command 0x080f tx timeout [ 348.583793][T17578] netlink: 'syz.0.3430': attribute type 25 has an invalid length. [ 348.696670][T17581] syzkaller0: entered promiscuous mode [ 348.708156][ T5832] Bluetooth: hci4: command 0x0419 tx timeout [ 348.722045][T17581] syzkaller0: entered allmulticast mode [ 349.345114][T17621] tipc: Started in network mode [ 349.360337][T17621] tipc: Node identity a22f8bce63ef, cluster identity 4711 [ 349.371754][T17621] tipc: Enabled bearer , priority 0 [ 349.388651][T17621] syzkaller0: entered promiscuous mode [ 349.391689][T17626] netlink: ct family unspecified [ 349.395517][T17621] syzkaller0: entered allmulticast mode [ 349.399177][T17626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.452081][T17621] tipc: Resetting bearer [ 349.507583][T17619] tipc: Resetting bearer [ 349.541888][T17619] tipc: Disabling bearer [ 349.799541][T17651] veth3: entered allmulticast mode [ 349.831920][T17652] netlink: 'syz.3.3455': attribute type 1 has an invalid length. [ 349.853157][T17652] netlink: 'syz.3.3455': attribute type 3 has an invalid length. [ 349.866348][T17656] netlink: 'syz.5.3458': attribute type 6 has an invalid length. [ 350.405062][T17678] netlink: 'syz.2.3466': attribute type 13 has an invalid length. [ 350.648431][T17704] netlink: 'syz.1.3475': attribute type 33 has an invalid length. [ 350.763492][T17715] tipc: Enabling of bearer rejected, failed to enable media [ 350.978139][T17721] xt_hashlimit: overflow, try lower: 3/0 [ 351.499957][T17761] IPVS: set_ctl: invalid protocol: 135 100.1.1.2:20000 [ 351.519466][T17755] netlink: 'syz.1.3491': attribute type 1 has an invalid length. [ 351.610692][T17766] openvswitch: netlink: Flow key attr not present in new flow. [ 352.058952][T17793] netlink: 'syz.0.3502': attribute type 2 has an invalid length. [ 352.216177][T17798] team0: Device vti0 is of different type [ 352.295396][T17803] macsec1: entered promiscuous mode [ 352.318610][T17807] netlink: 'syz.1.3506': attribute type 6 has an invalid length. [ 353.300006][T17819] syz.2.3510 uses old SIOCAX25GETINFO [ 354.007477][T17834] validate_nla: 1 callbacks suppressed [ 354.007496][T17834] netlink: 'syz.2.3511': attribute type 2 has an invalid length. [ 354.039941][T17834] __nla_validate_parse: 80 callbacks suppressed [ 354.039962][T17834] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3511'. [ 354.066619][T17834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3511'. [ 354.081668][T17834] netlink: 'syz.2.3511': attribute type 1 has an invalid length. [ 354.111496][T17834] netlink: 'syz.2.3511': attribute type 2 has an invalid length. [ 354.200774][T17842] vlan2: entered promiscuous mode [ 354.218828][T17842] bridge0: entered promiscuous mode [ 354.445401][T17862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3522'. [ 354.466839][T17862] tipc: Enabling of bearer rejected, failed to enable media [ 354.494867][T17860] netlink: 50 bytes leftover after parsing attributes in process `syz.2.3521'. [ 354.636962][T17872] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3525'. [ 354.789157][T17885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3527'. [ 355.154119][T17906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3533'. [ 355.336008][T17913] netlink: 'syz.5.3534': attribute type 1 has an invalid length. [ 355.355016][T17906] hsr_slave_1 (unregistering): left promiscuous mode [ 355.370103][T17918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3537'. [ 355.381071][T17918] tc_dump_action: action bad kind [ 355.387622][T17920] netlink: 'syz.2.3535': attribute type 30 has an invalid length. [ 355.398780][T17911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3535'. [ 355.482735][T17922] C: renamed from team_slave_0 (while UP) [ 355.498888][T17922] netlink: 'syz.3.3536': attribute type 1 has an invalid length. [ 355.521586][T17922] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 355.552725][T17911] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 355.632143][T17930] xt_CT: No such helper "syz1" [ 355.794066][T17944] bridge_slave_0: invalid flags given to default FDB implementation [ 355.837036][T17946] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3544'. [ 355.853653][T17944] netlink: 'syz.2.3543': attribute type 16 has an invalid length. [ 355.868547][T17946] : renamed from hsr0 [ 356.006914][T17949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 356.228304][T17975] netlink: 'syz.2.3551': attribute type 39 has an invalid length. [ 356.540539][T17994] SET target dimension over the limit! [ 357.421271][T18031] batadv_slave_0: entered promiscuous mode [ 357.488451][T18022] batadv_slave_0: left promiscuous mode [ 357.564394][T18038] x_tables: unsorted underflow at hook 3 [ 357.594238][T18040] IPVS: Error connecting to the multicast addr [ 357.783079][T18055] Z7nz>RA: renamed from lo (while UP) [ 358.237127][T18084] netlink: 'syz.3.3590': attribute type 10 has an invalid length. [ 358.276526][T18084] bridge0: port 3(dummy0) entered disabled state [ 358.284908][T18084] dummy0: left allmulticast mode [ 358.290097][T18084] dummy0: left promiscuous mode [ 358.295344][T18084] bridge0: port 3(dummy0) entered disabled state [ 358.326695][T18084] team0: Port device dummy0 added [ 359.070108][T18125] __nla_validate_parse: 23 callbacks suppressed [ 359.070132][T18125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3601'. [ 359.210784][T18134] netlink: 'syz.0.3604': attribute type 5 has an invalid length. [ 359.358534][T18147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3606'. [ 359.392276][T18147] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.475420][T18147] bridge_slave_1 (unregistering): left allmulticast mode [ 359.477872][T18155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3609'. [ 359.491869][T18147] bridge_slave_1 (unregistering): left promiscuous mode [ 359.491974][T18147] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.554545][T18144] bridge0: port 1(batadv1) entered blocking state [ 359.563759][T18144] bridge0: port 1(batadv1) entered disabled state [ 359.570501][T18144] batadv1: entered allmulticast mode [ 359.578180][T18144] batadv1: entered promiscuous mode [ 359.710376][ T30] audit: type=1800 audit(1762519098.916:4): pid=18166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3611" name="memory.events" dev="tmpfs" ino=834 res=0 errno=0 [ 359.880719][T18171] netlink: 'syz.5.3614': attribute type 10 has an invalid length. [ 359.929113][T18179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3617'. [ 359.952757][T18179] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3617'. [ 360.052709][T11326] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 360.063301][T11326] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 360.152818][T18189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3619'. [ 360.199992][T18193] netlink: 212352 bytes leftover after parsing attributes in process `syz.3.3620'. [ 360.299401][T18189] team1: entered promiscuous mode [ 360.333594][T18189] team1: entered allmulticast mode [ 360.350238][T18171] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3614'. [ 360.354746][T18203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3621'. [ 360.375466][T18206] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3623'. [ 360.500942][T18210] xt_hashlimit: max too large, truncated to 1048576 [ 360.520158][T18210] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 361.634350][T18282] wg1 speed is unknown, defaulting to 1000 [ 361.640704][T18283] siw: device registration error -23 [ 361.668111][ T9695] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 361.688500][T18282] wg1 speed is unknown, defaulting to 1000 [ 361.738642][T18282] wg1 speed is unknown, defaulting to 1000 [ 361.764695][T18284] Z7nz>RA speed is unknown, defaulting to 1000 [ 362.058464][T18282] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 362.088603][T18282] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 362.127344][T18282] wg1 speed is unknown, defaulting to 1000 [ 362.135200][T18282] wg1 speed is unknown, defaulting to 1000 [ 362.144536][T18282] wg1 speed is unknown, defaulting to 1000 [ 362.152151][T18282] wg1 speed is unknown, defaulting to 1000 [ 362.159707][T18282] wg1 speed is unknown, defaulting to 1000 [ 362.167646][T18282] wg1 speed is unknown, defaulting to 1000 [ 362.175476][T18282] wg1 speed is unknown, defaulting to 1000 [ 362.183131][T18282] wg1 speed is unknown, defaulting to 1000 [ 362.190587][T18282] wg1 speed is unknown, defaulting to 1000 [ 362.836165][T18311] tipc: Started in network mode [ 362.851956][T18311] tipc: Node identity fe49cb15e7e3, cluster identity 4711 [ 362.870610][T18311] tipc: Enabled bearer , priority 0 [ 362.889168][T18314] tipc: Enabled bearer , priority 0 [ 362.902552][T18314] syzkaller0: entered promiscuous mode [ 362.908098][T18314] syzkaller0: entered allmulticast mode [ 362.979414][T18308] tipc: Resetting bearer [ 363.961661][ T9459] tipc: Node number set to 430623509 [ 364.001858][ T9459] tipc: Node number set to 3766737217 [ 364.577367][T18308] tipc: Disabling bearer [ 364.620051][T18334] tipc: Resetting bearer [ 364.721149][T18312] tipc: Resetting bearer [ 364.821045][T18347] SET target dimension over the limit! [ 364.832144][T18312] tipc: Disabling bearer [ 364.850790][T18353] __nla_validate_parse: 7 callbacks suppressed [ 364.850809][T18353] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3666'. [ 364.881973][T18352] syzkaller0: entered promiscuous mode [ 364.897796][T18352] syzkaller0: entered allmulticast mode [ 365.159391][T18364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3669'. [ 365.165356][T18367] netlink: 'syz.3.3672': attribute type 1 has an invalid length. [ 365.190128][T18367] gretap1: entered promiscuous mode [ 365.197627][T18367] netlink: 'syz.3.3672': attribute type 10 has an invalid length. [ 365.285953][T18373] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3675'. [ 365.458597][T18386] netlink: 'syz.2.3676': attribute type 1 has an invalid length. [ 365.735987][T18403] bridge0: port 2(ipvlan2) entered blocking state [ 365.767668][T18403] bridge0: port 2(ipvlan2) entered disabled state [ 365.795571][T18403] ipvlan2: entered allmulticast mode [ 365.800950][T18403] bridge0: entered allmulticast mode [ 365.834391][T18403] ipvlan2: left allmulticast mode [ 365.854643][T18403] bridge0: left allmulticast mode [ 365.907632][T18412] netlink: 'syz.1.3688': attribute type 10 has an invalid length. [ 365.918222][T18411] A link change request failed with some changes committed already. Interface Z7nz>RA may have been left with an inconsistent configuration, please check. [ 365.938374][T18412] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3688'. [ 365.947833][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057c92000: rx timeout, send abort [ 365.958716][T18411] A link change request failed with some changes committed already. Interface Z7nz>RA may have been left with an inconsistent configuration, please check. [ 365.991534][T18412] batadv0: entered promiscuous mode [ 365.996997][T18412] batadv0: entered allmulticast mode [ 366.016017][T18412] bridge0: port 2(batadv0) entered blocking state [ 366.031707][T18412] bridge0: port 2(batadv0) entered disabled state [ 366.046036][T18412] bridge0: port 2(batadv0) entered blocking state [ 366.052735][T18412] bridge0: port 2(batadv0) entered forwarding state [ 366.329511][T18441] syzkaller0: entered promiscuous mode [ 366.335570][T18441] syzkaller0: entered allmulticast mode [ 366.401589][T18444] netlink: 'syz.5.3700': attribute type 1 has an invalid length. [ 366.439674][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059a33400: rx timeout, send abort [ 366.448187][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057c92000: abort rx timeout. Force session deactivation [ 366.468250][T18444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 366.529982][T18444] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 366.542390][T11323] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 366.551772][T11323] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 366.677263][T18456] syzkaller1: entered promiscuous mode [ 366.683424][T18456] syzkaller1: entered allmulticast mode [ 366.948053][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059a33400: abort rx timeout. Force session deactivation [ 367.035993][T18466] tipc: Enabled bearer , priority 0 [ 367.061854][T18469] syzkaller0: entered promiscuous mode [ 367.071217][T18469] syzkaller0: entered allmulticast mode [ 367.201148][T18466] tipc: Resetting bearer [ 367.218280][T18487] netlink: ct family unspecified [ 367.226282][T18487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.237013][T18487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3709'. [ 