last executing test programs: 2.682865679s ago: executing program 0 (id=2101): r0 = socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r2) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x80, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x50, 0x2, [@TCA_FLOW_EMATCHES={0x4c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}]}}]}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x80, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x50, 0x2, [@TCA_FLOW_EMATCHES={0x4c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}]}}]}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r5) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000080000000000700000008"], 0x1c}}, 0x80) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000080000000000700000008"], 0x1c}}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x5c}}, 0x0) socket(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000004c0)={0x138, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x14}, @nested={0x11e, 0x6, 0x0, 0x1, [@typed={0xf1, 0x12b, 0x0, 0x0, @binary="8eab44a5159d834f7a577417b5091d0aac85ef225fb8e3c8fdd2f87bc9333944af4d958747a97f5dfa8f3a0df989a8f4cfcc8a0b0c74808d8ddfb58a24ace32cd6545f956216b8471f880e80f1f26bdcc7e4a4205744b9ceb87f7e8ba79cf7a294a9009fb421d24d53c0707e155e078a7839c40f0105a02b9c169f981fa3c96661f8579e1edb7b3b4222e84bfc269b9600d7e7e52d0874b155d588b935b48ae618a36ca423735f466467d01823ab53aff4cffb81a84735653bf5e2656f1c5db992060d7766b7aac5fffd3d2aea3579c8074e0f8681f4f8192dcda190a364823142539c7ad525134d072c0655df"}, @generic="26c1e5e4409b7b2f21eaecd84205d99f8ad8c8696cd5d3eed9ad9a6c845fff292724b9ce7c1b"]}]}, 0x138}}, 0x0) 2.502618218s ago: executing program 0 (id=2105): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) listen(r0, 0xa1) accept4(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000040)=0x80, 0x800) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r1, &(0x7f0000000100)="2f183b4351", 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x37, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) 1.810972835s ago: executing program 4 (id=2116): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x1000000, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x32}, 0x20) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@ifindex=r1, 0xf, 0x0, 0x8bc4, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f00000002c0)=[0x0]}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) write$tun(r3, &(0x7f0000000380)={@val={0x0, 0x1c}, @void, @llc={@snap={0xaa, 0xaa, "ce72", "74daff", 0x16, "64accc7d1f3a11ddd837816a54b100f8d873962311a8ea6c1d9fd441e8720dcf89ffb74dff9b69078604f2a4577db666bb85667ceb0c5ba23a41a11bce2adf888655c40c8aa15ff52e9e719014d883067e992e27690a9e518e7c681f82f5bbaabb88806684923a8e10c27aeca9d651e4a7e544df3b7fbe590c4b2633de3751edda5e9d2a470b6a0a74e2a5bcc095b8792f84a5e851d1f3a6bbed520f495b4955af3d0d7912b8b154766011cff4b962d67b9e1f1fad256a8d92856455ed9898"}}}, 0xcc) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xbec2}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffff}]}}]}, 0x48}}, 0x0) 1.507970864s ago: executing program 0 (id=2121): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x90646}}, 0x20}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) (async, rerun: 64) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) 1.507654555s ago: executing program 3 (id=2122): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@migrate={0xe4, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x20}, 0x2}, [@sec_ctx={0x66, 0x8, {0x62, 0x8, 0x0, 0xe, 0x5a, "96f5825d74f9a729be542b702a0c2df87f06f128a6525f9723db757311f1d3da02359686fe64b7dfdd36ed75a9720766698a5139b006e7edd24a0f51740ed6296e6501186dd26e887783652bfc4b121514cdd02755fbe03fe22c"}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet6(0xa, 0x1, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@deltclass={0x38, 0x29, 0x2, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0x7}, {0xffe0, 0x1}, {0x3, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x6a, 0x4}}, @tclass_kind_options=@c_prio={0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004c94}, 0x4048044) 1.506143527s ago: executing program 4 (id=2123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x12, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private}]}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c0000000001810400000000141a000002000000240001801400018008000100e000000508000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000f6070016"], 0x6c}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000380), 0x8) r5 = socket(0x28, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r4, 0x1) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x198, 0x6, 0x8, 0x201, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x6}, [@generic="97e0158524a1767e5dba9714486461bcc3c3eb1184261395284e259a4d25ef755f2908d492292d3dc6d44ad053ca859b29760b7271f9de194fc8065c229774f8e8d0340c81931aedd3f7c9f9233c65d36bd78b057af890aa14fd9c996849555a50ed67be21f9cb7bc12e839037a92b7a", @typed={0x8, 0xd1, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="edbece714092d8e4ba2164dfd175737be43f39ffd6c0bf2673b36c39238930e5e5b8996f0dcb263230dddfe9e000e2073bdd6d5ed0a960467134d280945bd858445bc2c7fe26edf0a7936853064f4a1445199e0f0805fe0286d98c0da46f9c06620f99a6ca131c0c9308003645d43af389a4a8834416a5a22f3bfccec1de8c80ee2a8e", @typed={0x35, 0xbe, 0x0, 0x0, @binary="0c4af80688cfe4fa614b42d2c9581334182ebfc45b1659c891309b6df7514f3a7a4c53323dd0a8e99690c9fe37a2b73845"}, @generic="72e51cae57b2b5d5e1e463627f91b21d26b58742d3319600e7e2e15e74643cce78c3105b72732f17bd30ceee72631185ed293e4c6eee5bf977e1b6b6ac50ca692fd4bf56563249d55c1b9ef0bcb76f8b91"]}, 0x198}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) getpeername$unix(r3, &(0x7f0000000080), &(0x7f0000000100)=0x6e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710441000000000095000000"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$packet(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x12, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private}]}]}, 0xa0}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c0000000001810400000000141a000002000000240001801400018008000100e000000508000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000f6070016"], 0x6c}}, 0x0) (async) pipe(&(0x7f0000000200)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000380), 0x8) (async) socket(0x28, 0x1, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) (async) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) shutdown(r4, 0x1) (async) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x198, 0x6, 0x8, 0x201, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x6}, [@generic="97e0158524a1767e5dba9714486461bcc3c3eb1184261395284e259a4d25ef755f2908d492292d3dc6d44ad053ca859b29760b7271f9de194fc8065c229774f8e8d0340c81931aedd3f7c9f9233c65d36bd78b057af890aa14fd9c996849555a50ed67be21f9cb7bc12e839037a92b7a", @typed={0x8, 0xd1, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="edbece714092d8e4ba2164dfd175737be43f39ffd6c0bf2673b36c39238930e5e5b8996f0dcb263230dddfe9e000e2073bdd6d5ed0a960467134d280945bd858445bc2c7fe26edf0a7936853064f4a1445199e0f0805fe0286d98c0da46f9c06620f99a6ca131c0c9308003645d43af389a4a8834416a5a22f3bfccec1de8c80ee2a8e", @typed={0x35, 0xbe, 0x0, 0x0, @binary="0c4af80688cfe4fa614b42d2c9581334182ebfc45b1659c891309b6df7514f3a7a4c53323dd0a8e99690c9fe37a2b73845"}, @generic="72e51cae57b2b5d5e1e463627f91b21d26b58742d3319600e7e2e15e74643cce78c3105b72732f17bd30ceee72631185ed293e4c6eee5bf977e1b6b6ac50ca692fd4bf56563249d55c1b9ef0bcb76f8b91"]}, 0x198}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) (async) getpeername$unix(r3, &(0x7f0000000080), &(0x7f0000000100)=0x6e) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710441000000000095000000"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) (async) 1.447328319s ago: executing program 1 (id=2124): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x12, 0x1, {0x2, 0x100, 0x0, 0x401, 0x9, 0x80, 0xef, 0x2, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x39, 0x6}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0/file0/file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 1.30395144s ago: executing program 0 (id=2126): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x7f7aa7c5}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket$inet(0x2, 0x1, 0x6) writev(r2, 0x0, 0x0) close(0x3) 1.300723105s ago: executing program 3 (id=2127): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x1a}, 0x10011, 0x2, 0x2, 0x7, 0xc}, 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r2, 0x1, 0xb, 0x0, &(0x7f0000000280)) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r3, 0x1, 0x2a, 0x0, &(0x7f0000000240)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x14218}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r5 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000080)={r1}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x5}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x3001029}]}}]}, 0x48}}, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8b32, &(0x7f0000000040)) 1.281052056s ago: executing program 1 (id=2128): r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xffffffff}, 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0xe) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @sk_skb=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x80}, 0x8}, 0x94) 1.254009388s ago: executing program 2 (id=2129): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x4000090) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000006040000"], 0x0, 0x26}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000190000000002000000000000001840000002000000000000000000000095000000000000009500000000000200"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x1}, 0x90) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@rand_addr=0x64010100, 0x4e23, 0x800, 0x4e23, 0x1, 0x2, 0x80, 0x20, 0x3a, 0x0, r4}, {0x6babda6b, 0x7f, 0xfffffffffffffbff, 0x9, 0x8, 0x3ff, 0x1, 0x9}, {0xfffffffffffffbff, 0x0, 0x0, 0x3b1a}, 0xf, 0x6e6bb5, 0x0, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x6c}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x34ff, 0x3, 0x2, 0x0, 0x10001, 0x60000, 0x1}}, 0xe8) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800) 1.180025977s ago: executing program 4 (id=2130): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x0, 0x14, 0x0, "d1223c6d7a9f310d448e9e575b3d139b570d025531eaea2f7be650aada20c5e7e35d520f330f5183e3a934185e73d12a7c8a0b8e02e2c603c3647354b1dae4dbb8b317c071a01433423e0b7357a9e4d7"}, 0xd8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2de67a8aae613c0c0046031010", @ANYRESHEX=r0, @ANYBLOB="00010000000000001c00128009000100626f6e64000000000c00028005001d0000000000"], 0x3c}}, 0x54) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) r4 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'pim6reg0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="000000000000cf58913b385954000100760eaa1e6579820d2bd3eb"], 0x50}}, 0x4000000) 1.178935534s ago: executing program 0 (id=2131): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="660a00000200000061114d0000000000850000000200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="180000002f000100000000000000000006", @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES16=r0, @ANYRES16=r0], 0x18}], 0x1}, 0x300) 1.111721096s ago: executing program 2 (id=2132): r0 = socket(0x4, 0x800, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x4, 0x3, 0x4875}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0xdda, 0x33000dfb}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000300)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x2, 0x2}, 0x1}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)="3c3457ae7760d8c4812fd81d390773429ad6fa3ca7f06c5682af9a6414d0dab14a3661e0454884f14b69f9143c326297ac0458b9e2e6bb2709665a3b80fe6e9c705ca3b7caff961277fdab32a47baafe3b5413f7b7c3d13f185b985d6c60b177df7ccb9d559bcc12a3e52bdf0ad443bd", 0x70}, {&(0x7f0000000180)="78c196677bf5b0c73296d0131e2110defd240423ec11aa274fb14e3fb28648be522a4c5db32a7054157cb5a2df74dd6ce54a484f9d6af14d922f45b2e4cbf02a061f930e5e4cd65ef05d9a6359829a167104f99e9c8de9ff8dd43fc8f28128c39fadbc3018c43400000e29f215f0629b48256cac5aa73a103053179e5e76cd767beb266ea69a4e3344fc0e0d05f4bda69d80fe107b9a670e847863dac2492127ec3a6608c7df400390fbd1991210f5aeb5a3a2a223275f0ca1c0fc08f8a30b2fe681fbeade656aac40d6c0f9904a2c4d247a1bb9a46dcb26d577a710da", 0xdd}], 0x2, &(0x7f00000002c0)="54a1c1613025f112a6f84f", 0xb, 0x40040}, 0x2000) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x4084) read(r0, &(0x7f0000000480)=""/209, 0xd1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000580)={0x1, 0xa0e}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000005c0)={0x0, 0xf1, "fa6eae294591f2e30a7553960cd866377c2607c851e07c891b178e4c3de3e418f45ccf69aae7273b0eab48a29ca0c857bcc0770854e0113b7b64a262e3105ae98da9e2777507971d10174c0eb734386c2d66429108422a19193bea3d64ce484f5788703579630600bb51c8053a90167574fef68c87c90ec916ad89d6b1af19bd6f22d9405071e1160eb5e04904deacbf3c20a43dc74d0f1d04f2eb9286f89a6c5cf70b73c816a3e73fa1e5eb7bafac1f2afb5ffa8f6650cae5bb1bcfb8d32397e944b6442b96dec12cdac825215c3bb89d05bdf66825f50b9ce41b1dca24197012e23fa6c8c20943fc2956296cd9cbdbde"}, &(0x7f00000006c0)=0xf9) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000700)={r5, 0x0, 0x20}, &(0x7f0000000740)=0xc) accept$alg(r0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000780), r4) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r4) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r6, 0x300, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x40000) r7 = accept4$vsock_stream(r0, &(0x7f0000000900), 0x10, 0x80800) connect$vsock_stream(r7, &(0x7f0000000940)={0x28, 0x0, 0xffffffff, @host}, 0x10) r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_SIOCDELDLCI(r8, 0x8981, &(0x7f0000000980)={'erspan0\x00', 0x4}) getsockopt(r3, 0x5, 0x8, &(0x7f00000009c0)=""/149, &(0x7f0000000a80)=0x95) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000ac0)=0xffffffffffffffff) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), r4) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x48, r9, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000810) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r10, &(0x7f0000001080)={&(0x7f0000000c80), 0xc, &(0x7f0000001040)={&(0x7f0000000cc0)={0x358, 0x14, 0x200, 0x70bd28, 0x25dfdbfb, {0x11, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x1f, 0x1, "336609dcc67ebfb7de598b04acfe44faa073f8cc9b427b60b3c32f"}, @INET_DIAG_REQ_BYTECODE={0x47, 0x1, "57a9c04b7c353a54ca18506e6bf8b2962e14b525d31e13b6c1da10dddaf13114318ec4bf1f4cf6404102895f865b44ab116140cdb3a03e6a8a1ae825712785dca76ddd"}, @INET_DIAG_REQ_BYTECODE={0x73, 0x1, "9ddb0f82368ed62e5854172b1062aef6ed2927388a678ee623f17fe5dd206834385162ccb7057b5dad0be51b788c0f4ad340f8d1f2cc7de29fd4ec84ee73967645d059d299a962dff09cd53c57f4d75819953285ab771216a9ca85adfccab071390cea307e1ad1f34281d23cd00422"}, @INET_DIAG_REQ_BYTECODE={0xae, 0x1, "898867c8c41accc04381afb885e953b79d8a1a32610ecb20f7b54bca5d34f2a8319ecf666da8ffec3f312d9c97511e6a4c9c8cc6125d57d7babf22a212fe2cfa3ccd02e12f6f0be1f054f846c3f34a54a639903695dabc6727b5039b5a6b936d00658b0249d738e47d661a2112d77daab5d80ce7b29ae954c30acfe569b0490f822ec0776c4fff0120dcbc5448c1197994f13824a1c3f9663beea07a03d306c69b9d51c315fcb7e4dbb0"}, @INET_DIAG_REQ_BYTECODE={0xa3, 0x1, "331fa2f72a80050345e3a222dd9598c3e81eb64db5ece7655d693123354a79bbaea7d5ffa0489b56529ea96f231fa906e3163b47708d0df0eee771180154b55877cc4bc16b10bdd17abed53c2702c3d014a2bb7d2240c1465ee1fa961e418ada700b913034427b80f7e1894780db968c3f65bb16a3dc246d3f6d819d794d84a66d7b25a0b7ae12eef6d43957e827f94832c512e91202d0e39e64f1ab7d8bdb"}, @INET_DIAG_REQ_BYTECODE={0x2c, 0x1, "cc4bf7a66d118faad416a467e7b219f9650c23afe9995d52c4c2c61b51bb1c76475006b754c1d263"}, @INET_DIAG_REQ_BYTECODE={0xe5, 0x1, "e9ad305aa1331c95d49167f443b0f5268c13aecb60b4e30b1660a1b526bdeb9bf9701ef933ba0606f0e96ecbb85ccab206e9e81aca9a9c8a48e8954273b465ae67b749ccfc4386e62c8264f1dd6ff980f61a698d25d0e8831949a672ff985615b3153a29a61fc23c847ea55637dc116e8f5f9c9d6f9fe5d59b403adf1de65ef03c4050eede3aaff7269ef4bac84b7250c7633db94d55a9b43a8fef33575853ab651db831ef166e265aa1537540ef1f5557ebe0331844978616d0fef9fbb98324ef2665abdd9e670e464118a61419260793bb4fd3d40661a64c06bf35653fd351fc"}]}, 0x358}}, 0x4000) r11 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000010c0)={'wlan1\x00'}) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000001280)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)={0xd0, 