367.247368][T18482] netlink: 'syz.0.3710': attribute type 5 has an invalid length. [ 367.280933][T18487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3709'. [ 367.482119][T18498] syzkaller1: entered promiscuous mode [ 367.496043][T18498] syzkaller1: entered allmulticast mode [ 367.684505][T18457] tipc: Resetting bearer [ 367.712418][T18457] tipc: Disabling bearer [ 367.826911][T18516] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3718'. [ 369.017806][T18600] netlink: 'syz.0.3742': attribute type 15 has an invalid length. [ 369.026258][T18600] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3742'. [ 369.043430][T18601] netlink: 'syz.1.3741': attribute type 21 has an invalid length. [ 369.064975][T18601] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3741'. [ 369.105652][T18601] netlink: 'syz.1.3741': attribute type 5 has an invalid length. [ 369.138597][T18601] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3741'. [ 369.325935][T18617] netlink: 'syz.3.3746': attribute type 4 has an invalid length. [ 369.465649][T18619] Bluetooth: MGMT ver 1.23 [ 369.583474][T18629] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 369.599956][T18623] bond3 (unregistering): Released all slaves [ 369.696228][T18627] 8021q: adding VLAN 0 to HW filter on device bond1 [ 369.877667][T18651] __nla_validate_parse: 4 callbacks suppressed [ 369.877686][T18651] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3758'. [ 369.986643][T18659] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3759'. [ 370.380788][T18685] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3768'. [ 370.414950][T18677] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 370.434768][T18677] bond2 (unregistering): Released all slaves [ 370.457748][T18695] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3766'. [ 370.470110][T18697] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3763'. [ 370.552281][T18692] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3769'. [ 370.565920][T18688] tipc: Enabled bearer , priority 0 [ 370.591453][T18692] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3769'. [ 370.619484][T18677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3763'. [ 370.665541][T18677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3763'. [ 370.715913][T18706] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3770'. [ 370.798549][T18696] syzkaller1: entered promiscuous mode [ 370.804939][T18696] syzkaller1: entered allmulticast mode [ 371.224931][T18688] tipc: Resetting bearer [ 371.282752][T18687] tipc: Disabling bearer [ 371.664099][T18744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.851244][T18769] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 372.907090][T18818] tipc: Started in network mode [ 372.933816][T18818] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 372.947964][T18818] tipc: Enabled bearer , priority 10 [ 373.096933][T18830] veth5: entered allmulticast mode [ 373.161701][T18835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.173432][T18840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.204701][T18842] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 373.661674][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 374.019801][T18900] A link change request failed with some changes committed already. Interface Z7nz>RA may have been left with an inconsistent configuration, please check. [ 374.044996][T18902] netdevsim netdevsim5: Direct firmware load for failed with error -2 [ 374.060926][T18902] netdevsim netdevsim5: Falling back to sysfs fallback for: [ 374.065542][ T9459] tipc: Node number set to 4269801492 [ 374.171234][T18918] syzkaller0: entered promiscuous mode [ 374.183624][T18918] syzkaller0: entered allmulticast mode [ 375.031034][T18952] validate_nla: 9 callbacks suppressed [ 375.031055][T18952] netlink: 'syz.0.3832': attribute type 18 has an invalid length. [ 375.306649][T18966] __nla_validate_parse: 19 callbacks suppressed [ 375.306671][T18966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3838'. [ 375.395337][T18972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3840'. [ 375.492302][T18980] x_tables: duplicate underflow at hook 3 [ 375.578159][T18972] netlink: 'syz.1.3840': attribute type 1 has an invalid length. [ 375.735854][T18991] syzkaller1: entered promiscuous mode [ 375.743841][T18991] syzkaller1: entered allmulticast mode [ 375.982999][T19004] netlink: 'syz.2.3853': attribute type 2 has an invalid length. [ 376.004976][T19004] 9: entered promiscuous mode [ 376.334279][T19032] netlink: 'syz.0.3861': attribute type 21 has an invalid length. [ 376.376376][T19032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3861'. [ 376.376662][T19033] netlink: 'syz.0.3861': attribute type 21 has an invalid length. [ 376.406198][T19033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3861'. [ 376.422117][T19036] erspan0: entered allmulticast mode [ 376.447791][T19032] netlink: 'syz.0.3861': attribute type 21 has an invalid length. [ 376.474891][T19033] netlink: 'syz.0.3861': attribute type 21 has an invalid length. [ 376.482552][T19032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3861'. [ 376.506366][T19033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3861'. [ 376.555286][T19043] netlink: 'syz.2.3865': attribute type 1 has an invalid length. [ 376.556491][T19032] only policy match revision 0 supported [ 376.564420][T19032] unable to load match [ 376.615927][T19043] 8021q: adding VLAN 0 to HW filter on device bond3 [ 376.761040][T19048] syzkaller0: entered promiscuous mode [ 376.771166][T19048] syzkaller0: entered allmulticast mode [ 376.889167][T19066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3870'. [ 377.282710][T19083] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3873'. [ 377.505029][T19093] netlink: 'syz.0.3877': attribute type 1 has an invalid length. [ 377.704327][T19104] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3877'. [ 379.118552][T19093] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 379.120128][T19100] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 379.298417][T19128] syzkaller1: entered promiscuous mode [ 379.320986][T19128] syzkaller1: entered allmulticast mode [ 379.372453][T19130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.462927][T19140] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3886'. [ 379.480993][T19140] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 379.505878][T19138] tipc: Enabled bearer , priority 0 [ 379.523384][T19138] tipc: Resetting bearer [ 379.617469][T19146] netlink: 'syz.1.3890': attribute type 4 has an invalid length. [ 379.653724][T19137] tipc: Disabling bearer [ 379.669441][T19146] IPv6: sit1: Disabled Multicast RS [ 379.676301][T19146] sit1: entered allmulticast mode [ 379.962453][T19162] syzkaller0: entered promiscuous mode [ 379.978272][T19162] syzkaller0: entered allmulticast mode [ 380.629167][T19211] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 380.643817][T19211] bond2 (unregistering): Released all slaves [ 380.652069][T19214] __nla_validate_parse: 4 callbacks suppressed [ 380.652086][T19214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3911'. [ 380.812768][T19219] xt_l2tp: missing protocol rule (udp|l2tpip) [ 380.846965][T19219] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 381.124994][T19238] batadv_slave_1: entered promiscuous mode [ 381.132451][T19238] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3919'. [ 381.142607][T19237] batadv_slave_1: left promiscuous mode [ 381.268933][T19246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3922'. [ 381.295255][T19248] validate_nla: 1 callbacks suppressed [ 381.295277][T19248] netlink: 'syz.5.3923': attribute type 3 has an invalid length. [ 381.316520][T19248] netlink: 666 bytes leftover after parsing attributes in process `syz.5.3923'. [ 381.355133][T19248] dvmrp0: entered allmulticast mode [ 381.513813][T19258] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 381.527185][T19258] bond2 (unregistering): Released all slaves [ 381.565341][T19262] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3927'. [ 381.816454][T19279] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3933'. [ 381.965821][T19292] netlink: 'syz.0.3934': attribute type 10 has an invalid length. [ 382.014769][T19295] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3935'. [ 382.106658][T19288] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 382.176310][T19284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3935'. [ 382.187540][T19284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3935'. [ 382.733731][T19336] syzkaller1: entered promiscuous mode [ 382.739917][T19336] syzkaller1: entered allmulticast mode [ 382.782992][T19336] A link change request failed with some changes committed already. Interface Z7nz>RA may have been left with an inconsistent configuration, please check. [ 382.811718][T19344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3949'. [ 382.877628][T19338] can: request_module (can-proto-0) failed. [ 382.889630][T19342] syzkaller1: entered promiscuous mode [ 382.902159][T19342] syzkaller1: entered allmulticast mode [ 383.035530][T19351] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 383.087733][T19355] Bluetooth: MGMT ver 1.23 [ 383.405089][T19376] smc: net device sit0 erased user defined pnetid SYZ1 [ 383.413973][T19376] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ0 [ 383.580787][T19385] netlink: 'syz.3.3962': attribute type 1 has an invalid length. [ 383.595714][T19385] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 383.625404][T19390] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 384.071816][ T9459] IPVS: starting estimator thread 0... [ 384.161607][T19414] IPVS: using max 24 ests per chain, 57600 per kthread [ 384.333499][T19427] syzkaller0: entered allmulticast mode [ 384.983220][T19466] tipc: Enabling of bearer rejected, media not registered [ 385.057673][ T30] audit: type=1107 audit(1762519124.266:5): pid=19476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=']T6ַ =x|9Z' [ 385.082656][T19477] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20002 [ 385.197231][T19483] syzkaller0: entered promiscuous mode [ 385.221497][T19483] syzkaller0: entered allmulticast mode [ 385.252124][T19483] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 385.278537][T19488] openvswitch: netlink: Key type 234 is out of range max 32 [ 385.297471][T19490] netlink: 'syz.0.4000': attribute type 4 has an invalid length. [ 385.311297][T19488] netlink: 'syz.3.3999': attribute type 1 has an invalid length. [ 385.426897][T19494] !: renamed from dummy0 (while UP) [ 386.147556][T19523] __nla_validate_parse: 16 callbacks suppressed [ 386.147579][T19523] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4007'. [ 386.281806][T19531] Cannot find del_set index 49151 as target [ 386.653588][T19557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4014'. [ 386.714468][T19557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4014'. [ 386.884421][T19564] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 386.935925][T19564] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 386.960101][T19564] gretap3: entered promiscuous mode [ 386.972482][T19564] gretap3: entered allmulticast mode [ 386.997910][T19566] tipc: Enabled bearer , priority 0 [ 387.009748][T19566] syzkaller0: entered promiscuous mode [ 387.016765][T19566] syzkaller0: entered allmulticast mode [ 387.037430][T19566] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4016'. [ 387.047429][T19530] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 387.054403][T19566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4016'. [ 387.065460][T19530] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 387.086491][T19566] tipc: Resetting bearer [ 387.101340][T19530] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 387.110969][T19530] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 387.120648][T19565] tipc: Resetting bearer [ 387.156546][T19565] tipc: Disabling bearer [ 387.250089][T19568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4017'. [ 387.272879][T19530] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 387.278871][T19530] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 387.356630][T19569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4017'. [ 387.409034][T19530] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 387.437561][T19530] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 387.553635][T19530] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 387.573236][T19530] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 387.818027][T19580] netlink: 'syz.5.4019': attribute type 1 has an invalid length. [ 387.841497][T19580] netlink: 228 bytes leftover after parsing attributes in process `syz.5.4019'. [ 387.922673][T19582] tipc: Enabled bearer , priority 0 [ 387.946137][T19582] syzkaller0: entered promiscuous mode [ 387.961559][T19582] syzkaller0: entered allmulticast mode [ 387.986401][T19582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4021'. [ 388.038332][T19582] tipc: Resetting bearer [ 388.073911][T19581] tipc: Resetting bearer [ 388.114674][T19587] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4022'. [ 388.132946][T19581] tipc: Disabling bearer [ 388.173998][T19589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.324458][T19589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.498531][ T5832] block nbd2: Receive control failed (result -32) [ 389.049361][T19631] team0: Device gtp0 is of different type [ 389.270484][T19643] syzkaller0: entered promiscuous mode [ 389.304138][T19643] syzkaller0: entered allmulticast mode [ 389.347538][T19643] vet0_virt_wifi: renamed from dummy0 (while UP) [ 389.473498][T19656] netlink: 'syz.0.4042': attribute type 5 has an invalid length. [ 389.497825][T19647] syzkaller0: entered promiscuous mode [ 389.501213][T19656] netlink: 'syz.0.4042': attribute type 6 has an invalid length. [ 389.512256][T19647] syzkaller0: entered allmulticast mode [ 389.518935][T19658] veth1_to_bond: entered promiscuous mode [ 391.145995][T19657] veth1_to_bond: left promiscuous mode [ 391.469117][T19708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.004239][T19743] netlink: 'syz.2.4069': attribute type 2 has an invalid length. [ 392.022388][T19743] __nla_validate_parse: 9 callbacks suppressed [ 392.022410][T19743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4069'. [ 392.071219][T19746] netlink: 212324 bytes leftover after parsing attributes in process `syz.5.4068'. [ 392.241699][T19752] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4072'. [ 392.410321][T19767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4073'. [ 392.804340][T19802] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 392.842683][T19802] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 392.887681][T19810] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4089'. [ 392.911648][T19810] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4089'. [ 392.948991][T19810] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4089'. [ 393.390720][T19835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4098'. [ 393.508099][T19853] netlink: 'syz.0.4103': attribute type 1 has an invalid length. [ 393.510736][T19849] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4102'. [ 393.544460][T19849] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4102'. [ 393.757948][T19868] bridge0: port 2(batadv0) entered disabled state [ 393.764943][T19868] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.787373][T19866] netlink: 'syz.3.4105': attribute type 1 has an invalid length. [ 394.243189][T19881] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 394.579157][T19909] : entered promiscuous mode [ 394.654737][T19909] tun0: tun_chr_ioctl cmd 1074025675 [ 394.677896][T19909] tun0: persist disabled [ 395.062255][T19929] tipc: Enabled bearer , priority 0 [ 395.146279][T19929] syzkaller0: entered promiscuous mode [ 395.161506][T19929] syzkaller0: entered allmulticast mode [ 396.302432][ T5832] Bluetooth: hci0: command tx timeout [ 396.670710][T19929] tipc: Resetting bearer [ 396.688049][T19929] tipc: Disabling bearer [ 396.899554][T19969] netlink: 'syz.3.4139': attribute type 2 has an invalid length. [ 397.037933][T19981] __nla_validate_parse: 12 callbacks suppressed [ 397.037949][T19981] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4142'. [ 397.822925][T19986] veth0: entered promiscuous mode [ 397.835472][T19989] 8021q: VLANs not supported on ipvlan1 [ 397.868151][T19985] veth0: left promiscuous mode [ 398.168398][T20007] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4151'. [ 398.169817][T20004] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4150'. [ 398.373743][T20017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4153'. [ 398.398525][T20017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4153'. [ 398.444472][T20019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4153'. [ 398.483990][T20017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4153'. [ 398.497509][T20019] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4153'. [ 398.543840][T20017] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4153'. [ 398.567630][T20023] netlink: 180432 bytes leftover after parsing attributes in process `syz.2.4154'. [ 398.838381][T20035] netlink: 'syz.1.4157': attribute type 4 has an invalid length. [ 398.866760][T20037] netlink: 'syz.2.4159': attribute type 2 has an invalid length. [ 398.884427][T20035] `: renamed from bond0 (while UP) [ 398.900946][T20039] netlink: 'syz.0.4160': attribute type 1 has an invalid length. [ 399.141221][T20053] netlink: 'syz.1.4164': attribute type 1 has an invalid length. [ 399.298550][T20058] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 399.356260][T20058] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 399.476894][T20069] lo: entered allmulticast mode [ 399.492921][T20069] dvmrp8: entered allmulticast mode [ 399.502579][T20068] lo: left allmulticast mode [ 399.920683][T20098] netlink: 'syz.5.4180': attribute type 33 has an invalid length. [ 399.931232][T20102] ip6t_srh: unknown srh invflags 4000 [ 400.074722][T20107] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 400.084080][T20107] tipc: Enabled bearer , priority 10 [ 401.211688][ T981] tipc: Node number set to 3250621390 [ 401.414597][ T30] audit: type=1107 audit(1762519140.626:6): pid=20190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 401.584168][T20200] IPVS: set_ctl: invalid protocol: 232 172.20.20.41:20000 [ 401.714886][T20207] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 402.126240][T20234] __nla_validate_parse: 148 callbacks suppressed [ 402.126262][T20234] netlink: 696 bytes leftover after parsing attributes in process `syz.5.4223'. [ 402.199178][T20237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4225'. [ 402.232020][T20237] netlink: 'syz.2.4225': attribute type 22 has an invalid length. [ 402.239915][T20237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4225'. [ 402.315455][ T7426] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.315596][T20237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4225'. [ 402.336134][T20237] netlink: 'syz.2.4225': attribute type 22 has an invalid length. [ 402.346592][T20237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4225'. [ 402.346625][ T7426] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.372731][T20247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4228'. [ 402.396796][ T7426] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.477704][ T7426] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.605370][T20258] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4233'. [ 402.670621][T20258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4233'. [ 402.687148][T20263] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 402.721677][T20264] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20000 [ 403.147454][T20299] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4244'. [ 403.393494][T20310] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4249'. [ 403.497103][T20316] netlink: 'syz.3.4251': attribute type 63 has an invalid length. [ 403.632457][T20319] bond2 (unregistering): Released all slaves [ 404.851180][T20385] tipc: Enabling of bearer rejected, failed to enable media [ 405.015921][T20391] netlink: 'syz.3.4276': attribute type 1 has an invalid length. [ 405.088074][T20397] xt_l2tp: v2 doesn't support IP mode [ 405.213887][T20391] 8021q: adding VLAN 0 to HW filter on device bond5 [ 405.352904][T20395] 8021q: adding VLAN 0 to HW filter on device bond5 [ 405.383348][T20395] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 405.397562][T20395] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 405.578745][T20406] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 405.633405][T20408] tipc: Enabled bearer , priority 0 [ 405.727418][T20402] syzkaller0: entered promiscuous mode [ 405.745853][T20402] syzkaller0: entered allmulticast mode [ 407.362136][T20421] __nla_validate_parse: 7 callbacks suppressed [ 407.362155][T20421] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4282'. [ 407.377785][T20421] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4282'. [ 407.416322][T20411] tipc: Resetting bearer [ 407.446737][T20400] tipc: Resetting bearer [ 407.487002][T20400] tipc: Disabling bearer [ 407.503498][T20428] syzkaller0: entered promiscuous mode [ 407.510315][T20428] syzkaller0: entered allmulticast mode [ 407.528545][T20437] pimreg: entered allmulticast mode [ 407.934983][T20460] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4292'. [ 407.953554][T20461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4291'. [ 408.135141][T20480] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4295'. [ 408.335912][T20492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4301'. [ 408.653953][T20512] dvmrp6: entered allmulticast mode [ 408.684429][T20499] netlink: 'syz.2.4303': attribute type 13 has an invalid length. [ 408.862391][T20523] netlink: 'syz.1.4307': attribute type 25 has an invalid length. [ 408.941025][T20499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 409.188324][T20526] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4308'. [ 409.260174][T20533] netlink: 'syz.1.4310': attribute type 1 has an invalid length. [ 409.300604][T20533] 8021q: adding VLAN 0 to HW filter on device bond2 [ 409.347854][T20533] veth9: entered promiscuous mode [ 409.374952][T20533] bond2: (slave veth9): Enslaving as an active interface with an up link [ 409.397605][T20538] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4312'. [ 409.452247][T20543] x_tables: duplicate underflow at hook 2 [ 409.641077][T20550] netlink: ct family unspecified [ 409.646302][T20550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.703082][T20556] netlink: 'syz.3.4320': attribute type 11 has an invalid length. [ 409.711178][T20556] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4320'. [ 409.755573][T20561] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4322'. [ 409.807014][T20564] sch_fq: defrate 0 ignored. [ 410.344638][T20593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.365688][T20593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.389028][T20593] bridge0: port 3(batadv0) entered disabled state [ 410.408283][T20593] bridge0: port 3(batadv0) entered disabled state [ 410.517212][T20603] netlink: 'syz.1.4335': attribute type 10 has an invalid length. [ 410.595449][T20603] team0: Port device geneve0 added [ 411.053921][T20634] bridge_slave_0: left allmulticast mode [ 411.059651][T20634] bridge_slave_0: left promiscuous mode [ 411.072943][T20634] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.142724][T20634] bond0: (slave bridge_slave_1): Releasing backup interface [ 411.203758][T20634] bond0: (slave bond_slave_0): Releasing backup interface [ 411.249625][T20634] bond0: (slave bond_slave_1): Releasing backup interface [ 411.300517][T20634] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 411.454044][T20656] netlink: 'syz.3.4352': attribute type 4 has an invalid length. [ 411.469039][T20657] syzkaller1: entered promiscuous mode [ 411.483194][T20657] syzkaller1: entered allmulticast mode [ 411.895997][T20671] xt_CT: You must specify a L4 protocol and not use inversions on it [ 412.170874][T20699] xt_TCPMSS: Only works on TCP SYN packets [ 412.407915][T20713] Z7nz>RA: renamed from lo (while UP) [ 412.432726][T20708] netlink: 'syz.0.4368': attribute type 1 has an invalid length. [ 412.513219][T20708] 8021q: adding VLAN 0 to HW filter on device bond2 [ 412.556273][T20726] bond2: entered allmulticast mode [ 412.562216][T20726] 8021q: adding VLAN 0 to HW filter on device bond2 [ 412.569452][T20726] bridge0: port 2(bond2) entered blocking state [ 412.576327][T20726] bridge0: port 2(bond2) entered disabled state [ 412.585648][T20726] bond2: entered promiscuous mode [ 412.591699][T20726] bridge0: port 2(bond2) entered blocking state [ 412.598252][T20726] bridge0: port 2(bond2) entered forwarding state [ 412.632558][ T7423] bridge0: port 2(bond2) entered disabled state [ 412.639567][T20727] tipc: Invalid UDP bearer configuration [ 412.639620][T20727] tipc: Enabling of bearer rejected, failed to enable media [ 412.845280][T20744] netlink: 'syz.0.4376': attribute type 11 has an invalid length. [ 413.077682][T20756] __nla_validate_parse: 12 callbacks suppressed [ 413.077701][T20756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4380'. [ 