0x2, 0x9, 0x0, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFCTH_TUPLE={0x9c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r12, &(0x7f0000001580)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001540)={&(0x7f0000001380)={0x198, r6, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x174, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "42432e2884edf38721faf9fd1c132daa"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e8fdb7d00f236932bc859a127a1e910ea29d6c9089def28ccaebd570415b6b9b"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8834be6ca7e11b14aa1fd8242ef68d78"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b9a8095439ad15279c67f8d96e417073"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "443814e06886d65f2d45c9445cf0d082366ac4bbc66282686f07d551f0c24ba3"}, @NL802154_KEY_ATTR_ID={0xac, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xbb46fbdfaba97831}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "af011848ab25f8e620ac2120570e543ff3d8ee72ff3c057c78b1fef915b3cb57"}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x198}, 0x1, 0x0, 0x0, 0x24008801}, 0x400a051) 1.101650691s ago: executing program 4 (id=2133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x14, &(0x7f0000002e00)={@random="25f0504a4e97", @local, @void, {@llc={0x4, {@llc={0x0, 0xf4, "bf", "cd7015"}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}]}]}], {0x14}}, 0x98}}, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'ip_vti0\x00', {0x1}, 0x3}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'bridge0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000000c0)={@private0, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x13}, 0x0, 0x800, 0x5, 0x100, 0x927, 0x2020004, r8}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000001c0)={'team0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}) syz_emit_ethernet(0x52, &(0x7f0000000400)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @timestamp={0x44, 0xc, 0xa7, 0x3, 0x0, [0x0, 0x10000]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, r6, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 1.040004008s ago: executing program 1 (id=2134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000440)={0x80}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000005800), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000005840)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005880)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005880)) socket$packet(0x11, 0xa, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0004110004000000b9a66eec00be00442ffffe8000000000000000000000000000aaff02000000000000000000000000000101000000000000030c000800050086dd88a888be00000002160966040100000000008100080022eb00020000200cf0020200000000000002000494030800655800000002"], 0x7a) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) close(0x3) socket(0x15, 0x5, 0x0) (async) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r7, 0x12dae000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, r7, 0xb0260000) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, r7, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0xffffe000) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0xffffe000) mmap$xdp(&(0x7f000051a000/0x2000)=nil, 0x2000, 0x7000000, 0x100010, r6, 0x0) (async) mmap$xdp(&(0x7f000051a000/0x2000)=nil, 0x2000, 0x7000000, 0x100010, r6, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x272b5c0fc5d95318, 0x11, r6, 0x9610c000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0808010004000000040000000900000000000000", @ANYRES32=r0, @ANYBLOB="0000000000f2ff00"/20, @ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r8}, &(0x7f0000000600), &(0x7f0000000980)=r4}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r8}, &(0x7f0000000600), &(0x7f0000000980)=r4}, 0x20) 1.030140681s ago: executing program 3 (id=2135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, 0x0}, 0x300440f1) setsockopt$sock_attach_bpf(r1, 0x1, 0x12, &(0x7f0000000500)=r1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000001980)={0x9, 0x4, 0x200, 0x3, 0x6, 0x32e35e75, 0x7, 0x80000001}, &(0x7f00000019c0)=0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000cc0)={0x364, r2, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x6f}}}}, [@NL80211_ATTR_TID_CONFIG={0x118, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbf}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x47}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x79}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000000}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xaa}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6c}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x16}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x1a0, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x188, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x158, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x6, 0x3}, {0x7, 0x4}, {0x2, 0xa}, {0x1, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x0, 0x7}, {0x1, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0x5}, {0x1, 0x4}, {0x1}, {0x2}, {0x4, 0x1f}, {0x4, 0x9}, {0x1, 0x6}, {0x0, 0xa}, {0x2, 0x4}, {0x7, 0xa}, {0x0, 0x6}, {0x7, 0xa}, {0x4, 0x4}, {0x5, 0x5}, {0x3, 0x6}, {0x0, 0x7}, {0x1, 0x1}, {0x1, 0x8}, {0x6, 0x6}, {0x7, 0x9}, {0x5}, {0x1, 0x9}, {0x2, 0x8}, {0x2, 0x5}, {0x6, 0xa}, {0x2, 0x6}, {0x1, 0x1}, {0x5, 0x4}, {0x5, 0x2}, {0x4, 0x3}, {0x4, 0x5}, {0x0, 0xa}, {0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x0, 0x4}, {0x2, 0x4}, {0x6}, {0x4, 0x2}, {0x7, 0x8}, {0x7, 0x4}, {0x5, 0x5}, {0x2, 0x2}, {0x1, 0x3}, {0x7, 0x8}, {0x7, 0x7}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x7}, {0x2, 0x3}, {0x0, 0x2}, {0x4, 0x1}, {0x1, 0x4}, {0x4, 0x9}, {0x4, 0x1}]}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x81, 0x9, 0x6, 0xe, 0x0, 0x0, 0x5d5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x23, 0xfc00, 0x3ff, 0x9a92, 0x3, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x8001, 0xfff6, 0x6eb2, 0x67, 0xc, 0x8001]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x1, 0x2, 0x5, 0x7fff, 0xe, 0xff, 0xfff8]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x2, 0x7}, {0x4, 0x2}, {0x0, 0x3}, {0x0, 0x3}, {0x6, 0x6}, {0x3, 0x9}, {0x7, 0x1}, {0x1, 0x4}, {0x2, 0x2}, {0x6, 0x8}, {0x0, 0x1}, {0x2, 0x6}, {0x4, 0x9}, {0x1, 0xa}, {0x3, 0x2}, {0x0, 0x4}, {0x3, 0x4}, {0x1, 0x7}, {0x1, 0x4}, {0x7, 0x3}, {0x6, 0x1}, {0x0, 0x2}, {0x6, 0x6}, {0x5, 0x6}, {0x4, 0x9}, {0x4, 0x6}, {0x1, 0x1}, {0x3, 0x5}, {0x0, 0x1}, {0x5, 0x7}, {0x3, 0x9}, {0x7, 0x7}, {0x1, 0x3}, {0x7, 0x7}, {0x0, 0x7}, {0x6, 0x2}, {0x1, 0x9}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x2, 0x9}, {0x1, 0x6}, {0x1, 0x2}, {0x0, 0x2}, {0x1}, {0x0, 0x6}, {0x3, 0x5}, {0x4, 0x3}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x9}, {0x0, 0x5}, {0x0, 0x2}, {0x5}, {0x1, 0x1}, {0x1, 0xa}, {0x6, 0x7}, {0x3, 0x7}, {0x5}, {0x4}, {0x5, 0x4}, {0x5, 0x9}, {0x1, 0x4}, {0x3}, {0x7, 0x7}, {0x0, 0x7}, {0x6, 0x1}, {0x0, 0x5}, {0x2, 0xa}, {0x2, 0x7}, {0x3, 0x6}, {0x0, 0x7}, {0x2, 0x8}, {0x0, 0x3}, {0x5}, {0x0, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x5, 0x7}, {0x0, 0x9}, {0x2}, {0x0, 0x1}, {0x1, 0x6}, {0x7, 0x8}, {0x6, 0x8}, {0x3, 0x1}, {0x0, 0xa}, {0x2, 0x8}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x16, 0x5, 0x9, 0x36, 0x60, 0x36, 0x24, 0x1, 0x60, 0x6c, 0x3, 0x6, 0x9, 0x6, 0xc, 0x60, 0x16, 0x48, 0x12, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2d}]}]}, @NL80211_ATTR_TID_CONFIG={0x84, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x80000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r6, @ANYBLOB="00022cbd7000fddbdf250f0000000e0001006e657464657673696d0000000f0002006e657464657673696d300001000000000800000006001100040000000e000a006e657464657673696d0000000f0002006e657464657673696d30000008000b0062000000060011000200000008000100706369001100020030fa09599db195a807302e300000000008000b00000200000600110002000000080001007063690011000200303030303a30303a31302e300000000008000b00090000000600110004000000"], 0xcc}, 0x1, 0x0, 0x0, 0x44}, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r5) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="98010000", @ANYRES16=r7, @ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x4004010}, 0x24008814) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0xfffffffc}, {0x24caf689, 0x80003}]}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x1, 0x1, 0x20, 0x67, 0x0, 0x4, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x4, 0xad, 0x0, 0xf}]}}, {0x1e, 0x7, 0x0, @multicast1}}}}}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, 0x0) sendmsg$nl_xfrm(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) 1.011462296s ago: executing program 0 (id=2136): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c0002"], 0x24}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'syzkaller0\x00', 0x400}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988ca", 0xe}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 868.723289ms ago: executing program 2 (id=2137): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x3, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) (async) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x190) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) r3 = accept4(r0, &(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000380)=0x80, 0x81800) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) (async, rerun: 64) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (rerun: 64) 748.092505ms ago: executing program 3 (id=2138): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x8, 0x1}, 0x1c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000bc0)={0x0, 0x5, 0x2bb3, 0xe3, 0x94b, 0x7fff}, &(0x7f0000000c00)=0x14) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x100000b, 0x13012, r0, 0x0) 747.166438ms ago: executing program 1 (id=2139): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x9, 0x0, &(0x7f0000000dc0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tick_stop\x00', r0, 0x0, 0x5}, 0x18) 701.676802ms ago: executing program 2 (id=2140): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) recvfrom$netrom(r0, &(0x7f0000000040)=""/64, 0x40, 0x40000103, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 32) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}, @IFLA_GRE_TOS={0x5, 0x9, 0xa}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 661.417955ms ago: executing program 3 (id=2141): setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000)=0x4, 0x4) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = accept(r0, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000140)=0x80) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xbc, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffa}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xa1a}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x102}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffff7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3b8fa719}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3b}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5e}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffff7}, @IPVS_DEST_ATTR_WEIGHT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2400c011}, 0x0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xac, r2, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7fff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x14000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x80}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004040}, 0x4) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0), 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb4, r3, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:modem_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x200000c4}, 0x15) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000680)=[{{0x4, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}}, {{0x2, 0x1, 0x1}, {0x4, 0x1}}, {{0x4, 0x1, 0x1}, {0x4}}], 0x38) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x30}, 0x1, 0x0, 0x0, 0x34088024}, 0x4080) getsockname$packet(r1, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000008c0)=0x14) pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r9, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000940)=""/156, 0x9c}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/67, 0x43}, {&(0x7f0000001a80)=""/121, 0x79}], 0x4, &(0x7f0000001b40)=""/41, 0x29}, 0x40000101) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000001d00)={0x6, 0x202, 0x1, 0x3, 0x0}, &(0x7f0000001d40)=0x10) sendmsg$inet_sctp(r8, &(0x7f0000001dc0)={&(0x7f0000001bc0)=@in6={0xa, 0x4e24, 0x1, @empty, 0x6}, 0x1c, &(0x7f0000001cc0)=[{&(0x7f0000001c00)="d3", 0x1}, {&(0x7f0000001c40)="235e512fc1b0367fa4304344131361bd6f36bff41832c65df643fa359a5fc2632e0c356a078b434084cea30ffd117f647fbfa40e6b23c18791a907a758a68afd738ff2780f5f2be9adcbc8624d398b3daf1292", 0x53}], 0x2, &(0x7f0000001d80)=[@sndrcv={0x30, 0x84, 0x1, {0x8000, 0x40, 0x205, 0x8000000, 0x40, 0x2d48, 0x78, 0x6, r10}}], 0x30, 0x8010}, 0x20000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000001e00)={r10, 0x39, "f2ac95b3b1ee4e1261c196bc0cc66c945ca5d3b4cba76d297397c4fb0eb239188de219aa45148d8712784ff24670e24ec95f171eb7c1f984bb"}, &(0x7f0000001e80)=0x41) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000004, 0x10010, r0, 0x83689000) openat$tun(0xffffffffffffff9c, &(0x7f0000001ec0), 0x145903, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x8) r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_VOICE(r11, 0x112, 0xb, &(0x7f0000001f00)=0x1, &(0x7f0000001f40)=0x2) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r9, 0x84, 0x20, &(0x7f0000001f80), &(0x7f0000001fc0)=0x4) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000002040), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x20, r12, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x20}}, 0x44008850) syz_genetlink_get_family_id$tipc2(&(0x7f0000002140), r9) 611.964603ms ago: executing program 1 (id=2142): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005401c02000008000640"], 0x6c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xfc9f, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0xfffffffffffffc4a, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000001300)="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", 0x1000}, {&(0x7f00000000c0)="7c56dbf155773c56459f8f23848c56bfa0fd5e948ff26e660f784a6b1df6f7915576f243a53a503b6092918782298cce59655e64451c", 0x36}, {&(0x7f0000002300)="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", 0x1000}], 0x3) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x38, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x18, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 579.852785ms ago: executing program 3 (id=2143): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000280)) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x2401c040) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x5) write$cgroup_subtree(r4, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000700)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'pimreg1\x00'}) r10 = socket(0x2a, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b00)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xa, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x5}, @TCA_TBF_PRATE64={0xc, 0x5, 0x2018b0106dc6f663}, @TCA_TBF_PARMS={0x28, 0x1, {{0xac, 0x2, 0x7, 0xe, 0xe88, 0x1aad}, {0x8, 0x1, 0x6, 0xf96e, 0xff, 0x7f}, 0x3, 0x7, 0xe68}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {0x1a, 0x3}, {0xe, 0xb}, {0xfff3, 0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_RATE={0x6, 0x5, {0xd, 0x9}}, @TCA_RATE={0x6, 0x5, {0x80, 0xf}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="1107270000000000000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004094}, 0x8894) socket$nl_generic(0x10, 0x3, 0x10) 568.418547ms ago: executing program 4 (id=2144): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010800000000000000000000000011000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073"], 0x58}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x12, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}, {0xffff, 0x8}}}, 0x24}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@getlink={0x180, 0x12, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x4, 0x28111}, [@IFLA_WEIGHT={0x8, 0xf, 