413.312159][T20769] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 413.592727][ T30] audit: type=1800 audit(1762519152.806:7): pid=20783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4388" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1357 res=0 errno=0 [ 413.918516][T20798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4393'. [ 413.936960][T20798] gtp0: entered promiscuous mode [ 413.972290][T20798] gtp0: entered allmulticast mode [ 414.076517][T20807] tipc: Enabled bearer , priority 0 [ 414.084351][T20807] syzkaller0: entered promiscuous mode [ 414.089952][T20807] syzkaller0: entered allmulticast mode [ 414.152844][T20807] tipc: Resetting bearer [ 414.230281][T20814] tipc: Resetting bearer [ 414.292899][T20818] ip6t_srh: unknown srh invflags 4000 [ 414.299589][T20814] tipc: Disabling bearer [ 414.392256][T20822] syzkaller1: entered promiscuous mode [ 414.416874][T20822] syzkaller1: entered allmulticast mode [ 414.434583][T20822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4402'. [ 414.456461][T20822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4402'. [ 414.514188][T20830] SET target dimension over the limit! [ 414.550922][T20833] netlink: 'syz.1.4406': attribute type 4 has an invalid length. [ 414.814233][T20849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4404'. [ 414.920055][T20858] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4410'. [ 415.293066][T20878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4416'. [ 415.476001][T20888] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4421'. [ 415.492909][T20886] netlink: 'syz.1.4420': attribute type 11 has an invalid length. [ 415.516274][T20892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.516937][T20888] openvswitch: netlink: Flow key attr not present in new flow. [ 415.603284][T20899] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4425'. [ 415.642007][T20903] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4421'. [ 415.665779][T20904] block nbd4: Unsupported socket: should be TCP or UNIX. [ 415.672863][T20903] openvswitch: netlink: Flow key attr not present in new flow. [ 416.174334][T20938] tipc: Trying to set illegal importance in message [ 416.439737][T20956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.466614][T20956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.485477][T20956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.506416][T20956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.589773][T20956] bridge0: port 2(batadv0) entered disabled state [ 416.879474][T20980] bond3 (unregistering): Released all slaves [ 417.010065][T20982] batadv_slave_1: entered promiscuous mode [ 417.163943][T20981] batadv_slave_1: left promiscuous mode [ 417.174224][T21001] tipc: Enabled bearer , priority 2 [ 417.374063][T21008] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 417.394380][T21008] bond3 (unregistering): Released all slaves [ 417.536668][T21018] netlink: 'syz.2.4462': attribute type 1 has an invalid length. [ 417.623019][T21027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 417.715876][T21034] netlink: 'syz.1.4467': attribute type 1 has an invalid length. [ 417.725621][T21024] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 417.847676][T21034] bond3: entered promiscuous mode [ 417.852860][T21034] bond3: entered allmulticast mode [ 417.858566][T21034] 8021q: adding VLAN 0 to HW filter on device bond3 [ 417.894810][T21036] macvlan2: entered promiscuous mode [ 417.900191][T21036] macvlan2: entered allmulticast mode [ 417.939312][T21041] netlink: 'syz.0.4468': attribute type 1 has an invalid length. [ 418.256974][T21059] syzkaller0: entered promiscuous mode [ 418.263045][T21059] syzkaller0: entered allmulticast mode [ 418.294025][T21070] xt_TCPMSS: Only works on TCP SYN packets [ 418.336404][T21070] __nla_validate_parse: 12 callbacks suppressed [ 418.336425][T21070] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4475'. [ 418.840444][T21106] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4484'. [ 420.199836][T21115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.337580][T21120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4488'. [ 420.356491][T21123] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4489'. [ 420.366068][T21120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4488'. [ 420.377682][T21123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4489'. [ 420.399914][T21123] netlink: 31 bytes leftover after parsing attributes in process `syz.2.4489'. [ 420.412017][T21130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4490'. [ 420.431259][T21123] netlink: 'syz.2.4489': attribute type 3 has an invalid length. [ 420.452718][T21123] netlink: 'syz.2.4489': attribute type 2 has an invalid length. [ 420.460607][T21123] netlink: 31 bytes leftover after parsing attributes in process `syz.2.4489'. [ 420.670690][T21141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4495'. [ 421.063959][T21162] netlink: 'syz.0.4500': attribute type 62 has an invalid length. [ 421.222633][T21169] netlink: 'syz.5.4504': attribute type 1 has an invalid length. [ 421.679122][T21185] openvswitch: netlink: Missing key (keys=40, expected=100) [ 421.707163][T21184] erspan0: left allmulticast mode [ 421.848169][T21189] tc_dump_action: action bad kind [ 422.387933][T21226] macvtap1: entered promiscuous mode [ 422.403099][T21226] macvtap1: entered allmulticast mode [ 422.456732][T21233] batadv_slave_1: entered promiscuous mode [ 422.546293][T21242] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 422.596202][T21242] batadv_slave_1: left promiscuous mode [ 422.705848][T21253] xt_TCPMSS: Only works on TCP SYN packets [ 422.963976][ T30] audit: type=1804 audit(1762519162.176:8): pid=21273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4532" name="/newroot/242/cgroup.controllers" dev="tmpfs" ino=1254 res=1 errno=0 [ 422.993553][ T30] audit: type=1800 audit(1762519162.196:9): pid=21273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4532" name="cgroup.controllers" dev="tmpfs" ino=1254 res=0 errno=0 [ 423.188648][T21288] block nbd1: NBD_DISCONNECT [ 423.194819][T21288] block nbd1: Send disconnect failed -32 [ 423.203008][T21288] block nbd1: shutting down sockets [ 423.211141][T21284] netlink: 'syz.3.4536': attribute type 26 has an invalid length. [ 423.350937][T21294] netlink: 'syz.3.4538': attribute type 1 has an invalid length. [ 423.388374][T21294] 8021q: adding VLAN 0 to HW filter on device bond6 [ 423.433904][T21294] bond6: (slave veth3): Enslaving as an active interface with a down link [ 423.506976][T21294] veth5: entered promiscuous mode [ 423.529679][T21294] bond6: (slave veth5): Enslaving as an active interface with a down link [ 423.653497][T21310] vlan3: entered allmulticast mode [ 423.688796][T21310] bond6: entered allmulticast mode [ 423.709543][T21310] bond6: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 423.841987][T21325] __nla_validate_parse: 9 callbacks suppressed [ 423.842011][T21325] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4545'. [ 423.889364][T21327] netlink: 'syz.3.4549': attribute type 11 has an invalid length. [ 423.917958][T21327] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4549'. [ 424.273997][T21350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4557'. [ 424.337073][T21350] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4557'. [ 424.495741][T21369] tipc: Enabling of bearer rejected, failed to enable media [ 424.522300][T21366] netdevsim netdevsim3: Direct firmware load for lookup_extent_enter failed with error -2 [ 424.533580][T21366] netdevsim netdevsim3: Falling back to sysfs fallback for: lookup_extent_enter [ 424.726067][T21388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4565'. [ 424.928555][T21403] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4567'. [ 424.978861][T21386] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4567'. [ 425.134538][T21412] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4576'. [ 425.170072][T21412] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 425.276216][T21425] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 425.319537][T21427] openvswitch: netlink: IP tunnel dst address not specified [ 425.439979][T21433] pimreg3: entered allmulticast mode [ 425.480071][T21437] netlink: 'syz.2.4583': attribute type 10 has an invalid length. [ 425.544903][T21437] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 425.591476][ T30] audit: type=1107 audit(1762519164.796:10): pid=21435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 425.615329][T21450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4585'. [ 425.724496][ T7423] batman_adv: batadv1: IGMP Querier appeared [ 425.730586][ T7423] batman_adv: batadv1: MLD Querier appeared [ 425.786636][T21466] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4588'. [ 425.840939][T21469] nbd: must specify at least one socket [ 425.874260][T21450] 8021q: adding VLAN 0 to HW filter on device bond4 [ 426.067075][T21483] netlink: 'syz.5.4591': attribute type 1 has an invalid length. [ 426.152095][T21488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.189267][T21488] block nbd1: Unsupported socket: should be TCP or UNIX. [ 426.217603][T21494] netlink: 'syz.5.4591': attribute type 1 has an invalid length. [ 426.709813][T21524] bridge4: entered allmulticast mode [ 427.066974][T21540] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 427.138180][T21541] syzkaller0: entered promiscuous mode [ 427.146454][T21541] syzkaller0: entered allmulticast mode [ 427.632431][ T812] IPVS: starting estimator thread 0... [ 427.715368][T21582] netlink: 'syz.0.4619': attribute type 1 has an invalid length. [ 427.731594][T21580] IPVS: using max 27 ests per chain, 64800 per kthread [ 427.900007][T21585] bond7 (unregistering): Released all slaves [ 427.969826][T21594] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 428.050600][T21604] IPVS: Unknown mcast interface: vcan0 [ 428.110022][T21607] IPVS: Unknown mcast interface: vcan0 [ 428.330407][T21616] vlan2: entered promiscuous mode [ 428.336968][T21616] vlan2: entered allmulticast mode [ 428.342773][T21616] hsr_slave_1: entered allmulticast mode [ 428.454544][T21625] netlink: 'syz.1.4632': attribute type 21 has an invalid length. [ 428.657071][T21645] netlink: 'syz.2.4639': attribute type 2 has an invalid length. [ 428.866354][T21656] netlink: 'syz.2.4642': attribute type 63 has an invalid length. [ 428.906699][T21656] netlink: 'syz.2.4642': attribute type 63 has an invalid length. [ 428.942829][T21656] batadv_slave_1: entered promiscuous mode [ 428.950103][T21655] batadv_slave_1: left promiscuous mode [ 429.341077][T21685] __nla_validate_parse: 18 callbacks suppressed [ 429.341101][T21685] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4653'. [ 429.575201][T21697] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4656'. [ 429.667534][ T7423] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.690244][ T7423] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.752992][ T7423] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.778686][ T7423] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.035475][T21715] tipc: Enabled bearer , priority 0 [ 430.046705][T21715] syzkaller0: entered promiscuous mode [ 430.053058][T21715] syzkaller0: entered allmulticast mode [ 430.088206][T21714] tipc: Resetting bearer [ 430.142609][T21714] tipc: Disabling bearer [ 430.355635][T21734] syzkaller1: entered promiscuous mode [ 430.361293][T21734] syzkaller1: entered allmulticast mode [ 430.379909][T21742] tipc: Enabling of bearer rejected, failed to enable media [ 430.446989][T21742] netlink: 'syz.2.4674': attribute type 1 has an invalid length. [ 430.457036][T21742] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4674'. [ 430.527564][T21748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4675'. [ 430.577745][T21748] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4675'. [ 430.792852][T21769] tipc: Enabling of bearer rejected, failed to enable media [ 430.997500][T21784] netlink: 'syz.5.4685': attribute type 21 has an invalid length. [ 431.132231][T21792] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4689'. [ 431.153321][T21788] syzkaller0: entered promiscuous mode [ 431.158870][T21788] syzkaller0: entered allmulticast mode [ 431.165884][T21793] netlink: 'syz.3.4688': attribute type 1 has an invalid length. [ 431.282167][T21788] netlink: 'syz.2.4686': attribute type 6 has an invalid length. [ 431.282383][T21800] netlink: 'syz.5.4691': attribute type 10 has an invalid length. [ 431.318372][T21799] bond7: (slave gretap3): making interface the new active one [ 431.342666][T21799] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 431.519526][T21816] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4695'. [ 431.610642][T21823] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4696'. [ 432.019969][T21847] tipc: Enabled bearer , priority 0 [ 432.036710][T21847] syzkaller0: entered promiscuous mode [ 432.054546][T21847] syzkaller0: entered allmulticast mode [ 432.084320][T21847] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 432.164623][T21847] tipc: Resetting bearer [ 432.184879][T21860] tipc: Enabling of bearer rejected, failed to enable media [ 432.212014][T21866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4707'. [ 432.245996][T21846] tipc: Resetting bearer [ 432.273886][T21869] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4708'. [ 432.311850][T21846] tipc: Disabling bearer [ 432.390201][T21881] smc: net device vcan0 applied user defined pnetid SYZ1 [ 432.490526][T21885] gretap5: entered promiscuous mode [ 432.510858][T21885] gretap5: entered allmulticast mode [ 432.987562][T21900] syzkaller0: entered promiscuous mode [ 432.999721][T21900] syzkaller0: entered allmulticast mode [ 433.091833][T21912] bond5: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 433.109534][T21912] bond5: option primary: mode dependency failed, not supported in mode 802.3ad(4) [ 433.123766][T21912] bond5 (unregistering): Released all slaves [ 433.381003][T21936] netlink: 'syz.5.4723': attribute type 2 has an invalid length. [ 433.403910][T21936] 9: entered promiscuous mode [ 433.410560][T21931] pim6reg1: entered promiscuous mode [ 433.416075][T21931] pim6reg1: entered allmulticast mode [ 433.479984][T21941] netlink: 'syz.2.4726': attribute type 4 has an invalid length. [ 434.067730][T21963] openvswitch: netlink: Key type 234 is out of range max 32 [ 434.353392][T21970] __nla_validate_parse: 13 callbacks suppressed [ 434.353413][T21970] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4734'. [ 434.610552][T21981] bond5: option arp_all_targets: invalid value (18446744073709551613) [ 434.637406][T21981] bond5 (unregistering): Released all slaves [ 434.856214][T22004] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 434.907185][T22004] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4747'. [ 434.970024][T22007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4749'. [ 435.023205][T22013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4751'. [ 435.074233][T22017] xt_CT: You must specify a L4 protocol and not use inversions on it [ 435.099266][T22017] macvlan1: mtu less than device minimum [ 435.193980][T22025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4755'. [ 435.236930][T22025] netlink: 'syz.0.4755': attribute type 1 has an invalid length. [ 435.353237][T22038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4757'. [ 435.457246][T22041] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4758'. [ 435.527090][T22044] netlink: 'syz.3.4760': attribute type 1 has an invalid length. [ 435.570787][T22044] 8021q: adding VLAN 0 to HW filter on device bond8 [ 435.580900][T22047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4759'. [ 435.605721][T22047] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 435.628370][T22047] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4759'. [ 435.659911][T22050] netlink: 'syz.1.4761': attribute type 10 has an invalid length. [ 435.914788][T22063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.005896][T22065] tipc: Enabled bearer , priority 0 [ 436.035800][T22065] syzkaller0: entered promiscuous mode [ 436.045049][T22065] syzkaller0: entered allmulticast mode [ 436.119195][T22065] tipc: Resetting bearer [ 436.163934][T22064] tipc: Resetting bearer [ 436.188776][T22064] tipc: Disabling bearer [ 436.321736][T22087] blkio.reset_stats is deprecated [ 436.460428][T22093] syzkaller0: entered promiscuous mode [ 436.468417][T22093] syzkaller0: entered allmulticast mode [ 436.496135][T22096] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 436.980220][T22133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4788'. [ 437.085525][T22136] gtp0: entered promiscuous mode [ 437.090639][T22136] gtp0: entered allmulticast mode [ 437.344075][T22150] vlan0: entered promiscuous mode [ 437.356569][T22150] bridge0: entered promiscuous mode [ 437.478834][T22160] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 437.488415][T22160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.723073][T22176] SET target dimension over the limit! [ 437.821330][T22182] lo speed is unknown, defaulting to 1000 [ 437.839261][T22182] lo speed is unknown, defaulting to 1000 [ 437.857387][T22182] lo speed is unknown, defaulting to 1000 [ 437.867412][T22187] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 437.874359][T22187] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 437.950754][T22189] netlink: 'syz.2.4806': attribute type 33 has an invalid length. [ 438.183955][T22182] infiniband sz1: set active [ 438.188819][T22182] infiniband sz1: added lo [ 438.201522][ T9472] lo speed is unknown, defaulting to 1000 [ 438.226010][T22203] batadv_slave_1: entered promiscuous mode [ 438.275864][T22182] RDS/IB: sz1: added [ 438.279987][T22182] smc: adding ib device sz1 with port count 1 [ 438.296973][T22182] smc: ib device sz1 port 1 has no pnetid [ 438.312839][T22194] batadv_slave_1: left promiscuous mode [ 438.322771][ T9457] lo speed is unknown, defaulting to 1000 [ 438.331120][T22205] netlink: 'syz.5.4810': attribute type 32 has an invalid length. [ 438.377842][T22205] bond3: option coupled_control: invalid value (52) [ 438.388566][T22205] bond3 (unregistering): Released all slaves [ 438.417479][T22182] lo speed is unknown, defaulting to 1000 [ 438.973860][T22182] lo speed is unknown, defaulting to 1000 [ 439.184470][T22247] openvswitch: netlink: Key 3 has unexpected len 8 expected 4 [ 439.336688][T22248] delete_channel: no stack [ 439.508355][T22252] hsr_slave_0 (unregistering): left promiscuous mode [ 439.626593][T22182] lo speed is unknown, defaulting to 1000 [ 439.824834][T22278] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 439.876132][T22280] netlink: 'syz.5.4836': attribute type 6 has an invalid length. [ 440.000997][T22283] __nla_validate_parse: 12 callbacks suppressed [ 440.001019][T22283] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4837'. [ 440.033596][T22182] lo speed is unknown, defaulting to 1000 [ 440.045054][T22287] netlink: 'syz.5.4839': attribute type 1 has an invalid length. [ 440.088743][T22283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4837'. [ 440.108239][T22283] gtp0: entered promiscuous mode [ 440.114293][T22283] gtp0: entered allmulticast mode [ 440.146973][T22291] netlink: 'syz.5.4840': attribute type 1 has an invalid length. [ 440.407692][T22299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4844'. [ 440.441117][T22303] netlink: 'syz.3.4843': attribute type 1 has an invalid length. [ 440.492323][T22305] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 440.533716][T22309] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4844'. [ 440.584766][T22305] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4844'. [ 440.595659][T22299] smc: removing net device vcan0 with user defined pnetid SYZ1 [ 440.608207][T22182] lo speed is unknown, defaulting to 1000 [ 440.830394][T22318] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4848'. [ 440.834624][T22321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4849'. [ 441.259040][T22182] lo speed is unknown, defaulting to 1000 [ 441.399703][T22353] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4861'. [ 441.510493][T22359] Cannot find del_set index 49151 as target [ 441.577390][T22360] bond0: (slave netdevsim0): Releasing backup interface [ 441.644719][T22360] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.687754][T22360] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.768501][T21875] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.805730][T22371] netlink: 'syz.0.4867': attribute type 12 has an invalid length. [ 441.941606][T22371] bond6: option primary_reselect: invalid value (255) [ 441.950878][T22371] bond6 (unregistering): Released all slaves [ 441.980231][T22182] lo speed is unknown, defaulting to 1000 [ 442.432570][T22395] netlink: 'syz.5.4873': attribute type 4 has an invalid length. [ 442.443669][T22182] lo speed is unknown, defaulting to 1000 [ 442.620776][T22404] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 442.708798][T22406] A link change request failed with some changes committed already. Interface Z7nz>RA may have been left with an inconsistent configuration, please check. [ 442.891713][T22415] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4881'. [ 442.947916][T22419] tipc: Enabled bearer , priority 0 [ 442.992948][T22419] syzkaller0: entered promiscuous mode [ 442.998644][T22419] syzkaller0: entered allmulticast mode [ 443.029127][T22418] tipc: Resetting bearer [ 443.703759][T22434] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 443.712422][T22434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.618514][T22418] tipc: Disabling bearer [ 446.358730][T22456] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.4891'. [ 446.644544][T22430] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 446.673315][T22430] veth3: left allmulticast mode [ 446.678704][T22430] veth5: left allmulticast mode [ 446.860846][T22430] gtp0: left promiscuous mode [ 446.866161][T22430] gtp0: left allmulticast mode [ 446.891272][T22440] tipc: Enabled bearer , priority 0 [ 446.929590][T22443] syzkaller0: entered promiscuous mode [ 446.954876][T22443] syzkaller0: entered allmulticast mode [ 446.982481][T22455] dvmrp0: left allmulticast mode [ 447.058781][T21873] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.075748][T21873] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.114052][T22466] netlink: 'syz.3.4895': attribute type 10 has an invalid length. [ 447.122901][T22443] tipc: Resetting bearer [ 447.148371][T22469] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4896'. [ 447.165734][T22469] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4896'. [ 447.177428][T22443] tipc: Disabling bearer [ 447.189935][T22463] netlink: 340 bytes leftover after parsing attributes in process `syz.1.4894'. [ 447.212278][T21873] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.235435][T21873] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.266454][T21873] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.293742][T21873] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.335489][ T50] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.373789][ T50] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.491904][T22480] A link change request failed with some changes committed already. Interface Z7nz>RA may have been left with an inconsistent configuration, please check. [ 447.638560][T22494] netlink: 'syz.5.4902': attribute type 10 has an invalid length. [ 447.649990][T22494] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.660365][T22494] bond0: (slave team0): Enslaving as an active interface with an up link [ 447.991027][T22521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4910'. [ 448.004071][T22519] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4908'. [ 448.077384][T22527] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 448.129592][ T9472] IPVS: starting estimator thread 0... [ 448.140089][T22529] syzkaller1: entered promiscuous mode [ 448.148175][T22529] syzkaller1: entered allmulticast mode [ 448.172910][ T50] syzkaller1: tun_net_xmit 48 [ 448.236757][T22533] netlink: 'syz.1.4914': attribute type 11 has an invalid length. [ 448.242204][T22534] IPVS: using max 25 ests per chain, 60000 per kthread [ 448.245545][T22539] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4915'. [ 448.262241][T22533] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4914'. [ 448.472110][T22550] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4918'. [ 448.484074][T22550] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4918'. [ 448.566479][T22550] gtp0: entered promiscuous mode [ 448.573844][T22550] gtp0: entered allmulticast mode [ 448.819300][T22575] netlink: 'syz.0.4928': attribute type 11 has an invalid length. [ 449.078075][T22598] xt_recent: Unsupported userspace flags (000000b1) [ 449.142227][T22603] veth0_to_team: entered promiscuous mode [ 449.595961][T22631] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 449.615887][T22631] bond9 (unregistering): Released all slaves [ 449.819014][T22644] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 449.981003][T22651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.044299][T22658] netlink: 'syz.1.4954': attribute type 11 has an invalid length. [ 450.582376][T22694] netlink: 'syz.5.4964': attribute type 1 has an