0xa}, @IFLA_VF_PORTS={0x144, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3e3f7540274605f2463b5832cefe0015"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9ae9d1f05f2a7fec6c348a2be3428f23"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "78630adb17b320b31ed5e47c90a98b1c"}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3bc7f07f}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c532162e6adb1a995bb7376444f23bd5"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "257eb296610efec137fb9e7ff73c368b"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9790de4045ebccff1b80f659c1a2e175"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3051130fd41971e631396b65f5d455f9"}, @IFLA_PORT_VF={0x8, 0x1, 0x5e2c}, @IFLA_PORT_VF={0x8, 0x1, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, 'netdevsim0\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "740d98e3bca13f78569bbc9e4fe2adc4"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "849bb73ecbdc3313c02ecd9d3425afc1"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x68}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, '[*#$//\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '-*\x00'}]}]}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_PHYS_SWITCH_ID={0xc, 0x24, "fe60384366c9995e"}]}, 0x180}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) (async) r7 = gettid() (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000000000)=r7) (async) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000540)="a408c2362c466ffccc4030ee6a8f46346952cdd69ccfe2e96251ed0ae8b224b6a2c4c7147e4e2882a10ac57c105fe701ed34c2db90fbdf9661a50a0272211853d22e43d2e122ea35ec814653966de1d1260b3a67a4ee79898e55295d945f25b6ca7d16ac1b0a954f462b83d2e34b3715cf7f2cac6eb2ede5957eb9265d728b80553e25ed774dbc6a5040d41f7b226a41478e166fa6e50b660406d4cd06fa102f1c80d81794775fe77af8d2c1bdf58b11cd173929d7eba17c3c4a4b405409f2420ef51f6e4e2eee939e27bdfaa33bf8d4e2f8fa3b886b70e6f49aa70938e5", 0xde}, {&(0x7f0000000640)="075a219015c867362054f6e4a5a4253f511887fb3d08af05b58cdcaef6f27c6690b73bf5b0c12c6bde332b65afea4c8f2ce7a171f5625575b4dcfd237d87102d62dce79d92653f20fec68ff2c26398d91389b3c93931fdd4b07c6640745ac55485181a579671534febd4fd8773dcc8afb48efc4ab0ee44f0ca706ef9133886621ebe0b6d17f791785d47c6cc7fe1ede5447f09b3beb3a64361c6c1ab0baf6b87e70c271c3bb6e629f0fee2313c6b6bbf2989cf049df453ed97a53b440bfd1ffcd790cdbdc9e223b367dca88cf40aa12d20a6974de4b42e3c", 0xd8}, {&(0x7f00000000c0)="c60c6051a0d669354d7d0e3050a7f90c54e14cb6c847e3c3216e945896a1c91d58fa205241eb388df7a1b383be3a082f9f19b82479a9831af18b40c4", 0x3c}], 0x3}, 0x4040000) (async) syz_open_procfs$namespace(r7, &(0x7f0000000040)='ns/mnt\x00') (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYBLOB="41748cd99254518aba28c3428eeaf751e34df0708444b6bed5a53e9b2d81a67d802cb1959323e3f13935a97499b78437aa552cdec850bf2b2b35a3a988a9af70ee4579283a8502f5d06b409d1440b34d5281d071ebbb42baadba8520b8dbfe4047a1d830f55bdb50005ae366673078f03683b2ad58fe57dc4155b108ded721920c9da049c39d22fcd1188b34f271044a903e9902fb6bf2efd3e0d533eb3ba825dd242a373f35bc36537079ddc57107b1abd51e43ccc2a2e334fb59bf52ba87fd2130d0cc82d8e83a63a4ae09cd567edf61a2f4ee345a10ded9e4996bc14540c23c67e0575bde7203", @ANYRES32=r6], 0x44}}, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11}, 0x90) 340.006088ms ago: executing program 2 (id=2145): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, @null, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @default, 0x0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x1) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}, {0x0, 0x2}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x4, 0x4}]}}, 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r6 = socket(0x10, 0x3, 0x0) r7 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r8 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r8, 0x29, 0x24, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r7}]}, 0x3c}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r5, &(0x7f0000000080), 0x0}, 0x20) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0xac, r2, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x94, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'veth\x00'}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0xac}}, 0x20000040) 321.299781ms ago: executing program 4 (id=2146): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000980)={0x0, 0x9}, &(0x7f00000009c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fdffffffffffffffffffffffffffffff00000000000000004fc4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000020000000000000000000000000000000000000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c0000000a0000007f0000010000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d63200"], 0x23c}}, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d200100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000980)={0x0, 0x9}, &(0x7f00000009c0)=0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fdffffffffffffffffffffffffffffff00000000000000004fc4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000020000000000000000000000000000000000000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c0000000a0000007f0000010000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d63200"], 0x23c}}, 0x4004000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) 161.510761ms ago: executing program 2 (id=2147): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}]}}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, &(0x7f0000000540)=0x44) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_deladdrlabel={0x0, 0x49, 0x4, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, r7, 0x5b4}, [@IFAL_ADDRESS={0x0, 0x1, @private0}, @IFAL_ADDRESS={0x0, 0x1, @mcast2}, @IFAL_ADDRESS={0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x34}}, @IFAL_ADDRESS={0x0, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFAL_LABEL={0x0, 0x2, 0x5}, @IFAL_ADDRESS={0x0, 0x1, @mcast2}, @IFAL_LABEL={0x0, 0x2, 0x3}, @IFAL_ADDRESS={0x0, 0x1, @mcast1}, @IFAL_LABEL={0x0, 0x2, 0x2}]}, 0x50}}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}]}}}]}, 0x3c}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$packet(0x11, 0x3, 0x300) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, &(0x7f0000000540)=0x44) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_deladdrlabel={0x0, 0x49, 0x4, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, r7, 0x5b4}, [@IFAL_ADDRESS={0x0, 0x1, @private0}, @IFAL_ADDRESS={0x0, 0x1, @mcast2}, @IFAL_ADDRESS={0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x34}}, @IFAL_ADDRESS={0x0, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFAL_LABEL={0x0, 0x2, 0x5}, @IFAL_ADDRESS={0x0, 0x1, @mcast2}, @IFAL_LABEL={0x0, 0x2, 0x3}, @IFAL_ADDRESS={0x0, 0x1, @mcast1}, @IFAL_LABEL={0x0, 0x2, 0x2}]}, 0x50}}, 0x8000) (async) 0s ago: executing program 1 (id=2148): r0 = socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x1d, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress]}, 0x44}, 0x1, 0x0, 0x0, 0x64040000}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x8000}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x4}}]}, 0x44}}, 0x4000041) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_PROTO={0x6}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x7, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000380)={r5, 0x4a, "eb7c6ab942416900fc7427ad8b823b43f9ae9630410b24a0ce79e2ddd4bee32bcdd5844bcfe519892e9be79069d08fc852898d301b1cb5002ad6a64bad7a3d7f79e057e8102e6bc6db28"}, &(0x7f00000000c0)=0x52) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): port 2(bridge_slave_1) entered blocking state [ 75.762966][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.771972][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.799207][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.855003][ T52] Bluetooth: hci0: command tx timeout [ 75.868619][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.922255][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.954280][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.970873][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.977990][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.007467][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.014665][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.027208][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.034395][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.070980][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.078175][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.095400][ T52] Bluetooth: hci2: command tx timeout [ 76.100840][ T52] Bluetooth: hci3: command tx timeout [ 76.108305][ T5833] Bluetooth: hci1: command tx timeout [ 76.174491][ T52] Bluetooth: hci4: command tx timeout [ 76.190268][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.252846][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.282383][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.309529][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.316723][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.356211][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.363404][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.400643][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.497950][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.532506][ T3031] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.539789][ T3031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.606579][ T5825] veth0_vlan: entered promiscuous mode [ 76.620124][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.627320][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.700793][ T5825] veth1_vlan: entered promiscuous mode [ 76.746163][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.836585][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.886696][ T5825] veth0_macvtap: entered promiscuous mode [ 76.948433][ T5825] veth1_macvtap: entered promiscuous mode [ 77.004328][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.025186][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.060817][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.071170][ T5831] veth0_vlan: entered promiscuous mode [ 77.116612][ T3013] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.137011][ T3013] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.168449][ T3013] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.178882][ T3013] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.195406][ T5831] veth1_vlan: entered promiscuous mode [ 77.258958][ T5835] veth0_vlan: entered promiscuous mode [ 77.288725][ T5831] veth0_macvtap: entered promiscuous mode [ 77.302042][ T5835] veth1_vlan: entered promiscuous mode [ 77.321627][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.387253][ T5831] veth1_macvtap: entered promiscuous mode [ 77.403656][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.411613][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.423885][ T5835] veth0_macvtap: entered promiscuous mode [ 77.437523][ T5835] veth1_macvtap: entered promiscuous mode [ 77.497044][ T3031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.507352][ T3031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.532563][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.548090][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.559706][ T5832] veth0_vlan: entered promiscuous mode [ 77.579451][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.609756][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.622958][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.655420][ T3031] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.664300][ T3031] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.686882][ T5832] veth1_vlan: entered promiscuous mode [ 77.714490][ T3031] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.739859][ T3031] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.759233][ T5829] veth0_vlan: entered promiscuous mode [ 77.773987][ T3031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.782746][ T3031] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.800246][ T3013] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.812272][ T3013] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.862454][ T5829] veth1_vlan: entered promiscuous mode [ 77.883896][ T5832] veth0_macvtap: entered promiscuous mode [ 77.926828][ T5832] veth1_macvtap: entered promiscuous mode [ 77.935916][ T52] Bluetooth: hci0: command tx timeout [ 77.999954][ T5829] veth0_macvtap: entered promiscuous mode [ 78.032143][ T5829] veth1_macvtap: entered promiscuous mode [ 78.057931][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.083901][ T3031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.091757][ T3031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.100130][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.117894][ T3031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.121389][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.134283][ T3031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.153619][ T146] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.162444][ T146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.173495][ T52] Bluetooth: hci2: command tx timeout [ 78.183610][ T52] Bluetooth: hci3: command tx timeout [ 78.189035][ T52] Bluetooth: hci1: command tx timeout [ 78.234976][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.247680][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.265540][ T52] Bluetooth: hci4: command tx timeout [ 78.268009][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.280146][ T146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.289374][ T146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.347009][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.382456][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.395469][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.415490][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.431921][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.491193][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.529007][ T5957] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2'. [ 78.588384][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.603736][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.751591][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.764711][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.767466][ T5969] netlink: 108 bytes leftover after parsing attributes in process `syz.1.11'. [ 78.825206][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.861731][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.052159][ T5978] pimreg: entered allmulticast mode [ 79.073012][ T5981] netlink: 'syz.1.12': attribute type 83 has an invalid length. [ 79.092614][ T3013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.100152][ T5983] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14'. [ 79.102342][ T5984] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13'. [ 79.134455][ T3013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.384223][ T5990] netlink: 52 bytes leftover after parsing attributes in process `syz.0.16'. [ 79.423902][ T5997] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17'. [ 79.467977][ T6001] netlink: 'syz.4.15': attribute type 1 has an invalid length. [ 79.474830][ T6005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16'. [ 79.498663][ T5993] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 79.511092][ T6006] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3'. [ 79.937971][ T5894] IPVS: starting estimator thread 0... [ 79.953249][ T6028] IPVS: set_ctl: invalid protocol: 19 172.20.20.187:20004 [ 79.959301][ T6034] netlink: 32 bytes leftover after parsing attributes in process `syz.4.26'. [ 80.013346][ T52] Bluetooth: hci0: command tx timeout [ 80.034269][ T6033] IPVS: using max 30 ests per chain, 72000 per kthread [ 80.205522][ T6047] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 80.213363][ T6048] netlink: 'syz.0.30': attribute type 1 has an invalid length. [ 80.228786][ T6046] syz.3.31: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 80.253740][ T52] Bluetooth: hci1: command tx timeout [ 80.259320][ T52] Bluetooth: hci3: command tx timeout [ 80.264934][ T5833] Bluetooth: hci2: command tx timeout [ 80.277727][ T6046] CPU: 1 UID: 0 PID: 6046 Comm: syz.3.31 Not tainted syzkaller #0 PREEMPT(full) [ 80.277755][ T6046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 80.277773][ T6046] Call Trace: [ 80.277781][ T6046] [ 80.277790][ T6046] dump_stack_lvl+0x189/0x250 [ 80.277830][ T6046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.277854][ T6046] ? __pfx__printk+0x10/0x10 [ 80.277874][ T6046] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 80.277898][ T6046] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 80.277923][ T6046] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 80.277950][ T6046] warn_alloc+0x214/0x310 [ 80.277976][ T6046] ? stack_depot_save_flags+0x41b/0x860 [ 80.278007][ T6046] ? __pfx_warn_alloc+0x10/0x10 [ 80.278033][ T6046] ? kasan_save_track+0x3e/0x80 [ 80.278055][ T6046] ? __kasan_kmalloc+0x93/0xb0 [ 80.278077][ T6046] ? xsk_setsockopt+0x4dc/0x8d0 [ 80.278094][ T6046] ? do_sock_setsockopt+0x17c/0x1b0 [ 80.278108][ T6046] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 80.278120][ T6046] ? do_syscall_64+0xfa/0xfa0 [ 80.278140][ T6046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.278166][ T6046] __vmalloc_node_range_noprof+0x125/0x12d0 [ 80.278216][ T6046] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 80.278244][ T6046] ? __kasan_kmalloc+0x93/0xb0 [ 80.278273][ T6046] vmalloc_user_noprof+0xad/0xf0 [ 80.278296][ T6046] ? xskq_create+0xbf/0x170 [ 80.278317][ T6046] xskq_create+0xbf/0x170 [ 80.278341][ T6046] xsk_init_queue+0xb0/0x110 [ 80.278364][ T6046] xsk_setsockopt+0x4dc/0x8d0 [ 80.278386][ T6046] ? __pfx_xsk_setsockopt+0x10/0x10 [ 80.278408][ T6046] ? __pfx_aa_sk_perm+0x10/0x10 [ 80.278440][ T6046] ? aa_sock_opt_perm+0xff/0x1b0 [ 80.278470][ T6046] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 80.278487][ T6046] ? __pfx_xsk_setsockopt+0x10/0x10 [ 80.278507][ T6046] do_sock_setsockopt+0x17c/0x1b0 [ 80.278528][ T6046] __x64_sys_setsockopt+0x13f/0x1b0 [ 80.278548][ T6046] do_syscall_64+0xfa/0xfa0 [ 80.278568][ T6046] ? lockdep_hardirqs_on+0x9c/0x150 [ 80.278591][ T6046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.278607][ T6046] ? clear_bhb_loop+0x60/0xb0 [ 80.278625][ T6046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.278641][ T6046] RIP: 0033:0x7fa57af8efc9 [ 80.278663][ T6046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.278680][ T6046] RSP: 002b:00007fa57bd84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 80.278698][ T6046] RAX: ffffffffffffffda RBX: 00007fa57b1e5fa0 RCX: 00007fa57af8efc9 [ 80.278709][ T6046] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 80.278720][ T6046] RBP: 00007fa57b011f91 R08: 0000000000000004 R09: 0000000000000000 [ 80.278731][ T6046] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.278741][ T6046] R13: 00007fa57b1e6038 R14: 00007fa57b1e5fa0 R15: 00007fffec476fb8 [ 80.278768][ T6046] [ 80.279954][ T6046] Mem-Info: [ 80.344070][ T52] Bluetooth: hci4: command tx timeout [ 80.348563][ T6046] active_anon:5779 inactive_anon:0 isolated_anon:0 [ 80.348563][ T6046] active_file:2483 inactive_file:39872 isolated_file:0 [ 80.348563][ T6046] unevictable:768 dirty:1465 writeback:0 [ 80.348563][ T6046] slab_reclaimable:10424 slab_unreclaimable:93523 [ 80.348563][ T6046] mapped:29058 shmem:1356 pagetables:1101 [ 80.348563][ T6046] sec_pagetables:0 bounce:0 [ 80.348563][ T6046] kernel_misc_reclaimable:0 [ 80.348563][ T6046] free:1335037 free_pcp:17726 free_cma:0 [ 80.686195][ T6057] tipc: Enabling of bearer rejected, failed to enable media [ 80.688247][ T6046] Node 0 active_anon:23016kB inactive_anon:0kB active_file:9932kB inactive_file:159284kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116232kB dirty:5844kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11956kB pagetables:4248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 80.754024][ T6046] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 80.793974][ T6046] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 80.811442][ T6059] trusted_key: syz.4.34 sent an empty control message without MSG_MORE. [ 80.859691][ T6046] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 80.880526][ T6059] pim6reg1: entered promiscuous mode [ 80.886148][ T6059] pim6reg1: entered allmulticast mode [ 80.901016][ T6046] Node 0 DMA32 free:1439280kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23128kB inactive_anon:0kB active_file:10004kB inactive_file:159284kB unevictable:1536kB writepending:5888kB zspages:0kB present:3129332kB managed:2565180kB mlocked:0kB bounce:0kB free_pcp:49452kB local_pcp:13088kB free_cma:0kB [ 80.915853][ T6064] nftables ruleset with unbound chain [ 80.937365][ T6046] lowmem_reserve[]: 0 0 0 0 0 [ 80.946068][ T6046] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 80.989250][ T6046] lowmem_reserve[]: 0 0 0 0 0 [ 80.994925][ T6046] Node 1 Normal free:3883408kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:16kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22728kB local_pcp:10280kB free_cma:0kB [ 81.030120][ T6046] lowmem_reserve[]: 0 0 0 0 0 [ 81.040504][ T6046] Node 0 DMA: [ 81.040655][ T6064] warning: `syz.1.37' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.103877][ T6046] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 81.144307][ T6046] Node 0 DMA32: 10*4kB (UME) 7*8kB (UME) 8*16kB (UME) 4*32kB (M) 6*64kB (UM) 8*128kB (M) 4*256kB (M) 5*512kB (UME) 5*1024kB (UM) 7*2048kB (UME) 345*4096kB (M) = 1437920kB [ 81.192351][ T6046] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 81.239318][ T6046] Node 1 Normal: 213*4kB (UM) 67*8kB (UME) 39*16kB (UME) 48*32kB (UME) 18*64kB (UME) 7*128kB (UME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3883484kB [ 81.264324][ T6046] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 81.277989][ T6046] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 81.281603][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.41'. [ 81.288872][ T6046] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 81.318028][ T6046] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 81.328152][ T6046] 43725 total pagecache pages [ 81.332917][ T6046] 0 pages in swap cache [ 81.337696][ T6046] Free swap = 124996kB [ 81.342094][ T6046] Total swap = 124996kB [ 81.346817][ T6046] 2097051 pages RAM [ 81.350713][ T6046] 0 pages HighMem/MovableOnly [ 81.355682][ T6046] 424114 pages reserved [ 81.359909][ T6046] 0 pages cma reserved [ 81.590061][ T6089] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.760179][ T6094] syz.2.46 uses obsolete (PF_INET,SOCK_PACKET) [ 82.129007][ T6106] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.474176][ T6127] openvswitch: netlink: IP tunnel dst address not specified [ 82.876571][ T6152] Zero length message leads to an empty skb [ 83.114984][ T6163] tipc: Started in network mode [ 83.122753][ T6163] tipc: Node identity , cluster identity 4711 [ 83.129045][ T6163] tipc: Failed to set node id, please configure manually [ 83.137936][ T6163] tipc: Enabling of bearer rejected, failed to enable media [ 83.161456][ T6163] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 83.171570][ T6163] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 83.242772][ T6163] netlink: 'syz.3.69': attribute type 2 has an invalid length. [ 83.493714][ T6180] syzkaller1: entered promiscuous mode [ 83.521837][ T6180] syzkaller1: entered allmulticast mode [ 83.560283][ T6186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.978691][ T6211] __nla_validate_parse: 9 callbacks suppressed [ 83.978709][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 84.085676][ T6215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.179680][ T6215] netem: change failed [ 84.265812][ T6223] netlink: 48 bytes leftover after parsing attributes in process `syz.0.87'. [ 85.006055][ T6266] netlink: 'syz.0.100': attribute type 14 has an invalid length. [ 85.014320][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'. [ 85.058578][ T6266] netlink: 'syz.0.100': attribute type 14 has an invalid length. [ 85.070513][ T3013] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.098929][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'. [ 85.117400][ T146] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.136454][ T146] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.240657][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.101'. [ 85.305913][ T146] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.342699][ T6283] netlink: 'syz.2.105': attribute type 24 has an invalid length. [ 85.524833][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'. [ 85.533362][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'. [ 85.605184][ T6292] netlink: 'syz.1.109': attribute type 12 has an invalid length. [ 85.624051][ T6292] netlink: 32 bytes leftover after parsing attributes in process `syz.1.109'. [ 85.934138][ T6310] xt_TPROXY: Can be used only with -p tcp or -p udp [ 86.125841][ T6313] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 86.133523][ T5901] IPVS: starting estimator thread 0... [ 86.162016][ T6313] netlink: 'syz.2.117': attribute type 12 has an invalid length. [ 86.253229][ T6322] IPVS: using max 30 ests per chain, 72000 per kthread [ 86.385523][ T6338] bridge: RTM_NEWNEIGH with invalid ether address [ 86.392281][ T6338] bridge: RTM_NEWNEIGH with invalid ether address [ 86.405564][ T6332] tipc: Started in network mode [ 86.410488][ T6332] tipc: Node identity 56aee866e15d, cluster identity 4711 [ 86.441021][ T6332] tipc: Enabled bearer , priority 0 [ 86.467761][ T6342] syzkaller0: entered promiscuous mode [ 86.515910][ T6342] syzkaller0: entered allmulticast mode [ 86.637065][ T6351] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 86.657713][ T6351] bond1 (unregistering): Released all slaves [ 86.722008][ T6357] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.125'. [ 86.735650][ T6357] openvswitch: netlink: Flow key attr not present in new flow. [ 86.743933][ T9] cfg80211: failed to load regulatory.db [ 86.779054][ T6358] tipc: Resetting bearer [ 86.837211][ T6331] tipc: Resetting bearer [ 86.924899][ T6331] tipc: Disabling bearer [ 86.966741][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.129'. [ 86.977189][ T6369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.003259][ T6369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.025668][ T6369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.057805][ T6369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.387541][ T6393] tipc: Enabling of bearer rejected, failed to enable media [ 87.599992][ T6406] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 87.613601][ T6407] veth0_to_batadv: mtu less than device minimum [ 88.247496][ T6433] block nbd0: not configured, cannot reconfigure [ 89.799852][ T6475] netlink: 'syz.4.157': attribute type 2 has an invalid length. [ 90.064747][ T6482] __nla_validate_parse: 8 callbacks suppressed [ 90.064766][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.160'. [ 90.081507][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.160'. [ 90.741255][ T6484] netlink: 'syz.2.161': attribute type 1 has an invalid length. [ 90.789677][ T6485] netlink: 'syz.2.161': attribute type 1 has an invalid length. [ 90.851060][ T6485] bond1: entered promiscuous mode [ 90.857705][ T6485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.143487][ T6515] dvmrp0: entered allmulticast mode [ 91.159022][ T6515] dvmrp0: left allmulticast mode [ 91.848059][ T6552] netlink: 28 bytes leftover after parsing attributes in process `syz.0.179'. [ 91.875620][ T6552] netlink: 'syz.0.179': attribute type 7 has an invalid length. [ 91.883410][ T6552] netlink: 'syz.0.179': attribute type 8 has an invalid length. [ 91.891208][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.179'. [ 92.014660][ T6555] veth0: entered promiscuous mode [ 92.030253][ T6555] netlink: 'syz.1.181': attribute type 13 has an invalid length. [ 92.038770][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 92.050568][ T6558] Bluetooth: MGMT ver 1.23 [ 92.103556][ T6561] netlink: 64 bytes leftover after parsing attributes in process `syz.4.183'. [ 92.133049][ T6555] netlink: 'syz.1.181': attribute type 13 has an invalid length. [ 92.145712][ T146] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.154102][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 92.164130][ T146] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.195810][ T146] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.196363][ T6561] netlink: 96 bytes leftover after parsing attributes in process `syz.4.183'. [ 92.229178][ T6553] veth0: left promiscuous mode [ 92.255145][ T146] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.571415][ T6580] bond1: entered promiscuous mode [ 92.622738][ T6580] netlink: 'syz.4.191': attribute type 10 has an invalid length. [ 92.631393][ T6580] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.639680][ T6580] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.691146][ T6580] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.698555][ T6580] bridge0: port 2(bridge_slave_1) entered listening state [ 92.706102][ T6580] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.713282][ T6580] bridge0: port 1(bridge_slave_0) entered listening state [ 92.774580][ T6580] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 92.829167][ T6592] syzkaller1: entered promiscuous mode [ 92.878646][ T6592] syzkaller1: entered allmulticast mode [ 92.948266][ T6592] netlink: 'syz.3.195': attribute type 8 has an invalid length. [ 93.058898][ T6602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.199'. [ 93.102808][ T6590] infiniband syz1: set active [ 93.126729][ T6590] infiniband syz1: added syz_tun [ 93.200688][ T6602] bond1 (unregistering): Released all slaves [ 93.294732][ T6590] RDS/IB: syz1: added [ 93.299328][ T6590] smc: adding ib device syz1 with port count 1 [ 93.344264][ T6590] smc: ib device syz1 port 1 has no pnetid [ 93.584758][ T6625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.204'. [ 94.258781][ T6660] lo: entered allmulticast mode [ 94.777831][ T6685] netlink: 'syz.3.218': attribute type 1 has an invalid length. [ 94.835014][ T6690] ipt_REJECT: TCP_RESET invalid for non-tcp [ 94.856022][ T6689] macvlan2: entered promiscuous mode [ 94.861808][ T6689] macvlan2: entered allmulticast mode [ 94.868754][ T6689] bond1: entered promiscuous mode [ 94.874865][ T6689] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 94.886572][ T6689] bond1: left promiscuous mode [ 95.772836][ T6724] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 95.831614][ T6724] __nla_validate_parse: 2 callbacks suppressed [ 95.831632][ T6724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.230'. [ 96.013350][ T52] Bluetooth: hci0: command tx timeout [ 96.078848][ T6734] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 96.108481][ T6734] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 96.179404][ T6739] xt_hashlimit: invalid rate [ 96.184874][ T6729] netlink: 'syz.0.232': attribute type 10 has an invalid length. [ 96.220859][ T6729] team0: Port device dummy0 added [ 96.560486][ T6754] netlink: 'syz.2.239': attribute type 4 has an invalid length. [ 96.759991][ T6758] netlink: 'syz.3.243': attribute type 39 has an invalid length. [ 97.389349][ T6785] netlink: 277 bytes leftover after parsing attributes in process `syz.2.254'. [ 97.416834][ T6786] netlink: 277 bytes leftover after parsing attributes in process `syz.2.254'. [ 97.772079][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 97.786098][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 97.795926][ T6799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.258'. [ 97.901428][ T6808] netlink: 'syz.2.263': attribute type 7 has an invalid length. [ 97.909642][ T6807] netlink: 'syz.2.263': attribute type 7 has an invalid length. [ 97.917431][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 97.928849][ T6806] netlink: 'syz.0.261': attribute type 1 has an invalid length. [ 97.941613][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 97.953137][ T6806] netlink: 228 bytes leftover after parsing attributes in process `syz.0.261'. [ 97.998686][ T6811] netlink: 'syz.3.262': attribute type 11 has an invalid length. [ 98.394732][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 98.412073][ T6834] syzkaller0: entered promiscuous mode [ 98.419355][ T6834] syzkaller0: entered allmulticast mode [ 98.538675][ T6837] tipc: Started in network mode [ 98.550786][ T6837] tipc: Node identity e6f06159f564, cluster identity 4711 [ 98.558214][ T6837] tipc: Enabled bearer , priority 0 [ 98.567698][ T6840] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 98.611289][ T6837] syzkaller0: entered promiscuous mode [ 98.637284][ T6837] syzkaller0: entered allmulticast mode [ 98.936767][ T6836] tipc: Resetting bearer [ 98.959882][ T6836] tipc: Disabling bearer [ 99.340504][ T5894] IPVS: starting estimator thread 0... [ 99.397062][ T6894] nbd: must specify an index to disconnect [ 99.445340][ T6891] IPVS: using max 26 ests per chain, 62400 per kthread [ 99.663920][ T6908] xt_CT: No such helper "pptp" [ 99.739397][ T6912] bond2: option all_slaves_active: invalid value (222) [ 99.769439][ T6912] bond2 (unregistering): Released all slaves [ 100.069624][ T6947] netlink: 'syz.2.301': attribute type 4 has an invalid length. [ 100.203334][ T6949] netlink: zone id is out of range [ 100.299819][ T6960] netlink: 'syz.2.304': attribute type 4 has an invalid length. [ 100.313626][ T6960] netlink: 'syz.2.304': attribute type 4 has an invalid length. [ 100.447100][ T6966] xt_NFQUEUE: number of total queues is 0 [ 100.653498][ T6980] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 100.664736][ T6980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.817100][ T6988] xt_TPROXY: Can be used only with -p tcp or -p udp [ 100.841317][ T6988] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 100.861392][ T6988] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 100.879984][ T6988] gretap1: entered promiscuous mode [ 100.886686][ T6988] gretap1: entered allmulticast mode [ 100.968129][ T6994] __nla_validate_parse: 44 callbacks suppressed [ 100.968147][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.314'. [ 100.995813][ T6994] netlink: 36 bytes leftover after parsing attributes in process `syz.4.314'. [ 101.007367][ T6994] xt_ecn: cannot match TCP bits for non-tcp packets [ 101.148680][ T7001] netlink: 52 bytes leftover after parsing attributes in process `syz.4.317'. [ 101.374327][ T7015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.467409][ T7023] SET target dimension over the limit! [ 101.540197][ T7027] netlink: 224 bytes leftover after parsing attributes in process `syz.3.324'. [ 101.585163][ T7029] validate_nla: 1 callbacks suppressed [ 101.585182][ T7029] netlink: 'syz.4.325': attribute type 27 has an invalid length. [ 101.603635][ T7029] netlink: 'syz.4.325': attribute type 27 has an invalid length. [ 101.709571][ T7035] xt_l2tp: missing protocol rule (udp|l2tpip) [ 102.260780][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.337'. [ 102.272642][ T7061] block nbd0: Unsupported socket: should be TCP or UNIX. [ 102.614039][ T7077] bond1: option lp_interval: invalid value (0) [ 102.620243][ T7077] bond1: option lp_interval: allowed values 1 - 2147483647 [ 102.629319][ T7077] bond1 (unregistering): Released all slaves [ 102.654030][ T7084] netlink: 'syz.3.343': attribute type 4 has an invalid length. [ 102.662371][ T7079] ip6gre1: entered allmulticast mode [ 102.723361][ T7076] netlink: 'syz.3.343': attribute type 4 has an invalid length. [ 102.943479][ T7092] netlink: 220 bytes leftover after parsing attributes in process `syz.0.349'. [ 102.952475][ T7092] netlink: 'syz.0.349': attribute type 2 has an invalid length. [ 103.072507][ T7108] netlink: 'syz.3.353': attribute type 21 has an invalid length. [ 103.080629][ T7108] netlink: 'syz.3.353': attribute type 6 has an invalid length. [ 103.096276][ T7108] netlink: 132 bytes leftover after parsing attributes in process `syz.3.353'. [ 103.117793][ T7108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.353'. [ 103.239154][ T7120] vlan1: entered allmulticast mode [ 103.261721][ T7118] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 103.272353][ T7120] veth0_vlan: entered allmulticast mode [ 103.304871][ T7120] pimreg: left allmulticast mode [ 103.309950][ T7120] vlan1: left allmulticast mode [ 103.323223][ T7120] veth0_vlan: left allmulticast mode [ 103.359111][ T7126] netlink: 104 bytes leftover after parsing attributes in process `syz.1.358'. [ 103.481254][ T7135] netlink: 48 bytes leftover after parsing attributes in process `syz.0.361'. [ 103.776865][ T7153] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 104.161743][ T7171] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 104.198186][ T7178] netlink: 'syz.3.371': attribute type 13 has an invalid length. [ 104.233728][ T7178] veth0_macvtap: left promiscuous mode [ 104.243607][ T7178] macvtap0: entered allmulticast mode [ 104.293830][ T7178] macvtap0: refused to change device tx_queue_len [ 105.050124][ T7223] netlink: 'syz.3.387': attribute type 1 has an invalid length. [ 105.070587][ T7223] netlink: 'syz.3.387': attribute type 2 has an invalid length. [ 105.466638][ T7253] erspan0: entered promiscuous mode [ 105.472444][ T7253] vlan2: entered promiscuous mode [ 106.024003][ T7281] __nla_validate_parse: 6 callbacks suppressed [ 106.024020][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'. [ 106.255478][ T7294] netlink: 96 bytes leftover after parsing attributes in process `syz.4.406'. [ 106.306726][ T7294] netlink: 96 bytes leftover after parsing attributes in process `syz.4.406'. [ 106.570142][ T7309] netlink: 28 bytes leftover after parsing attributes in process `syz.4.409'. [ 106.999001][ T7331] netlink: 32 bytes leftover after parsing attributes in process `syz.3.413'. [ 107.054139][ T7334] netlink: 128 bytes leftover after parsing attributes in process `syz.4.414'. [ 107.182315][ T7340] netlink: 'syz.3.416': attribute type 1 has an invalid length. [ 107.227700][ T7343] netlink: 'syz.4.418': attribute type 30 has an invalid length. [ 107.355431][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.419'. [ 107.369382][ T7348] sctp: [Deprecated]: syz.1.420 (pid 7348) Use of int in maxseg socket option. [ 107.369382][ T7348] Use struct sctp_assoc_value instead [ 107.373711][ T7350] bridge_slave_1: left allmulticast mode [ 107.432556][ T7350] bridge_slave_1: left promiscuous mode [ 107.442910][ T7350] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.492866][ T7350] bridge_slave_0: left allmulticast mode [ 107.501129][ T7350] bridge_slave_0: left promiscuous mode [ 107.537433][ T7350] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.667899][ T7359] netlink: 24 bytes leftover after parsing attributes in process `syz.1.423'. [ 107.854099][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 107.862157][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 107.960153][ T7376] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 108.110818][ T7385] netlink: 28 bytes leftover after parsing attributes in process `syz.4.433'. [ 108.372728][ T7393] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 108.384958][ T7401] netlink: 'syz.4.438': attribute type 1 has an invalid length. [ 108.403398][ T7401] netlink: 'syz.4.438': attribute type 3 has an invalid length. [ 108.428731][ T7401] netlink: 224 bytes leftover after parsing attributes in process `syz.4.438'. [ 109.405875][ T7454] netlink: 'syz.3.450': attribute type 1 has an invalid length. [ 109.450155][ T7442] hsr_slave_0 (unregistering): left promiscuous mode [ 109.656514][ T7466] netlink: 'syz.2.455': attribute type 1 has an invalid length. [ 109.829452][ T7474] 8021q: adding VLAN 0 to HW filter on device bond3 [ 109.867911][ T7474] bond2: (slave bond3): making interface the new active one [ 109.885006][ T7484] sctp: [Deprecated]: syz.4.461 (pid 7484) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.885006][ T7484] Use struct sctp_sack_info instead [ 109.915027][ T7474] bond2: (slave bond3): Enslaving as an active interface with an up link [ 109.951950][ T7466] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.021379][ T7493] netlink: 'syz.1.462': attribute type 1 has an invalid length. [ 110.085709][ T7479] tipc: Enabled bearer , priority 0 [ 110.096164][ T7479] syzkaller0: entered promiscuous mode [ 110.101663][ T7479] syzkaller0: entered allmulticast mode [ 110.174803][ T7486] netlink: 'syz.3.460': attribute type 1 has an invalid length. [ 110.175440][ T7493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.276314][ T7493] bond1: (slave veth0_to_bond): making interface the new active one [ 110.296300][ T7493] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 110.348823][ T7479] bond2: (slave gretap1): making interface the new active one [ 110.383932][ T7520] x_tables: duplicate underflow at hook 1 [ 110.388454][ T7479] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 110.442935][ T7486] tipc: Resetting bearer [ 110.494754][ T7478] tipc: Resetting bearer [ 110.522756][ T7478] tipc: Disabling bearer [ 111.299932][ T7549] __nla_validate_parse: 9 callbacks suppressed [ 111.299952][ T7549] netlink: 40 bytes leftover after parsing attributes in process `syz.3.476'. [ 111.362511][ T7553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'. [ 111.373298][ T7549] netlink: 40 bytes leftover after parsing attributes in process `syz.3.476'. [ 111.697741][ T7559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.479'. [ 111.965611][ T7574] lo speed is unknown, defaulting to 1000 [ 111.985317][ T7574] lo speed is unknown, defaulting to 1000 [ 112.025686][ T7576] netlink: 'syz.0.481': attribute type 29 has an invalid length. [ 112.068376][ T7574] lo speed is unknown, defaulting to 1000 [ 112.157128][ T7584] netlink: 'syz.2.484': attribute type 10 has an invalid length. [ 112.218605][ T7584] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.274787][ T7584] bond0: (slave team0): Enslaving as an active interface with an up link [ 112.393639][ T13] tipc: Subscription rejected, illegal request [ 112.412127][ T7592] netlink: 'syz.1.485': attribute type 13 has an invalid length. [ 112.680150][ T7606] SET target dimension over the limit! [ 112.735437][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.489'. [ 112.828624][ T7614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.490'. [ 112.903063][ T7574] infiniband syz0: set active [ 112.911565][ T7574] infiniband syz0: added lo [ 112.919746][ T7606] tipc: Enabled bearer , priority 0 [ 112.929300][ T5894] lo speed is unknown, defaulting to 1000 [ 112.944920][ T7574] syz0: rxe_create_cq: returned err = -12 [ 112.962456][ T7574] infiniband syz0: Couldn't create ib_mad CQ [ 112.969069][ T7574] infiniband syz0: Couldn't open port 1 [ 113.052087][ T7606] syzkaller0: entered promiscuous mode [ 113.057769][ T7606] syzkaller0: entered allmulticast mode [ 113.065998][ T7574] RDS/IB: syz0: added [ 113.078694][ T7574] smc: adding ib device syz0 with port count 1 [ 113.084240][ T7606] tipc: Resetting bearer [ 113.173592][ T7574] smc: ib device syz0 port 1 has no pnetid [ 113.181353][ T7574] lo speed is unknown, defaulting to 1000 [ 113.189064][ T9] lo speed is unknown, defaulting to 1000 [ 113.290974][ T7619] netlink: 20 bytes leftover after parsing attributes in process `syz.2.491'. [ 113.341887][ T7619] netlink: 36 bytes leftover after parsing attributes in process `syz.2.491'. [ 113.373613][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.495'. [ 113.392866][ T7626] vlan2: entered allmulticast mode [ 113.398751][ T7626] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 113.573404][ T7603] tipc: Resetting bearer [ 113.648243][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.499'. [ 113.657745][ T7642] IPv6: NLM_F_CREATE should be specified when creating new route [ 113.996812][ T9] tipc: Node number set to 3086215270 [ 114.623986][ T7603] tipc: Disabling bearer [ 114.636760][ T7574] lo speed is unknown, defaulting to 1000 [ 115.092376][ T7666] bond2 (unregistering): Released all slaves [ 115.175955][ T7676] netlink: 'syz.4.504': attribute type 1 has an invalid length. [ 115.184564][ T7574] lo speed is unknown, defaulting to 1000 [ 115.262610][ T7676] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.321041][ T7678] bond2: (slave ip6erspan0): making interface the new active one [ 115.362281][ T7678] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 115.752561][ T7574] lo speed is unknown, defaulting to 1000 [ 115.759226][ T7702] openvswitch: netlink: Duplicate key (type 1). [ 115.921010][ T3013] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.952284][ T3013] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.976896][ T3013] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.997256][ T3013] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.052125][ T7718] sctp: [Deprecated]: syz.3.517 (pid 7718) Use of int in max_burst socket option. [ 116.052125][ T7718] Use struct sctp_assoc_value instead [ 116.086603][ T7705] bond0: entered promiscuous mode [ 116.098278][ T7705] bond_slave_0: entered promiscuous mode [ 116.110451][ T7705] bond_slave_1: entered promiscuous mode [ 116.118878][ T7705] team0: entered promiscuous mode [ 116.125411][ T7705] team_slave_0: entered promiscuous mode [ 116.147401][ T7705] team_slave_1: entered promiscuous mode [ 116.189233][ T7705] bond0: left promiscuous mode [ 116.199757][ T7705] bond_slave_0: left promiscuous mode [ 116.208703][ T7705] bond_slave_1: left promiscuous mode [ 116.215116][ T7705] team0: left promiscuous mode [ 116.220073][ T7705] team_slave_0: left promiscuous mode [ 116.226561][ T7705] team_slave_1: left promiscuous mode [ 116.419097][ T7574] lo speed is unknown, defaulting to 1000 [ 116.509171][ T7732] xt_TCPMSS: Only works on TCP SYN packets [ 116.746791][ T7744] __nla_validate_parse: 7 callbacks suppressed [ 116.746809][ T7744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.527'. [ 116.888686][ T7752] atomic_op ffff888030052198 conn xmit_atomic 0000000000000000 [ 117.044664][ T7757] netlink: 'syz.1.530': attribute type 83 has an invalid length. [ 117.323303][ T7768] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 117.401012][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.536'. [ 117.424583][ T7768] netlink: 'syz.3.534': attribute type 178 has an invalid length. [ 117.609725][ T7789] tipc: Started in network mode [ 117.643183][ T7789] tipc: Node identity 5e3b45507db9, cluster identity 4711 [ 117.669265][ T7789] tipc: Enabled bearer , priority 0 [ 117.694204][ T7796] syzkaller0: entered promiscuous mode [ 117.694954][ T7792] netlink: 260 bytes leftover after parsing attributes in process `syz.0.541'. [ 117.703223][ T7796] syzkaller0: entered allmulticast mode [ 117.768502][ T7789] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 117.827955][ T7789] tipc: Resetting bearer [ 117.854163][ T7788] tipc: Resetting bearer [ 117.893492][ T7803] netlink: 16 bytes leftover after parsing attributes in process `syz.0.546'. [ 117.911830][ T7788] tipc: Disabling bearer [ 117.930632][ T7808] netlink: 'syz.4.545': attribute type 1 has an invalid length. [ 118.087978][ T7813] bond3: (slave geneve2): making interface the new active one [ 118.119991][ T7818] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 118.146591][ T7813] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 118.172513][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 118.182112][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 118.205753][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 118.215476][ T7819] netlink: 52 bytes leftover after parsing attributes in process `syz.2.548'. [ 118.215921][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 118.422312][ T7827] tipc: Enabled bearer , priority 0 [ 118.472997][ T7827] tipc: Resetting bearer [ 118.549118][ T7825] tipc: Resetting bearer [ 118.580439][ T7825] tipc: Disabling bearer [ 118.874881][ T7846] syzkaller1: entered promiscuous mode [ 118.895356][ T7846] syzkaller1: entered allmulticast mode [ 118.978826][ T7854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.191939][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.563'. [ 119.245723][ T7861] ieee802154 phy1 wpan1: encryption failed: -22 [ 119.339030][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.565'. [ 119.379754][ T7870] xt_cgroup: invalid path, errno=-2 [ 119.503922][ T7873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.542085][ T7876] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 119.835010][ T7887] syzkaller0: entered promiscuous mode [ 119.869598][ T7887] syzkaller0: entered allmulticast mode [ 119.976501][ T7906] netlink: 48 bytes leftover after parsing attributes in process `syz.0.574'. [ 120.418309][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 120.480640][ T7936] netlink: 'syz.0.582': attribute type 1 has an invalid length. [ 120.555800][ T7936] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 120.570440][ T7945] syzkaller0: entered promiscuous mode [ 120.593051][ T7945] syzkaller0: entered allmulticast mode [ 120.691526][ T7946] syzkaller0: entered promiscuous mode [ 120.700427][ T7946] syzkaller0: entered allmulticast mode [ 120.709059][ T7952] FAULT_INJECTION: forcing a