invalid length. [ 450.832878][T22711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.933966][T22716] IPv6: NLM_F_REPLACE set, but no existing node found! [ 451.175126][T22734] netlink: 'syz.3.4974': attribute type 4 has an invalid length. [ 451.329761][T22742] netlink: 'syz.3.4978': attribute type 26 has an invalid length. [ 451.377808][T22742] openvswitch: netlink: IP tunnel dst address not specified [ 451.470254][T22751] netlink: 'syz.2.4981': attribute type 11 has an invalid length. [ 451.575441][T22764] __nla_validate_parse: 11 callbacks suppressed [ 451.575463][T22764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4984'. [ 451.645431][T22766] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4985'. [ 451.854015][T22776] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4988'. [ 452.951688][T22839] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5006'. [ 453.180200][T22850] syzkaller0: entered promiscuous mode [ 453.202337][T22850] syzkaller0: entered allmulticast mode [ 453.253099][T22859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5011'. [ 453.282898][T22861] netlink: 'syz.0.5012': attribute type 21 has an invalid length. [ 453.319852][T22861] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5012'. [ 453.439084][T22867] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 453.448732][T22867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.556543][T22876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5015'. [ 453.576503][T22876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5015'. [ 453.596907][T22877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.715655][T22876] Z7nz>RA speed is unknown, defaulting to 1000 [ 453.827429][T22883] bond6: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 454.062679][T22890] netlink: 165 bytes leftover after parsing attributes in process `syz.0.5021'. [ 454.073990][T22890] sctp: [Deprecated]: syz.0.5021 (pid 22890) Use of struct sctp_assoc_value in delayed_ack socket option. [ 454.073990][T22890] Use struct sctp_sack_info instead [ 454.099518][T22876] wg1 speed is unknown, defaulting to 1000 [ 454.163215][T22893] netlink: 'syz.3.5023': attribute type 2 has an invalid length. [ 454.401667][T22894] team0 (unregistering): Port device team_slave_0 removed [ 454.424051][T22894] team0 (unregistering): Port device team_slave_1 removed [ 454.444172][T22894] team0 (unregistering): Port device geneve0 removed [ 454.466959][T22876] lo speed is unknown, defaulting to 1000 [ 454.780003][T22923] netlink: 300 bytes leftover after parsing attributes in process `syz.3.5031'. [ 454.860038][T21871] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.881885][T21871] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.943923][T21871] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.983364][T21871] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.397391][T22942] netlink: 'syz.0.5036': attribute type 30 has an invalid length. [ 455.474954][T22956] x_tables: duplicate underflow at hook 2 [ 456.495805][T22994] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 456.858615][T23014] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.866533][T23014] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.901176][T23014] __nla_validate_parse: 6 callbacks suppressed [ 456.901197][T23014] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5055'. [ 457.018126][ T50] tipc: Subscription rejected, illegal request [ 457.146362][T23026] SET target dimension over the limit! [ 457.169124][T23031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5062'. [ 457.268469][T23033] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 457.367311][T23042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5066'. [ 457.614105][T23054] tipc: Enabled bearer , priority 0 [ 457.638225][T23052] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.858057][T23070] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5072'. [ 458.312571][T23097] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5084'. [ 458.313651][T23047] tipc: Disabling bearer [ 458.344405][T23100] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5082'. [ 458.367215][T23100] tipc: Enabled bearer , priority 0 [ 458.378051][T23100] syzkaller0: entered promiscuous mode [ 458.402265][T23100] syzkaller0: entered allmulticast mode [ 458.462303][T23100] tipc: Resetting bearer [ 458.481082][T23095] tipc: Resetting bearer [ 458.534385][T23095] tipc: Disabling bearer [ 458.585807][T23110] netlink: 'syz.0.5086': attribute type 10 has an invalid length. [ 458.625640][T23110] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 458.672348][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.704939][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.723756][T23114] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:0 [ 458.725683][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.770098][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.894173][T23123] netlink: 'syz.2.5093': attribute type 1 has an invalid length. [ 458.896521][T23120] tipc: Enabled bearer , priority 0 [ 458.958987][T23123] 8021q: adding VLAN 0 to HW filter on device bond5 [ 458.968319][T23120] syzkaller0: entered promiscuous mode [ 458.978796][T23120] syzkaller0: entered allmulticast mode [ 459.007246][T23123] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5093'. [ 459.009694][T23120] tipc: Resetting bearer [ 459.034812][T23119] tipc: Resetting bearer [ 459.081302][T23119] tipc: Disabling bearer [ 459.218188][T23138] 8021q: adding VLAN 0 to HW filter on device bond5 [ 459.285984][T23148] xt_CONNSECMARK: invalid mode: 0 [ 459.346863][T23151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.473869][T23154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5102'. [ 459.584527][T23161] batadv0: entered allmulticast mode [ 460.177267][T23191] netlink: 'syz.2.5112': attribute type 4 has an invalid length. [ 460.380187][T23204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5113'. [ 460.392088][T23204] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5113'. [ 460.475351][T23209] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20001 [ 462.195305][T23229] __nla_validate_parse: 2 callbacks suppressed [ 462.195320][T23229] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5122'. [ 462.210720][T23229] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5122'. [ 490.301522][T22457] page_pool_release_retry() stalled pool shutdown: id 100, 1 inflight 60 sec [ 491.421795][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 558.008181][T21873] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.088341][T21873] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.154527][T21873] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.243231][T21873] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.316369][T21871] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.334439][T21871] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.349329][T21871] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.365253][ T50] netdevsim netdevsim4 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.374580][T21873] bridge_slave_1: left allmulticast mode [ 558.380238][T21873] bridge_slave_1: left promiscuous mode [ 558.386542][T21873] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.396514][T21873] bridge_slave_0: left allmulticast mode [ 558.402784][T21873] bridge_slave_0: left promiscuous mode [ 558.409890][T21873] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.649187][T21873] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 558.676678][T21873] team0: Port device geneve0 removed [ 558.933049][T21873] bond10 (unregistering): (slave bridge4): Releasing backup interface [ 558.941275][T21873] bridge4 (unregistering): left promiscuous mode [ 559.154780][T21873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.163958][T21873] bond_slave_0: left promiscuous mode [ 559.170721][T21873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.180494][T21873] bond_slave_1: left promiscuous mode [ 559.188433][T21873] bond0 (unregistering): (slave bond11): Releasing backup interface [ 559.197891][T21873] bond11 (unregistering): left promiscuous mode [ 559.205539][T21873] bond0 (unregistering): Released all slaves [ 559.314284][T21873] bond1 (unregistering): Released all slaves [ 559.330261][T21873] bond2 (unregistering): Released all slaves [ 559.345954][T21873] bond3 (unregistering): Released all slaves [ 559.364409][T21873] bond4 (unregistering): Released all slaves [ 559.383137][T21873] bond5 (unregistering): Released all slaves [ 559.482025][T21873] bond6 (unregistering): Released all slaves [ 559.585249][T21873] bond7 (unregistering): Released all slaves [ 559.602292][T21873] bond8 (unregistering): Released all slaves [ 559.617045][T21873] bond9 (unregistering): Released all slaves [ 559.722303][T21873] bond10 (unregistering): Released all slaves [ 559.823044][T21873] bond11 (unregistering): Released all slaves [ 559.927373][T21873] bond12 (unregistering): Released all slaves [ 561.664591][T21873] tipc: Left network mode [ 617.502529][ T31] INFO: task kworker/0:2:981 blocked for more than 143 seconds. [ 617.511520][ T31] Not tainted syzkaller #0 [ 617.516517][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 617.525463][ T31] task:kworker/0:2 state:D stack:21752 pid:981 tgid:981 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 617.537568][ T31] Workqueue: events rfkill_sync_work [ 617.543065][ T31] Call Trace: [ 617.546368][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 617.549304][ T31] __schedule+0x1798/0x4cc0 [ 617.554290][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 617.560125][ T31] ? __pfx___schedule+0x10/0x10 [ 617.565517][ T31] ? schedule+0x91/0x360 [ 617.569831][ T31] schedule+0x165/0x360 [ 617.574180][ T31] schedule_preempt_disabled+0x13/0x30 [ 617.579680][ T31] __mutex_lock+0x7e6/0x1350 [ 617.584626][ T31] ? __mutex_lock+0x5bb/0x1350 [ 617.589442][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 617.595936][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 617.621432][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 617.641404][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 617.647423][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 617.669225][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 617.676572][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 617.683647][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 617.689424][ T31] rfkill_set_block+0x1d2/0x440 [ 617.695387][ T31] rfkill_sync_work+0x114/0x200 [ 617.700288][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 617.707390][ T31] process_scheduled_works+0xae1/0x17b0 [ 617.713439][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 617.719473][ T31] worker_thread+0x8a0/0xda0 [ 617.724157][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 617.730538][ T31] ? __kthread_parkme+0x7b/0x200 [ 617.735590][ T31] kthread+0x711/0x8a0 [ 617.739701][ T31] ? __pfx_worker_thread+0x10/0x10 [ 617.745709][ T31] ? __pfx_kthread+0x10/0x10 [ 617.750354][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 617.755649][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 617.760883][ T31] ? __pfx_kthread+0x10/0x10 [ 617.765586][ T31] ret_from_fork+0x4bc/0x870 [ 617.770205][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 617.775473][ T31] ? __switch_to_asm+0x39/0x70 [ 617.780271][ T31] ? __switch_to_asm+0x33/0x70 [ 617.785191][ T31] ? __pfx_kthread+0x10/0x10 [ 617.789832][ T31] ret_from_fork_asm+0x1a/0x30 [ 617.794685][ T31] [ 617.797841][ T31] INFO: task kworker/0:8:9472 blocked for more than 143 seconds. [ 617.805645][ T31] Not tainted syzkaller #0 [ 617.810594][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 617.819366][ T31] task:kworker/0:8 state:D stack:24200 pid:9472 tgid:9472 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 617.834046][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 617.840754][ T31] Call Trace: [ 617.844132][ T31] [ 617.847086][ T31] __schedule+0x1798/0x4cc0 [ 617.851677][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 617.858048][ T31] ? __pfx___schedule+0x10/0x10 [ 617.863032][ T31] ? schedule+0x91/0x360 [ 617.867314][ T31] schedule+0x165/0x360 [ 617.871570][ T31] schedule_preempt_disabled+0x13/0x30 [ 617.877062][ T31] __mutex_lock+0x7e6/0x1350 [ 617.881750][ T31] ? __mutex_lock+0x5bb/0x1350 [ 617.886554][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 617.892868][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 617.897935][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 617.903988][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 617.909748][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 617.916024][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 617.921865][ T31] process_scheduled_works+0xae1/0x17b0 [ 617.927488][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 617.933672][ T31] worker_thread+0x8a0/0xda0 [ 617.938331][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 617.945016][ T31] ? __kthread_parkme+0x7b/0x200 [ 617.950039][ T31] kthread+0x711/0x8a0 [ 617.954204][ T31] ? __pfx_worker_thread+0x10/0x10 [ 617.959356][ T31] ? __pfx_kthread+0x10/0x10 [ 617.964083][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 617.969327][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 617.974632][ T31] ? __pfx_kthread+0x10/0x10 [ 617.979258][ T31] ret_from_fork+0x4bc/0x870 [ 617.983921][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 617.989062][ T31] ? __switch_to_asm+0x39/0x70 [ 617.993933][ T31] ? __switch_to_asm+0x33/0x70 [ 617.998720][ T31] ? __pfx_kthread+0x10/0x10 [ 618.003371][ T31] ret_from_fork_asm+0x1a/0x30 [ 618.008177][ T31] [ 618.011330][ T31] INFO: task syz.5.5051:22998 blocked for more than 143 seconds. [ 618.019068][ T31] Not tainted syzkaller #0 [ 618.024093][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 618.032851][ T31] task:syz.5.5051 state:D stack:25960 pid:22998 tgid:22998 ppid:15370 task_flags:0x400040 flags:0x00080002 [ 618.044856][ T31] Call Trace: [ 618.048139][ T31] [ 618.051076][ T31] __schedule+0x1798/0x4cc0 [ 618.055917][ T31] ? validate_chain+0x897/0x2140 [ 618.060906][ T31] ? __lock_acquire+0xab9/0xd20 [ 618.066010][ T31] ? __pfx___schedule+0x10/0x10 [ 618.070932][ T31] ? schedule+0x91/0x360 [ 618.075280][ T31] schedule+0x165/0x360 [ 618.079479][ T31] schedule_timeout+0x9a/0x270 [ 618.084373][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 618.089792][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 618.095083][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 618.100319][ T31] ? wait_for_completion+0x267/0x5d0 [ 618.105702][ T31] wait_for_completion+0x2bf/0x5d0 [ 618.110862][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 618.116594][ T31] ? __flush_work+0xd2/0xbc0 [ 618.121218][ T31] ? __flush_work+0xd2/0xbc0 [ 618.125922][ T31] __flush_work+0x9b9/0xbc0 [ 618.130461][ T31] ? __flush_work+0xd2/0xbc0 [ 618.135127][ T31] ? __pfx___flush_work+0x10/0x10 [ 618.140185][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 618.145687][ T31] ? __pfx___cancel_work+0x10/0x10 [ 618.150842][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 618.156553][ T31] __cancel_work_sync+0xbe/0x110 [ 618.161789][ T31] rfkill_unregister+0x92/0x220 [ 618.166687][ T31] nfc_unregister_device+0x96/0x2a0 [ 618.171986][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 618.177752][ T31] virtual_ncidev_close+0x56/0x90 [ 618.182880][ T31] __fput+0x44c/0xa70 [ 618.186915][ T31] task_work_run+0x1d4/0x260 [ 618.191593][ T31] ? __pfx_task_work_run+0x10/0x10 [ 618.196739][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 618.202317][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 618.207638][ T31] do_syscall_64+0x2bd/0xfa0 [ 618.212319][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 618.217558][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.223696][ T31] ? clear_bhb_loop+0x60/0xb0 [ 618.228406][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.234399][ T31] RIP: 0033:0x7fe71578f6c9 [ 618.238859][ T31] RSP: 002b:00007ffd66b2c738 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 618.247408][ T31] RAX: 0000000000000000 RBX: 000000000006f783 RCX: 00007fe71578f6c9 [ 618.255461][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 618.263549][ T31] RBP: 00007fe7159e7da0 R08: 0000000000000001 R09: 0000001e66b2ca2f [ 618.271801][ T31] R10: 0000001b33120000 R11: 0000000000000246 R12: 00007fe7159e5fac [ 618.279804][ T31] R13: 00007fe7159e5fa0 R14: ffffffffffffffff R15: 00007ffd66b2c850 [ 618.287890][ T31] [ 618.290985][ T31] INFO: task syz.0.5105:23164 blocked for more than 144 seconds. [ 618.302497][ T31] Not tainted syzkaller #0 [ 618.307487][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 618.317227][ T31] task:syz.0.5105 state:D stack:27688 pid:23164 tgid:23160 ppid:15940 task_flags:0x400140 flags:0x00080002 [ 618.330056][ T31] Call Trace: [ 618.334122][ T31] [ 618.337087][ T31] __schedule+0x1798/0x4cc0 [ 618.341725][ T31] ? __lock_acquire+0xab9/0xd20 [ 618.346615][ T31] ? __lock_acquire+0xab9/0xd20 [ 618.351566][ T31] ? __pfx___schedule+0x10/0x10 [ 618.356466][ T31] ? schedule+0x91/0x360 [ 618.360735][ T31] schedule+0x165/0x360 [ 618.365055][ T31] schedule_preempt_disabled+0x13/0x30 [ 618.370579][ T31] __mutex_lock+0x7e6/0x1350 [ 618.375410][ T31] ? __mutex_lock+0x5bb/0x1350 [ 618.380233][ T31] ? rfkill_fop_open+0x12d/0x820 [ 618.385788][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 618.390879][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 618.397025][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 618.403395][ T31] rfkill_fop_open+0x12d/0x820 [ 618.408229][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 618.413721][ T31] misc_open+0x2d5/0x350 [ 618.418004][ T31] chrdev_open+0x4cc/0x5e0 [ 618.422578][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 618.427553][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 618.434035][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 618.438997][ T31] do_dentry_open+0x953/0x13f0 [ 618.443962][ T31] vfs_open+0x3b/0x340 [ 618.448067][ T31] ? path_openat+0x2ecd/0x3830 [ 618.452994][ T31] path_openat+0x2ee5/0x3830 [ 618.457650][ T31] ? __pfx_path_openat+0x10/0x10 [ 618.462842][ T31] do_filp_open+0x1fa/0x410 [ 618.467383][ T31] ? __lock_acquire+0xab9/0xd20 [ 618.472315][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 618.477387][ T31] ? _raw_spin_unlock+0x28/0x50 [ 618.482483][ T31] ? alloc_fd+0x64c/0x6c0 [ 618.486864][ T31] do_sys_openat2+0x121/0x1c0 [ 618.491896][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 618.497140][ T31] ? rcu_is_watching+0x15/0xb0 [ 618.502052][ T31] __x64_sys_openat+0x138/0x170 [ 618.506949][ T31] do_syscall_64+0xfa/0xfa0 [ 618.511794][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 618.517037][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.523281][ T31] ? clear_bhb_loop+0x60/0xb0 [ 618.527998][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.534077][ T31] RIP: 0033:0x7f946df8f6c9 [ 618.538518][ T31] RSP: 002b:00007f946ed4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 618.547160][ T31] RAX: ffffffffffffffda RBX: 00007f946e1e6090 RCX: 00007f946df8f6c9 [ 618.555219][ T31] RDX: 00000000000a8000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 618.563421][ T31] RBP: 00007f946e011f91 R08: 0000000000000000 R09: 0000000000000000 [ 618.571539][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.579549][ T31] R13: 00007f946e1e6128 R14: 00007f946e1e6090 R15: 00007ffdfb1df7d8 [ 618.588316][ T31] [ 618.591932][ T31] INFO: task syz.1.5110:23179 blocked for more than 144 seconds. [ 618.599670][ T31] Not tainted syzkaller #0 [ 618.606330][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 618.615415][ T31] task:syz.1.5110 state:D stack:26088 pid:23179 tgid:23175 ppid:17102 task_flags:0x400140 flags:0x00080002 [ 618.627591][ T31] Call Trace: [ 618.630882][ T31] [ 618.633964][ T31] __schedule+0x1798/0x4cc0 [ 618.638509][ T31] ? security_file_open+0xb1/0x270 [ 618.643783][ T31] ? __lock_acquire+0xab9/0xd20 [ 618.648674][ T31] ? __lock_acquire+0xab9/0xd20 [ 618.653698][ T31] ? __pfx___schedule+0x10/0x10 [ 618.658602][ T31] ? schedule+0x91/0x360 [ 618.662980][ T31] schedule+0x165/0x360 [ 618.667173][ T31] schedule_preempt_disabled+0x13/0x30 [ 618.672784][ T31] __mutex_lock+0x7e6/0x1350 [ 618.677453][ T31] ? __mutex_lock+0x5bb/0x1350 [ 618.682424][ T31] ? misc_open+0x51/0x350 [ 618.686822][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 618.692266][ T31] misc_open+0x51/0x350 [ 618.696477][ T31] chrdev_open+0x4cc/0x5e0 [ 618.700910][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 618.706035][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 618.712548][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 618.717519][ T31] do_dentry_open+0x953/0x13f0 [ 618.722643][ T31] vfs_open+0x3b/0x340 [ 618.726764][ T31] ? path_openat+0x2ecd/0x3830 [ 618.731728][ T31] path_openat+0x2ee5/0x3830 [ 618.736396][ T31] ? __pfx_path_openat+0x10/0x10 [ 618.741479][ T31] do_filp_open+0x1fa/0x410 [ 618.746020][ T31] ? __lock_acquire+0xab9/0xd20 [ 618.750880][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 618.756030][ T31] ? _raw_spin_unlock+0x28/0x50 [ 618.760953][ T31] ? alloc_fd+0x64c/0x6c0 [ 618.765464][ T31] do_sys_openat2+0x121/0x1c0 [ 618.770186][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 618.775543][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 618.780796][ T31] __x64_sys_openat+0x138/0x170 [ 618.786500][ T31] do_syscall_64+0xfa/0xfa0 [ 618.791068][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 618.796374][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.802635][ T31] ? clear_bhb_loop+0x60/0xb0 [ 618.807353][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.813384][ T31] RIP: 0033:0x7ff62958f6c9 [ 618.817828][ T31] RSP: 002b:00007ff62a350038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 618.826318][ T31] RAX: ffffffffffffffda RBX: 00007ff6297e6090 RCX: 00007ff62958f6c9 [ 618.834503][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 618.842640][ T31] RBP: 00007ff629611f91 R08: 0000000000000000 R09: 0000000000000000 [ 618.850641][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.858757][ T31] R13: 00007ff6297e6128 R14: 00007ff6297e6090 R15: 00007fffd1d5e728 [ 618.868704][ T31] [ 618.871820][ T31] INFO: task syz.2.5117:23209 blocked for more than 144 seconds. [ 618.879559][ T31] Not tainted syzkaller #0 [ 618.885181][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 618.894744][ T31] task:syz.2.5117 state:D stack:25064 pid:23209 tgid:23208 ppid:16714 task_flags:0x400140 flags:0x00080002 [ 618.907365][ T31] Call Trace: [ 618.910659][ T31] [ 618.914384][ T31] __schedule+0x1798/0x4cc0 [ 618.918943][ T31] ? security_file_open+0xb1/0x270 [ 618.924738][ T31] ? __lock_acquire+0xab9/0xd20 [ 618.929638][ T31] ? __lock_acquire+0xab9/0xd20 [ 618.935401][ T31] ? __pfx___schedule+0x10/0x10 [ 618.940319][ T31] ? schedule+0x91/0x360 [ 618.945431][ T31] schedule+0x165/0x360 [ 618.949653][ T31] schedule_preempt_disabled+0x13/0x30 [ 618.956119][ T31] __mutex_lock+0x7e6/0x1350 [ 618.960784][ T31] ? __mutex_lock+0x5bb/0x1350 [ 618.966337][ T31] ? misc_open+0x51/0x350 [ 618.970723][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 618.976531][ T31] misc_open+0x51/0x350 [ 618.980721][ T31] chrdev_open+0x4cc/0x5e0 [ 618.986009][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 618.991002][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 618.998086][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 619.003748][ T31] do_dentry_open+0x953/0x13f0 [ 619.008547][ T31] vfs_open+0x3b/0x340 [ 619.013341][ T31] ? path_openat+0x2ecd/0x3830 [ 619.018164][ T31] path_openat+0x2ee5/0x3830 [ 619.023469][ T31] ? __pfx_path_openat+0x10/0x10 [ 619.028448][ T31] do_filp_open+0x1fa/0x410 [ 619.033694][ T31] ? __lock_acquire+0xab9/0xd20 [ 619.038585][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 619.044260][ T31] ? _raw_spin_unlock+0x28/0x50 [ 619.049166][ T31] ? alloc_fd+0x64c/0x6c0 [ 619.054239][ T31] do_sys_openat2+0x121/0x1c0 [ 619.058974][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 619.064866][ T31] ? rcu_is_watching+0x15/0xb0 [ 619.069684][ T31] __x64_sys_openat+0x138/0x170 [ 619.075318][ T31] do_syscall_64+0xfa/0xfa0 [ 619.079913][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 619.085751][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.092557][ T31] ? clear_bhb_loop+0x60/0xb0 [ 619.097255][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.103955][ T31] RIP: 0033:0x7f0900d8f6c9 [ 619.108490][ T31] RSP: 002b:00007f0901c30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 619.117639][ T31] RAX: ffffffffffffffda RBX: 00007f0900fe5fa0 RCX: 00007f0900d8f6c9 [ 619.126262][ T31] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 619.134523][ T31] RBP: 00007f0900e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 619.142576][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.150560][ T31] R13: 00007f0900fe6038 R14: 00007f0900fe5fa0 R15: 00007fffbb177c98 [ 619.158736][ T31] [ 619.162437][ T31] INFO: task syz.3.5122:23229 blocked for more than 145 seconds. [ 619.170194][ T31] Not tainted syzkaller #0 [ 619.176155][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 619.185656][ T31] task:syz.3.5122 state:D stack:24520 pid:23229 tgid:23228 ppid:16350 task_flags:0x400140 flags:0x00080002 [ 619.197815][ T31] Call Trace: [ 619.201132][ T31] [ 619.204482][ T31] __schedule+0x1798/0x4cc0 [ 619.209044][ T31] ? security_file_open+0xb1/0x270 [ 619.214335][ T31] ? __lock_acquire+0xab9/0xd20 [ 619.219246][ T31] ? __lock_acquire+0xab9/0xd20 [ 619.224303][ T31] ? __pfx___schedule+0x10/0x10 [ 619.229247][ T31] ? schedule+0x91/0x360 [ 619.233740][ T31] schedule+0x165/0x360 [ 619.237938][ T31] schedule_preempt_disabled+0x13/0x30 [ 619.243621][ T31] __mutex_lock+0x7e6/0x1350 [ 619.248269][ T31] ? __mutex_lock+0x5bb/0x1350 [ 619.253234][ T31] ? misc_open+0x51/0x350 [ 619.257604][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 619.262873][ T31] misc_open+0x51/0x350 [ 619.267076][ T31] chrdev_open+0x4cc/0x5e0 [ 619.271741][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 619.276714][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 619.283220][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 619.288187][ T31] do_dentry_open+0x953/0x13f0 [ 619.293330][ T31] vfs_open+0x3b/0x340 [ 619.297440][ T31] ? path_openat+0x2ecd/0x3830 [ 619.302375][ T31] path_openat+0x2ee5/0x3830 [ 619.307039][ T31] ? __pfx_path_openat+0x10/0x10 [ 619.312263][ T31] do_filp_open+0x1fa/0x410 [ 619.316816][ T31] ? __lock_acquire+0xab9/0xd20 [ 619.321859][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 619.326947][ T31] ? _raw_spin_unlock+0x28/0x50 [ 619.331969][ T31] ? alloc_fd+0x64c/0x6c0 [ 619.336448][ T31] do_sys_openat2+0x121/0x1c0 [ 619.341161][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 619.346591][ T31] ? rcu_is_watching+0x15/0xb0 [ 619.351518][ T31] __x64_sys_openat+0x138/0x170 [ 619.356410][ T31] do_syscall_64+0xfa/0xfa0 [ 619.360929][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 619.366330][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.372577][ T31] ? clear_bhb_loop+0x60/0xb0 [ 619.377293][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.383924][ T31] RIP: 0033:0x7feda038f6c9 [ 619.388383][ T31] RSP: 002b:00007feda1242038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 619.397530][ T31] RAX: ffffffffffffffda RBX: 00007feda05e5fa0 RCX: 00007feda038f6c9 [ 619.405938][ T31] RDX: 0000000000040241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 619.414037][ T31] RBP: 00007feda0411f91 R08: 0000000000000000 R09: 0000000000000000 [ 619.424298][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.432498][ T31] R13: 00007feda05e6038 R14: 00007feda05e5fa0 R15: 00007ffdaa8c5e18 [ 619.440518][ T31] [ 619.443891][ T31] INFO: task syz-executor:23232 blocked for more than 145 seconds. [ 619.454366][ T31] Not tainted syzkaller #0 [ 619.459363][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 619.468734][ T31] task:syz-executor state:D stack:27112 pid:23232 tgid:23232 ppid:1 task_flags:0x400040 flags:0x00080000 [ 619.481554][ T31] Call Trace: [ 619.484882][ T31] [ 619.487822][ T31] __schedule+0x1798/0x4cc0 [ 619.492500][ T31] ? security_file_open+0xb1/0x270 [ 619.497656][ T31] ? __lock_acquire+0xab9/0xd20 [ 619.502679][ T31] ? __lock_acquire+0xab9/0xd20 [ 619.507570][ T31] ? __pfx___schedule+0x10/0x10 [ 619.512755][ T31] ? schedule+0x91/0x360 [ 619.517040][ T31] schedule+0x165/0x360 [ 619.521209][ T31] schedule_preempt_disabled+0x13/0x30 [ 619.526864][ T31] __mutex_lock+0x7e6/0x1350 [ 619.531578][ T31] ? __mutex_lock+0x5bb/0x1350 [ 619.536390][ T31] ? misc_open+0x51/0x350 [ 619.540735][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 619.545959][ T31] misc_open+0x51/0x350 [ 619.550264][ T31] chrdev_open+0x4cc/0x5e0 [ 619.554887][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 619.559875][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 619.566456][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 619.571507][ T31] do_dentry_open+0x953/0x13f0 [ 619.576341][ T31] vfs_open+0x3b/0x340 [ 619.580440][ T31] ? path_openat+0x2ecd/0x3830 [ 619.585482][ T31] path_openat+0x2ee5/0x3830 [ 619.590123][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 619.595819][ T31] ? count_memcg_event_mm+0x21/0x260 [ 619.601229][ T31] ? __pfx_path_openat+0x10/0x10 [ 619.606420][ T31] ? __pfx___up_read+0x10/0x10 [ 619.611233][ T31] ? do_user_addr_fault+0xbbc/0x1380 [ 619.616666][ T31] do_filp_open+0x1fa/0x410 [ 619.621642][ T31] ? __lock_acquire+0xab9/0xd20 [ 619.626540][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 619.631718][ T31] ? _raw_spin_unlock+0x28/0x50 [ 619.636607][ T31] ? alloc_fd+0x64c/0x6c0 [ 619.640962][ T31] do_sys_openat2+0x121/0x1c0 [ 619.645830][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 619.651110][ T31] ? fd_install+0x97/0x540 [ 619.655600][ T31] ? fd_install+0x30d/0x540 [ 619.660236][ T31] __x64_sys_openat+0x138/0x170 [ 619.665475][ T31] do_syscall_64+0xfa/0xfa0 [ 619.670030][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 619.675380][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.681877][ T31] ? clear_bhb_loop+0x60/0xb0 [ 619.686608][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.692607][ T31] RIP: 0033:0x7f81dc58de91 [ 619.697049][ T31] RSP: 002b:00007fffbb7efae0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 619.705609][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f81dc58de91 [ 619.713832][ T31] RDX: 0000000000000002 RSI: 00007f81dc6129b7 RDI: 00000000ffffff9c [ 619.721963][ T31] RBP: 00007f81dc6129b7 R08: 0000000000000000 R09: 00007f81dd31d6c0 [ 619.729975][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 619.738220][ T31] R13: 0000000000000003 R14: 00007fffbb7efeb8 R15: 0000000000000000 [ 619.746337][ T31] [ 619.749419][ T31] [ 619.749419][ T31] Showing all locks held in the system: [ 619.757330][ T31] 1 lock held by khungtaskd/31: [ 619.762333][ T31] #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 619.772511][ T31] 4 locks held by kworker/0:2/981: [ 619.777817][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 619.788880][ T31] #1: ffffc90003887ba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 619.801434][ T31] #2: ffffffff8f5ab428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 619.811707][ T31] #3: ffff88806c50d100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 619.822121][ T31] 2 locks held by getty/5586: [ 619.826844][ T31] #0: ffff88802f9870a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 619.836707][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 619.847067][ T31] 3 locks held by kworker/0:8/9472: [ 619.852357][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 619.863448][ T31] #1: ffffc9001aa57ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 619.877111][ T31] #2: ffffffff8f5ab428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 619.888578][ T31] 2 locks held by kworker/0:11/9477: [ 619.893939][ T31] #0: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 619.906123][ T31] #1: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 619.915163][ T31] 4 locks held by kworker/u8:31/21873: [ 619.920666][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 619.931700][ T31] #1: ffffc90003abfba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 619.942355][ T31] #2: ffffffff8f2be870 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 619.951980][ T31] #3: ffffffff8f5ab428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 619.962256][ T31] 1 lock held by syz.5.5051/22998: [ 619.967383][ T31] #0: ffff88806c50d100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 619.977234][ T31] 2 locks held by syz.0.5105/23164: [ 619.982782][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 619.991472][ T31] #1: ffffffff8f5ab428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 620.001613][ T31] 1 lock held by syz.1.5110/23179: [ 620.006763][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 620.015349][ T31] 1 lock held by syz.2.5117/23209: [ 620.020483][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 620.029068][ T31] 1 lock held by syz.3.5122/23229: [ 620.034331][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 620.042893][ T31] 1 lock held by syz-executor/23232: [ 620.048201][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 620.056766][ T31] 1 lock held by syz-executor/23234: [ 620.062454][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 620.070966][ T31] 1 lock held by syz-executor/23237: [ 620.076344][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 620.084902][ T31] 1 lock held by syz-executor/23238: [ 620.090191][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 620.098726][ T31] 1 lock held by syz-executor/23240: [ 620.104084][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 620.112657][ T31] 1 lock held by syz-executor/23242: [ 620.117961][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 620.126515][ T31] 1 lock held by syz-executor/23244: [ 620.131887][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 620.140402][ T31] 1 lock held by syz-executor/23246: [ 620.145807][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 620.154344][ T31] 1 lock held by syz-executor/23248: [ 620.159658][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 620.168204][ T31] 1 lock held by syz-executor/23250: [ 620.173776][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 620.182340][ T31] 1 lock held by syz-executor/23252: [ 620.187640][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 620.196185][ T31] 1 lock held by syz-executor/23254: [ 620.201573][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 620.210088][ T31] 1 lock held by syz-executor/23256: [ 620.215440][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 620.224028][ T31] 1 lock held by syz-executor/23258: [ 620.229335][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 620.237908][ T31] 1 lock held by syz-executor/23260: [ 620.243250][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 620.251779][ T31] [ 620.254118][ T31] ============================================= [ 620.254118][ T31] [ 620.262643][ T31] NMI backtrace for cpu 1 [ 620.262664][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 620.262687][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 620.262700][ T31] Call Trace: [ 620.262708][ T31] [ 620.262716][ T31] dump_stack_lvl+0x189/0x250 [ 620.262765][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 620.262798][ T31] ? __pfx__printk+0x10/0x10 [ 620.262825][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 620.262847][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 620.262867][ T31] ? __pfx__printk+0x10/0x10 [ 620.262886][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 620.262915][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 620.262936][ T31] watchdog+0xf60/0xfa0 [ 620.262956][ T31] ? watchdog+0x1e2/0xfa0 [ 620.262977][ T31] kthread+0x711/0x8a0 [ 620.263002][ T31] ? __pfx_watchdog+0x10/0x10 [ 620.263017][ T31] ? __pfx_kthread+0x10/0x10 [ 620.263040][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 620.263061][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 620.263082][ T31] ? __pfx_kthread+0x10/0x10 [ 620.263104][ T31] ret_from_fork+0x4bc/0x870 [ 620.263123][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 620.263145][ T31] ? __switch_to_asm+0x39/0x70 [ 620.263157][ T31] ? __switch_to_asm+0x33/0x70 [ 620.263169][ T31] ? __pfx_kthread+0x10/0x10 [ 620.263192][ T31] ret_from_fork_asm+0x1a/0x30 [ 620.263219][ T31] [ 620.263229][ T31] Sending NMI from CPU 1 to CPUs 0: [ 620.409055][ C0] NMI backtrace for cpu 0 [ 620.409073][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 620.409093][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 620.409104][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 620.409133][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 d1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 620.409149][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 620.409165][ C0] RAX: 36088c474265c500 RBX: ffffffff81967bf7 RCX: 36088c474265c500 [ 620.409179][ C0] RDX: 0000000000000001 RSI: ffffffff8d70dbaf RDI: ffffffff8bbf0760 [ 620.409191][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 620.409204][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ce270 [ 620.409217][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 620.409228][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 620.409242][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 620.409255][ C0] CR2: 0000558b1b8b6000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 620.409271][ C0] Call Trace: [ 620.409279][ C0] [ 620.409285][ C0] default_idle+0x13/0x20 [ 620.409301][ C0] default_idle_call+0x73/0xb0 [ 620.409318][ C0] do_idle+0x1e7/0x510 [ 620.409341][ C0] ? __pfx_do_idle+0x10/0x10 [ 620.409368][ C0] cpu_startup_entry+0x44/0x60 [ 620.409386][ C0] rest_init+0x2de/0x300 [ 620.409405][ C0] start_kernel+0x3ae/0x410 [ 620.409424][ C0] x86_64_start_reservations+0x24/0x30 [ 620.409446][ C0] x86_64_start_kernel+0x143/0x1c0 [ 620.409468][ C0] common_startup_64+0x13e/0x147 [ 620.409510][ C0]