failure. [ 120.709059][ T7952] name failslab, interval 1, probability 0, space 0, times 0 [ 120.723062][ T7952] CPU: 0 UID: 0 PID: 7952 Comm: syz.2.588 Not tainted syzkaller #0 PREEMPT(full) [ 120.723089][ T7952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.723100][ T7952] Call Trace: [ 120.723107][ T7952] [ 120.723114][ T7952] dump_stack_lvl+0x189/0x250 [ 120.723141][ T7952] ? __pfx____ratelimit+0x10/0x10 [ 120.723162][ T7952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.723184][ T7952] ? __pfx__printk+0x10/0x10 [ 120.723214][ T7952] ? __lock_acquire+0xab9/0xd20 [ 120.723239][ T7952] should_fail_ex+0x414/0x560 [ 120.723269][ T7952] should_failslab+0xa8/0x100 [ 120.723288][ T7952] kmem_cache_alloc_noprof+0x74/0x6e0 [ 120.723313][ T7952] ? skb_clone+0x212/0x3a0 [ 120.723337][ T7952] skb_clone+0x212/0x3a0 [ 120.723359][ T7952] __netlink_deliver_tap+0x404/0x850 [ 120.723397][ T7952] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.723423][ T7952] netlink_deliver_tap+0x19c/0x1b0 [ 120.723448][ T7952] netlink_unicast+0x7fa/0x9e0 [ 120.723480][ T7952] ? __pfx_netlink_unicast+0x10/0x10 [ 120.723505][ T7952] ? netlink_sendmsg+0x642/0xb30 [ 120.723519][ T7952] ? skb_put+0x11b/0x210 [ 120.723539][ T7952] netlink_sendmsg+0x805/0xb30 [ 120.723565][ T7952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.723593][ T7952] ? aa_sock_msg_perm+0xf1/0x1d0 [ 120.723620][ T7952] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 120.723637][ T7952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.723662][ T7952] __sock_sendmsg+0x21c/0x270 [ 120.723688][ T7952] ____sys_sendmsg+0x505/0x830 [ 120.723712][ T7952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.723739][ T7952] ? import_iovec+0x74/0xa0 [ 120.723763][ T7952] ___sys_sendmsg+0x21f/0x2a0 [ 120.723783][ T7952] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.723839][ T7952] ? __fget_files+0x2a/0x420 [ 120.723855][ T7952] ? __fget_files+0x3a0/0x420 [ 120.723883][ T7952] __x64_sys_sendmsg+0x19b/0x260 [ 120.723904][ T7952] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.723933][ T7952] ? __pfx_ksys_write+0x10/0x10 [ 120.723960][ T7952] ? do_syscall_64+0xbe/0xfa0 [ 120.723986][ T7952] do_syscall_64+0xfa/0xfa0 [ 120.724005][ T7952] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.724026][ T7952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.724044][ T7952] ? clear_bhb_loop+0x60/0xb0 [ 120.724065][ T7952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.724082][ T7952] RIP: 0033:0x7f1f3018efc9 [ 120.724099][ T7952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.724114][ T7952] RSP: 002b:00007f1f310f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.724133][ T7952] RAX: ffffffffffffffda RBX: 00007f1f303e5fa0 RCX: 00007f1f3018efc9 [ 120.724146][ T7952] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 120.724157][ T7952] RBP: 00007f1f310f4090 R08: 0000000000000000 R09: 0000000000000000 [ 120.724168][ T7952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.724178][ T7952] R13: 00007f1f303e6038 R14: 00007f1f303e5fa0 R15: 00007ffe83a2a5e8 [ 120.724215][ T7952] [ 121.030281][ T7952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.588'. [ 121.550658][ T7978] xt_TPROXY: Can be used only with -p tcp or -p udp [ 122.625519][ T7995] xt_TCPMSS: Only works on TCP SYN packets [ 122.722071][ T7998] __nla_validate_parse: 3 callbacks suppressed [ 122.722087][ T7998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.600'. [ 123.045572][ T8016] tap0: tun_chr_ioctl cmd 2147808524 [ 123.060228][ T8016] tap0: tun_chr_ioctl cmd 1074025676 [ 123.094334][ T8016] tap0: owner set to 0 [ 123.213230][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.220499][ C1] bridge0: topology change detected, propagating [ 123.227835][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.235099][ C1] bridge0: topology change detected, propagating [ 123.684521][ T8056] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.885084][ T8073] tipc: Enabling of bearer rejected, failed to enable media [ 124.132887][ T8088] tipc: Enabling of bearer rejected, media not registered [ 124.204405][ T8091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.628'. [ 124.314970][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 124.336933][ T8103] netlink: 132 bytes leftover after parsing attributes in process `syz.3.632'. [ 124.437528][ T8106] tipc: Started in network mode [ 124.442550][ T8106] tipc: Node identity bec753a54a31, cluster identity 4711 [ 124.473556][ T8106] tipc: Enabled bearer , priority 0 [ 124.489432][ T8112] syzkaller0: entered promiscuous mode [ 124.517559][ T8112] syzkaller0: entered allmulticast mode [ 124.569716][ T8118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.636'. [ 124.576934][ T8124] netlink: 'syz.3.635': attribute type 1 has an invalid length. [ 124.653767][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.639'. [ 124.692251][ T8124] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.718030][ T8105] tipc: Resetting bearer [ 124.727474][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.635'. [ 124.755961][ T8105] tipc: Disabling bearer [ 124.770033][ T8139] netlink: 'syz.4.640': attribute type 26 has an invalid length. [ 124.777952][ T8139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.640'. [ 124.801958][ T8132] tipc: Enabled bearer , priority 0 [ 124.812349][ T8135] team_slave_0: entered promiscuous mode [ 124.819214][ T8135] team_slave_0: entered allmulticast mode [ 124.835855][ T8142] netlink: 72 bytes leftover after parsing attributes in process `syz.4.640'. [ 124.851986][ T8126] netlink: 120 bytes leftover after parsing attributes in process `syz.3.635'. [ 124.862324][ T8139] netlink: 'syz.4.640': attribute type 26 has an invalid length. [ 124.876900][ T8135] tipc: Disabling bearer [ 125.415540][ T8175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.639875][ T8186] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 126.389825][ T8210] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.397584][ T8210] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.697470][ T8210] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 127.328136][ T8263] bridge_slave_1: left allmulticast mode [ 127.385924][ T8263] bridge_slave_1: left promiscuous mode [ 127.423402][ T8263] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.445989][ T8263] bridge_slave_0: left allmulticast mode [ 127.467004][ T8263] bridge_slave_0: left promiscuous mode [ 127.472879][ T8263] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.599649][ T8282] tipc: Enabled bearer , priority 0 [ 127.711170][ T8278] tipc: Disabling bearer [ 127.779226][ T8285] bridge4: entered promiscuous mode [ 127.823757][ T8285] bridge4: entered allmulticast mode [ 127.839347][ T8303] __nla_validate_parse: 8 callbacks suppressed [ 127.839365][ T8303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.686'. [ 127.856490][ T8303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.686'. [ 127.886195][ T8285] team0: Port device bridge4 added [ 127.897497][ T8293] bridge0: port 3(team0) entered blocking state [ 127.904993][ T8293] bridge0: port 3(team0) entered disabled state [ 127.911777][ T8293] team0: entered allmulticast mode [ 127.917220][ T8293] team_slave_0: entered allmulticast mode [ 127.924487][ T8293] team_slave_1: entered allmulticast mode [ 127.935082][ T8293] team0: entered promiscuous mode [ 127.940698][ T8293] team_slave_0: entered promiscuous mode [ 127.950385][ T8293] team_slave_1: entered promiscuous mode [ 127.957941][ T8293] bridge0: port 3(team0) entered blocking state [ 127.964586][ T8293] bridge0: port 3(team0) entered forwarding state [ 127.996812][ T8303] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 128.047839][ T8303] bond4 (unregistering): Released all slaves [ 128.381801][ T8336] netlink: 'syz.3.694': attribute type 21 has an invalid length. [ 128.402556][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.694'. [ 128.423673][ T8336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.694'. [ 128.441843][ T8336] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 128.531367][ T8347] netlink: 'syz.3.698': attribute type 14 has an invalid length. [ 128.679949][ T8353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'. [ 128.700479][ T8355] netlink: 'syz.1.700': attribute type 1 has an invalid length. [ 128.709521][ T8353] netlink: 'syz.2.701': attribute type 5 has an invalid length. [ 128.752877][ T8353] netlink: 20 bytes leftover after parsing attributes in process `syz.2.701'. [ 128.824338][ T8353] geneve2: entered promiscuous mode [ 128.831561][ T8353] geneve2: entered allmulticast mode [ 128.842371][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.702'. [ 128.870272][ T8364] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 128.883671][ T37] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 128.910919][ T37] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 128.946663][ T37] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 128.984445][ T37] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 129.099296][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.704'. [ 129.133279][ T8377] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 129.346411][ T8394] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 129.365778][ T8347] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.376053][ T8347] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 129.379385][ T8397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.711'. [ 129.420782][ T8347] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.454322][ T8347] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 129.498919][ T8347] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 129.511877][ T8402] netlink: 'syz.2.710': attribute type 2 has an invalid length. [ 129.553655][ T8347] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 129.627587][ T8347] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 129.671233][ T8347] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 129.747008][ T8347] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 129.764135][ T8414] netlink: 'syz.4.716': attribute type 1 has an invalid length. [ 129.765309][ T8347] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 129.796959][ T8414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.716'. [ 130.580608][ T8457] netlink: 'syz.1.724': attribute type 23 has an invalid length. [ 130.627398][ T8457] lo: Caught tx_queue_len zero misconfig [ 131.014465][ T8477] netlink: 'syz.1.728': attribute type 9 has an invalid length. [ 131.127080][ T8489] netlink: 'syz.3.731': attribute type 10 has an invalid length. [ 131.149733][ T8489] bridge0: port 3(team0) entered disabled state [ 131.157141][ T8489] team0: left allmulticast mode [ 131.162149][ T8489] team_slave_0: left allmulticast mode [ 131.168399][ T8489] team_slave_1: left allmulticast mode [ 131.202151][ T8489] team0: left promiscuous mode [ 131.222475][ T8489] team_slave_0: left promiscuous mode [ 131.240887][ T8489] team_slave_1: left promiscuous mode [ 131.264051][ T8489] bridge0: port 3(team0) entered disabled state [ 131.328485][ T8489] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.352914][ T8489] bond0: (slave team0): Enslaving as an active interface with an up link [ 131.499382][ T8534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.624485][ T8522] bond4: entered promiscuous mode [ 131.730975][ T8560] netlink: 'syz.2.740': attribute type 29 has an invalid length. [ 131.792485][ T8562] netlink: 'syz.2.740': attribute type 29 has an invalid length. [ 131.911683][ T8575] netlink: 'syz.2.743': attribute type 29 has an invalid length. [ 132.229767][ T8594] gretap0: entered promiscuous mode [ 132.298199][ T8594] gretap0: left promiscuous mode [ 132.372979][ T8609] vlan1: entered allmulticast mode [ 132.378773][ T8609] veth0_vlan: entered allmulticast mode [ 132.386037][ T8610] vlan1: left allmulticast mode [ 132.410290][ T8610] veth0_vlan: left allmulticast mode [ 132.821733][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.850749][ T8633] __nla_validate_parse: 7 callbacks suppressed [ 132.850766][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.752'. [ 132.874421][ T8633] vlan2: entered allmulticast mode [ 132.880114][ T8633] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 133.029777][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'. [ 133.081898][ T8639] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 133.312593][ T8653] netlink: 27 bytes leftover after parsing attributes in process `syz.4.758'. [ 133.510790][ T8664] netlink: 'syz.4.761': attribute type 2 has an invalid length. [ 133.662776][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 133.717909][ T8675] netlink: 44 bytes leftover after parsing attributes in process `syz.2.762'. [ 133.754568][ T8676] netlink: 'syz.0.764': attribute type 8 has an invalid length. [ 133.850573][ T8676] syzkaller0: entered promiscuous mode [ 133.871345][ T8676] syzkaller0: entered allmulticast mode [ 133.915944][ T8676] tipc: Enabled bearer , priority 0 [ 133.956625][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.766'. [ 133.968304][ T8673] tipc: Resetting bearer [ 134.045927][ T8673] tipc: Disabling bearer [ 134.067495][ T8693] netlink: 108 bytes leftover after parsing attributes in process `syz.4.770'. [ 134.310158][ T8706] dvmrp0: entered allmulticast mode [ 134.318617][ T8709] netlink: 'syz.0.773': attribute type 21 has an invalid length. [ 134.332322][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.773'. [ 134.635535][ T8717] syzkaller0: entered promiscuous mode [ 134.641112][ T8717] syzkaller0: entered allmulticast mode [ 134.764718][ T8721] raw_sendmsg: syz.3.776 forgot to set AF_INET. Fix it! [ 135.884895][ T8737] validate_nla: 1 callbacks suppressed [ 135.884912][ T8737] netlink: 'syz.3.780': attribute type 1 has an invalid length. [ 135.940059][ T8742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.781'. [ 136.078873][ T8750] veth0_to_team: entered promiscuous mode [ 136.086075][ T8750] veth0_to_team: entered allmulticast mode [ 136.109137][ T8750] netlink: 152 bytes leftover after parsing attributes in process `syz.4.786'. [ 136.319511][ T8765] mac80211_hwsim hwsim6 wlan1: Caught tx_queue_len zero misconfig [ 136.691136][ T8786] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 136.705551][ T8786] bond4 (unregistering): Released all slaves [ 136.941269][ T8810] netlink: 'syz.2.801': attribute type 1 has an invalid length. [ 136.955495][ T8810] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 137.002561][ T8815] netlink: 'syz.2.804': attribute type 1 has an invalid length. [ 137.065765][ T8808] netlink: 'syz.0.802': attribute type 1 has an invalid length. [ 137.098695][ T8815] netlink: 'syz.2.804': attribute type 3 has an invalid length. [ 137.302477][ T8822] lo: left allmulticast mode [ 137.405406][ T8828] Bluetooth: MGMT ver 1.23 [ 137.412837][ T8828] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 137.638108][ T8844] tipc: Enabled bearer , priority 0 [ 137.646543][ T8835] x_tables: duplicate underflow at hook 1 [ 137.722882][ T8844] syzkaller0: entered promiscuous mode [ 137.748059][ T8844] syzkaller0: entered allmulticast mode [ 137.805352][ T8844] tipc: Resetting bearer [ 137.837944][ T8843] tipc: Resetting bearer [ 137.898617][ T8843] tipc: Disabling bearer [ 138.640759][ T8889] netlink: 'syz.4.825': attribute type 11 has an invalid length. [ 138.653689][ T8889] __nla_validate_parse: 5 callbacks suppressed [ 138.653708][ T8889] netlink: 224 bytes leftover after parsing attributes in process `syz.4.825'. [ 138.689111][ T8889] sctp: [Deprecated]: syz.4.825 (pid 8889) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.689111][ T8889] Use struct sctp_sack_info instead [ 138.742809][ T8891] netlink: 76 bytes leftover after parsing attributes in process `syz.1.824'. [ 138.796181][ T8893] netlink: 36 bytes leftover after parsing attributes in process `syz.0.826'. [ 138.857204][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.828'. [ 138.917208][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'. [ 138.996861][ T8909] : entered promiscuous mode [ 139.204877][ T8924] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 139.235024][ T8927] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 139.502606][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'. [ 139.513620][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'. [ 139.639297][ T8951] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 139.653611][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.847'. [ 139.669975][ T8951] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 139.681794][ T8951] gretap2: entered promiscuous mode [ 139.705619][ T8951] gretap2: entered allmulticast mode [ 139.767458][ T8957] netlink: 'syz.2.848': attribute type 2 has an invalid length. [ 139.992066][ T8973] IPVS: set_ctl: invalid protocol: 61 224.0.0.1:20003 [ 140.002465][ T8973] IPVS: set_ctl: invalid protocol: 61 224.0.0.1:20003 [ 140.194039][ T8990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.857'. [ 140.343747][ T8998] netlink: 32 bytes leftover after parsing attributes in process `syz.0.861'. [ 140.352982][ T9000] bond0: entered allmulticast mode [ 140.371207][ T9000] bond_slave_0: entered allmulticast mode [ 140.387595][ T9000] bond_slave_1: entered allmulticast mode [ 140.788524][ T9031] Bluetooth: MGMT ver 1.23 [ 140.838703][ T9031] bond0: entered promiscuous mode [ 140.865751][ T9031] bond_slave_0: entered promiscuous mode [ 140.877211][ T9031] bond_slave_1: entered promiscuous mode [ 140.878773][ T9039] netlink: 'syz.0.873': attribute type 12 has an invalid length. [ 140.890363][ T9031] team0: entered promiscuous mode [ 140.896230][ T9031] team_slave_1: entered promiscuous mode [ 140.906172][ T9031] bond0: left promiscuous mode [ 140.910978][ T9031] bond_slave_0: left promiscuous mode [ 140.918107][ T9031] bond_slave_1: left promiscuous mode [ 140.924120][ T9031] team0: left promiscuous mode [ 140.969793][ T9031] team_slave_1: left promiscuous mode [ 141.308321][ T9061] ip6tnl0: Caught tx_queue_len zero misconfig [ 141.350668][ T9065] netlink: 'syz.3.881': attribute type 10 has an invalid length. [ 141.370792][ T9065] batman_adv: batadv0: Adding interface: netdevsim0 [ 141.385177][ T9065] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.414017][ T9065] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 141.428742][ T9067] netlink: 'syz.4.882': attribute type 10 has an invalid length. [ 141.450518][ T9067] batman_adv: batadv0: Adding interface: netdevsim0 [ 141.495318][ T9067] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.551209][ T9067] batman_adv: batadv0: Interface activated: netdevsim0 [ 141.570338][ T9073] netlink: 'syz.4.882': attribute type 10 has an invalid length. [ 141.611201][ T9073] team0: Port device dummy0 added [ 141.725583][ T9083] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.862896][ T9089] bridge0: entered allmulticast mode [ 141.924213][ T9089] bond_slave_0: entered promiscuous mode [ 141.930152][ T9089] bond_slave_1: entered promiscuous mode [ 141.935918][ T9089] bridge0: entered promiscuous mode [ 141.974679][ T9101] netlink: 'syz.4.890': attribute type 10 has an invalid length. [ 141.982930][ T9100] netlink: 'syz.3.889': attribute type 2 has an invalid length. [ 141.993052][ T9089] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 142.004554][ T9089] bond1: (slave macvlan3): making interface the new active one [ 142.034672][ T9105] syz1: rxe_newlink: already configured on syz_tun [ 142.045890][ T9089] macvlan3: entered promiscuous mode [ 142.057301][ T9089] bond0: entered promiscuous mode [ 142.068431][ T9089] bond1: (slave macvlan3): Enslaving as an active interface with an up link [ 142.080913][ T9101] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.088315][ T9101] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.155830][ T9089] syz.4.890 (9089) used greatest stack depth: 17560 bytes left [ 142.224055][ T9112] netlink: 'syz.3.895': attribute type 2 has an invalid length. [ 142.244646][ T9109] syzkaller0: entered promiscuous mode [ 142.250637][ T9109] syzkaller0: entered allmulticast mode [ 142.284006][ T9109] xfrm1: entered promiscuous mode [ 142.289088][ T9109] xfrm1: entered allmulticast mode [ 142.309303][ T9112] tipc: Enabled bearer , priority 0 [ 142.376177][ T9112] syzkaller0: entered promiscuous mode [ 142.381695][ T9112] syzkaller0: entered allmulticast mode [ 142.460345][ T9112] tipc: Resetting bearer [ 142.483825][ T9112] netlink: 'syz.3.895': attribute type 1 has an invalid length. [ 142.550890][ T9111] tipc: Resetting bearer [ 142.610789][ T9111] tipc: Disabling bearer [ 142.631613][ T9137] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 142.754538][ T9149] Cannot find del_set index 3 as target [ 142.982554][ T9164] syzkaller1: entered promiscuous mode [ 142.988276][ T9164] syzkaller1: entered allmulticast mode [ 143.461324][ T9187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.521268][ T9187] bond0: (slave rose0): Enslaving as an active interface with an up link [ 143.844328][ T9203] bond5: invalid ARP target 0.0.0.0 specified for addition [ 143.861761][ T9203] bond5: option arp_ip_target: invalid value (0) [ 143.871987][ T9203] bond5 (unregistering): Released all slaves [ 144.217996][ T9226] __nla_validate_parse: 15 callbacks suppressed [ 144.218013][ T9226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.924'. [ 144.359095][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'. [ 144.385559][ T9235] pimreg: entered allmulticast mode [ 144.425006][ T9236] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 144.478967][ T9244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'. [ 144.545844][ T9237] macvtap1: entered allmulticast mode [ 145.018861][ T9280] netlink: 332 bytes leftover after parsing attributes in process `syz.3.940'. [ 145.100410][ T9284] netlink: 'syz.4.941': attribute type 13 has an invalid length. [ 145.182691][ T9284] gretap0: refused to change device tx_queue_len [ 145.202880][ T9284] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 145.238384][ T9270] lo speed is unknown, defaulting to 1000 [ 145.695782][ T9319] netlink: 'syz.0.948': attribute type 51 has an invalid length. [ 145.719709][ T9319] netlink: 'syz.0.948': attribute type 48 has an invalid length. [ 145.756450][ T9319] netlink: 40 bytes leftover after parsing attributes in process `syz.0.948'. [ 145.796064][ T9321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.952'. [ 145.828000][ T9327] netlink: 156 bytes leftover after parsing attributes in process `syz.2.950'. [ 145.886072][ T9321] bond4: option xmit_hash_policy: invalid value (64) [ 145.895931][ T9321] bond4 (unregistering): Released all slaves [ 146.152272][ T9346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.957'. [ 146.158798][ T9350] netlink: 16 bytes leftover after parsing attributes in process `syz.4.958'. [ 146.372813][ T9357] syzkaller0: entered promiscuous mode [ 146.378431][ T9357] syzkaller0: entered allmulticast mode [ 146.619249][ T9373] netlink: 'syz.2.962': attribute type 29 has an invalid length. [ 146.644066][ T9373] netlink: 'syz.2.962': attribute type 29 has an invalid length. [ 146.707018][ T9381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.964'. [ 146.767797][ T9381] block nbd0: Unsupported socket: should be TCP or UNIX. [ 146.898315][ T9391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.973906][ T5941] lo speed is unknown, defaulting to 1000 [ 147.033676][ T9400] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 148.009784][ T9465] x_tables: unsorted entry at hook 2 [ 148.219146][ T9489] veth0: entered promiscuous mode [ 148.264781][ T9487] veth0: left promiscuous mode [ 148.386155][ T9497] netlink: 'syz.2.995': attribute type 5 has an invalid length. [ 148.450091][ T30] audit: type=1107 audit(1761502860.996:2): pid=9500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='rvGHš&gkNu' [ 148.452537][ T9505] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 148.568707][ T9505] bond5: entered promiscuous mode [ 148.602018][ T9516] netlink: 'syz.4.1001': attribute type 7 has an invalid length. [ 148.686585][ T9516] netlink: 'syz.4.1001': attribute type 8 has an invalid length. [ 148.727647][ T9516] gretap0: entered promiscuous mode [ 148.745346][ T9516] batadv_slave_1: entered promiscuous mode [ 148.758693][ T9516] batadv_slave_1: left promiscuous mode [ 148.768900][ T9516] gretap0: left promiscuous mode [ 149.246053][ T9554] __nla_validate_parse: 9 callbacks suppressed [ 149.246072][ T9554] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1011'. [ 149.405731][ T9566] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1015'. [ 149.756231][ T9588] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1023'. [ 149.770795][ T9589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1022'. [ 149.830055][ T9593] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1024'. [ 150.096233][ T9612] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 150.261793][ T9623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1033'. [ 150.295638][ T9623] bond1: (slave veth0_to_bond): Releasing active interface [ 150.315548][ T9623] bond0: (slave bond_slave_0): Releasing backup interface [ 150.323464][ T9623] bond_slave_0: left allmulticast mode [ 150.341554][ T9623] bond0: (slave bond_slave_1): Releasing backup interface [ 150.350053][ T9623] bond_slave_1: left allmulticast mode [ 150.394085][ T9623] team0: Port device team_slave_0 removed [ 150.433066][ T9623] team0: Port device team_slave_1 removed [ 150.462293][ T9623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.469945][ T9623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.479354][ T9623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.492365][ T9623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.507859][ T9623] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 150.524371][ T9625] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1034'. [ 150.698141][ T9646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.761390][ T9651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1036'. [ 150.773454][ T5941] lo speed is unknown, defaulting to 1000 [ 150.779212][ T5941] syz0: Port: 1 Link DOWN [ 150.799019][ T9651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1036'. [ 150.812488][ T5941] lo speed is unknown, defaulting to 1000 [ 150.875238][ T9662] netlink: 'syz.3.1041': attribute type 29 has an invalid length. [ 150.884116][ T9662] netlink: 'syz.3.1041': attribute type 29 has an invalid length. [ 151.061205][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1045'. [ 151.071032][ T9674] openvswitch: netlink: Flow actions attr not present in new flow. [ 151.152977][ T9679] syz.2.1046 uses old SIOCAX25GETINFO [ 151.190249][ T9682] netlink: 'syz.3.1050': attribute type 15 has an invalid length. [ 151.270584][ T9687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.417060][ T9698] vxcan2: entered allmulticast mode [ 151.429279][ T8528] tipc: Subscription rejected, illegal request [ 151.535917][ T9703] netlink: 'syz.1.1055': attribute type 1 has an invalid length. [ 151.563862][ T9703] netlink: 'syz.1.1055': attribute type 2 has an invalid length. [ 151.782690][ T9725] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 152.153672][ T9751] validate_nla: 2 callbacks suppressed [ 152.153690][ T9751] netlink: 'syz.3.1069': attribute type 10 has an invalid length. [ 152.182052][ T9752] batadv1: entered allmulticast mode [ 152.208495][ T9751] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 152.231130][ T9751] batman_adv: batadv0: Removing interface: netdevsim0 [ 152.245214][ T9751] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 152.401820][ T9770] tipc: Enabling of bearer rejected, failed to enable media [ 152.496614][ T9777] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 152.827501][ T8528] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.871236][ T8528] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.908761][ T8528] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.941235][ T8528] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.234464][ T9819] syzkaller0: entered promiscuous mode [ 153.243129][ T9819] syzkaller0: entered allmulticast mode [ 153.573277][ T9845] netlink: 'syz.4.1105': attribute type 21 has an invalid length. [ 177.689189][ T9879] netlink: 'syz.4.1111': attribute type 1 has an invalid length. [ 177.723003][ T9883] pim6reg: entered allmulticast mode [ 177.739225][ T9885] __nla_validate_parse: 14 callbacks suppressed [ 177.739242][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1107'. [ 177.787702][ T9885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1107'. [ 177.831575][ T9885] geneve2: entered promiscuous mode [ 177.852416][ T9885] geneve2: entered allmulticast mode [ 177.999096][ T9906] ip6t_srh: unknown srh invflags 4000 [ 178.118863][ T9920] netlink: 'syz.3.1118': attribute type 4 has an invalid length. [ 178.344450][ T9939] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1124'. [ 178.584580][ T9964] netlink: 'syz.1.1132': attribute type 1 has an invalid length. [ 178.592355][ T9964] netlink: 'syz.1.1132': attribute type 1 has an invalid length. [ 178.619252][ T9967] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1134'. [ 178.685413][ T9968] ipvlan2: entered promiscuous mode [ 178.716630][ T9968] netdevsim netdevsim3: Direct firmware load for 0p failed with error -2 [ 178.744091][ T9968] netdevsim netdevsim3: Falling back to sysfs fallback for: 0p [ 178.817110][ T9978] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1138'. [ 178.925863][ T9987] netlink: 'syz.2.1142': attribute type 8 has an invalid length. [ 178.948783][ T9987] xt_bpf: check failed: parse error [ 178.957791][ T9990] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1141'. [ 178.983487][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1141'. [ 179.011790][ T9992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1141'. [ 179.045456][ T9996] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1143'. [ 179.047978][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1141'. [ 179.068420][ T9998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.071483][ T9999] netlink: 'syz.2.1144': attribute type 33 has an invalid length. [ 179.101526][ T9999] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 179.115759][ T9999] bond4 (unregistering): Released all slaves [ 179.572983][T10021] syzkaller0: entered promiscuous mode [ 179.586086][T10021] syzkaller0: entered allmulticast mode [ 179.601663][T10026] netlink: 'syz.3.1154': attribute type 3 has an invalid length. [ 180.828728][T10038] bond4 (unregistering): Released all slaves [ 180.877456][T10052] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 194.260803][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.848402][T10078] __nla_validate_parse: 70 callbacks suppressed [ 203.848430][T10078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1163'. [ 203.907625][T10079] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1161'. [ 204.147467][T10094] netlink: zone id is out of range [ 204.152750][T10094] netlink: zone id is out of range [ 204.162610][T10094] netlink: zone id is out of range [ 204.168230][T10094] netlink: zone id is out of range [ 204.174381][T10094] netlink: zone id is out of range [ 204.179512][T10094] netlink: zone id is out of range [ 204.184845][T10094] netlink: zone id is out of range [ 204.189965][T10094] netlink: zone id is out of range [ 204.195486][T10094] netlink: zone id is out of range [ 204.202800][T10083] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1166'. [ 204.204766][T10094] netlink: del zone limit has 4 unknown bytes [ 204.457797][T10107] netlink: 'syz.0.1172': attribute type 11 has an invalid length. [ 204.630952][T10110] netlink: 'syz.3.1173': attribute type 3 has an invalid length. [ 204.859795][T10130] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1180'. [ 205.007319][T10138] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1183'. [ 205.275535][T10158] netlink: 'syz.2.1189': attribute type 11 has an invalid length. [ 205.427364][T10169] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.447383][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1192'. [ 205.561787][T10171] tunl0: entered promiscuous mode [ 205.580825][T10171] netlink: 'syz.2.1194': attribute type 3 has an invalid length. [ 205.589950][T10171] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1194'. [ 205.704976][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059a93400: rx timeout, send abort [ 205.714547][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059a93400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 205.768816][T10180] netlink: 'syz.3.1195': attribute type 1 has an invalid length. [ 205.841151][T10183] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1198'. [ 206.907846][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1208'. [ 207.277733][T10215] syzkaller0: entered promiscuous mode [ 207.283581][T10215] syzkaller0: entered allmulticast mode [ 207.303804][T10221] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1206'. [ 207.804029][T10270] netlink: 'syz.4.1219': attribute type 1 has an invalid length. [ 208.180172][T10256] lo speed is unknown, defaulting to 1000 [ 208.406993][T10302] team0 (unregistering): Port device team_slave_0 removed [ 208.440806][T10302] team0 (unregistering): Port device team_slave_1 removed [ 208.491783][T10302] team0 (unregistering): Port device dummy0 removed [ 208.798804][T10330] x_tables: duplicate underflow at hook 3 [ 208.872398][T10334] bridge0: port 3(batadv1) entered blocking state [ 208.882575][T10334] bridge0: port 3(batadv1) entered disabled state [ 208.889485][T10334] batadv1: entered allmulticast mode [ 208.892686][T10336] __nla_validate_parse: 6 callbacks suppressed [ 208.892702][T10336] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1233'. [ 208.897741][T10334] batadv1: entered promiscuous mode [ 209.385144][ T8528] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 209.394642][ T8528] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 209.534127][T10362] sctp: [Deprecated]: syz.1.1241 (pid 10362) Use of int in maxseg socket option. [ 209.534127][T10362] Use struct sctp_assoc_value instead [ 209.564598][T10363] sctp: [Deprecated]: syz.1.1241 (pid 10363) Use of int in maxseg socket option. [ 209.564598][T10363] Use struct sctp_assoc_value instead [ 209.671586][T10368] x_tables: duplicate underflow at hook 3 [ 209.915619][T10382] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1248'. [ 210.037008][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1250'. [ 210.198297][T10396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1252'. [ 210.442006][T10418] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1259'. [ 210.536248][T10422] netem: incorrect ge model size [ 210.545543][T10422] netem: change failed [ 210.738323][T10435] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 210.756744][T10435] bond4 (unregistering): Released all slaves [ 210.821475][T10441] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 210.961953][T10452] xt_hashlimit: max too large, truncated to 1048576 [ 210.990954][T10452] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1268'. [ 211.013525][T10452] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1268'. [ 211.037849][T10452] xt_hashlimit: max too large, truncated to 1048576 [ 211.393901][T10482] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1276'. [ 211.428166][T10490] net_ratelimit: 2 callbacks suppressed [ 211.428184][T10490] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 211.542972][T10504] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1281'. [ 211.619100][T10509] x_tables: duplicate underflow at hook 1 [ 211.658191][ T30] audit: type=1800 audit(1761502924.206:3): pid=10512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1284" name="memory.events" dev="tmpfs" ino=1356 res=0 errno=0 [ 211.724951][ T30] audit: type=1804 audit(1761502924.206:4): pid=10512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1284" name="/newroot/265/memory.events" dev="tmpfs" ino=1356 res=1 errno=0 [ 211.790147][T10520] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1286'. [ 211.840601][T10520] netlink: 'syz.1.1286': attribute type 13 has an invalid length. [ 212.051847][T10539] sctp: [Deprecated]: syz.2.1291 (pid 10539) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.051847][T10539] Use struct sctp_sack_info instead [ 212.145903][T10550] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 212.366778][T10561] netlink: 'syz.3.1298': attribute type 1 has an invalid length. [ 212.523995][T10567] 8021q: adding VLAN 0 to HW filter on device bond5 [ 212.532975][T10567] bond4: (slave bond5): making interface the new active one [ 212.541024][T10567] bond4: (slave bond5): Enslaving as an active interface with an up link [ 212.601893][T10561] bond4: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 212.614613][T10561] bond4: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 212.994520][T10595] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) ! [ 213.017733][T10595] netlink: 'syz.2.1309': attribute type 23 has an invalid length. [ 213.257544][T10612] netlink: 'syz.2.1312': attribute type 1 has an invalid length. [ 213.321647][T10617] bond4: (slave ip6gretap1): making interface the new active one [ 213.330344][T10617] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 213.338680][T10617] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 213.346871][T10617] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 213.378053][T10619] netlink: 'syz.3.1315': attribute type 11 has an invalid length. [ 213.389834][T10619] netlink: 'syz.3.1315': attribute type 11 has an invalid length. [ 213.993688][T10658] pimreg3: entered allmulticast mode [ 214.022096][T10660] syzkaller0: refused to change device tx_queue_len [ 214.115548][T10666] __nla_validate_parse: 8 callbacks suppressed [ 214.115566][T10666] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1327'. [ 214.429174][T10681] netlink: 'syz.4.1332': attribute type 32 has an invalid length. [ 214.444409][T10683] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1333'. [ 214.456579][T10683] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.464855][T10683] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.504489][T10685] netlink: 'syz.0.1334': attribute type 5 has an invalid length. [ 214.677410][T10689] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1335'. [ 214.921263][T10708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1342'. [ 214.976551][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1342'. [ 214.995053][T10710] syzkaller1: entered promiscuous mode [ 215.000561][T10710] syzkaller1: entered allmulticast mode [ 215.009963][T10708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1342'. [ 215.187509][T10728] x_tables: duplicate underflow at hook 2 [ 215.304465][T10732] tipc: Enabling of bearer rejected, failed to enable media [ 215.335104][T10737] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1348'. [ 215.443907][T10741] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 215.528816][T10746] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1352'. [ 215.577055][T10748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1353'. [ 215.602328][T10748] vxcan2: entered allmulticast mode [ 215.652187][T10752] ip6gre0: Master is either lo or non-ether device [ 215.915614][T10766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1359'. [ 215.924958][T10766] netlink: 'syz.3.1359': attribute type 1 has an invalid length. [ 215.932692][T10766] netlink: 'syz.3.1359': attribute type 1 has an invalid length. [ 216.305185][T10791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.463824][T10797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.519577][ T5894] lo speed is unknown, defaulting to 1000 [ 216.537329][T10803] syzkaller0: entered promiscuous mode [ 216.542833][T10803] syzkaller0: entered allmulticast mode [ 216.549003][ T5894] syz0: Port: 1 Link ACTIVE [ 216.560776][ T5894] lo speed is unknown, defaulting to 1000 [ 216.707039][T10754] lo speed is unknown, defaulting to 1000 [ 218.093365][T10870] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 218.110650][T10870] team0: Device macvtap1 is already an upper device of the team interface [ 218.247612][T10876] tipc: Enabled bearer , priority 0 [ 218.276887][T10876] syzkaller0: entered promiscuous mode [ 218.292572][T10876] syzkaller0: entered allmulticast mode [ 218.403941][T10876] tipc: Resetting bearer [ 218.411797][T10873] tipc: Resetting bearer [ 218.447920][T10873] tipc: Disabling bearer [ 218.671206][T10909] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 218.683711][T10909] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 218.871523][T10919] tipc: Enabling of bearer rejected, failed to enable media [ 219.426712][T10959] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 219.469127][T10959] SET target dimension over the limit! [ 219.622669][T10967] xt_TCPMSS: Only works on TCP SYN packets [ 219.652318][T10967] netlink: zone id is out of range [ 219.664858][T10972] syzkaller1: entered promiscuous mode [ 219.682157][T10972] syzkaller1: entered allmulticast mode [ 219.945127][T10986] __nla_validate_parse: 13 callbacks suppressed [ 219.945145][T10986] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1422'. [ 220.199610][T11000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1429'. [ 220.439138][T11021] bond4: Removing last arp target with arp_interval on [ 220.502254][T11026] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1439'. [ 220.523346][T11024] tipc: Cannot configure node identity twice [ 220.527490][T11028] xt_CONNSECMARK: invalid mode: 0 [ 220.673580][T11037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1441'. [ 220.803015][T11046] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1445'. [ 220.878472][T11051] xt_hashlimit: overflow, rate too high: 0 [ 220.916286][T11051] validate_nla: 3 callbacks suppressed [ 220.916302][T11051] netlink: 'syz.3.1448': attribute type 1 has an invalid length. [ 220.960992][T11051] netlink: 'syz.3.1448': attribute type 2 has an invalid length. [ 220.990836][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1449'. [ 221.053655][T11071] netlink: 'syz.4.1453': attribute type 1 has an invalid length. [ 221.111999][T11077] block nbd0: not configured, cannot reconfigure [ 221.182059][T11071] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 221.242353][T11071] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 221.487732][T11104] Bluetooth: hci1: too big key_count value 32778 [ 221.555146][T11107] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 221.626934][T11113] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 221.639110][T11114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.648280][T11110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.715234][T11113] bond5: Unable to set down delay as MII monitoring is disabled [ 221.729299][T11113] bond5 (unregistering): Released all slaves [ 221.794918][T11128] netlink: 'syz.0.1463': attribute type 1 has an invalid length. [ 221.807759][T11118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1463'. [ 221.816292][T11129] vlan0: entered promiscuous mode [ 221.821745][T11129] bond0: entered promiscuous mode [ 221.855249][T11129] bond0: (slave vlan0): Opening slave failed [ 221.862818][T11128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.959455][T11134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1468'. [ 222.329538][T11166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1476'. [ 222.392769][T11169] syzkaller0: entered promiscuous mode [ 222.414390][T11169] syzkaller0: entered allmulticast mode [ 222.477406][T11169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1478'. [ 222.491216][T11173] netlink: 'syz.1.1480': attribute type 1 has an invalid length. [ 222.728869][T11191] netlink: 'syz.0.1484': attribute type 10 has an invalid length. [ 222.747679][T11191] bond0: (slave wlan1): Opening slave failed [ 223.219997][T11224] netlink: 'syz.2.1493': attribute type 1 has an invalid length. [ 223.262248][T11219] netlink: 'syz.1.1489': attribute type 6 has an invalid length. [ 223.268797][T11224] bond5: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 223.282814][T11219] tipc: Started in network mode [ 223.290451][T11219] tipc: Node identity ac14140f, cluster identity 4711 [ 223.311254][T11219] tipc: New replicast peer: 255.255.255.255 [ 223.325758][T11219] tipc: Enabled bearer , priority 10 [ 223.467534][T11224] veth9: entered promiscuous mode [ 223.496039][T11224] bond5: (slave veth9): Enslaving as a backup interface with a down link [ 223.752003][T11255] x_tables: duplicate underflow at hook 1 [ 224.037638][T11277] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 224.081161][T11279] veth0: entered promiscuous mode [ 224.118536][T11281] veth0: left promiscuous mode [ 224.329552][T11303] batadv_slave_1: entered promiscuous mode [ 224.371363][T11299] batadv_slave_1: left promiscuous mode [ 224.443586][ T5908] tipc: Node number set to 2886997007 [ 224.521468][T11317] bond0: Caught tx_queue_len zero misconfig [ 224.716893][T11322] vlan0: entered allmulticast mode [ 224.724690][T11322] hsr0: entered allmulticast mode [ 224.745121][T11322] hsr_slave_0: entered allmulticast mode [ 224.750802][T11322] hsr_slave_1: entered allmulticast mode [ 225.155468][T11354] netlink: 'syz.3.1531': attribute type 5 has an invalid length. [ 225.203628][T11361] IPVS: length: 57 != 8 [ 225.815359][T11372] lo speed is unknown, defaulting to 1000 [ 225.991956][T11391] __nla_validate_parse: 5 callbacks suppressed [ 225.991973][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1537'. [ 226.539749][T11426] netlink: 'syz.1.1548': attribute type 4 has an invalid length. [ 226.661111][T11429] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1549'. [ 227.291404][T11467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1564'. [ 227.464103][T11484] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1569'. [ 227.575656][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1570'. [ 227.578439][T11477] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.603762][T11489] netlink: 'syz.1.1570': attribute type 26 has an invalid length. [ 227.612337][T11496] netlink: 'syz.0.1573': attribute type 1 has an invalid length. [ 227.613412][T11494] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1572'. [ 227.622540][T11489] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1570'. [ 227.712647][T11477] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.749584][T11506] tunl0: entered promiscuous mode [ 227.755378][T11506] netlink: 'syz.1.1575': attribute type 3 has an invalid length. [ 227.763894][T11506] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1575'. [ 227.780467][T11509] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20003 [ 227.827837][T11506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.890184][T11477] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.005243][T11517] netlink: 'syz.0.1578': attribute type 39 has an invalid length. [ 228.040272][T11521] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1579'. [ 228.066616][T11477] bond0: (slave netdevsim0): Releasing backup interface [ 228.087185][T11477] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.206469][T11536] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1584'. [ 228.248065][ T8533] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.276779][ T8533] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.314695][ T8533] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.348894][ T8533] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.503154][ T30] audit: type=1804 audit(1761502941.036:5): pid=11551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1588" name="/newroot/317/cgroup.controllers" dev="tmpfs" ino=1634 res=1 errno=0 [ 228.544018][ T30] audit: type=1800 audit(1761502941.046:6): pid=11551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1588" name="cgroup.controllers" dev="tmpfs" ino=1634 res=0 errno=0 [ 228.919813][T11583] netlink: 'syz.2.1602': attribute type 1 has an invalid length. [ 228.971134][T11583] 8021q: adding VLAN 0 to HW filter on device bond6 [ 229.001111][T11590] netlink: 'syz.4.1604': attribute type 1 has an invalid length. [ 229.024705][T11588] 8021q: adding VLAN 0 to HW filter on device bond6 [ 229.031791][T11588] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 229.043543][T11588] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 229.189575][T11590] 8021q: adding VLAN 0 to HW filter on device bond6 [ 229.334874][T11583] veth11: entered promiscuous mode [ 229.368458][T11583] bond6: (slave veth11): Enslaving as an active interface with a down link [ 229.680516][T11591] veth3: entered promiscuous mode [ 229.699621][T11591] bond6: (slave veth3): Enslaving as an active interface with a down link [ 229.718527][T11592] vlan1: entered promiscuous mode [ 229.723792][T11592] bond6: entered promiscuous mode [ 229.728981][T11592] vlan1: entered allmulticast mode [ 229.734197][T11592] bond6: entered allmulticast mode [ 229.743863][T11614] netlink: 'syz.0.1608': attribute type 4 has an invalid length. [ 229.776496][T11598] bond6: entered allmulticast mode [ 230.022764][T11633] netlink: 'syz.2.1615': attribute type 7 has an invalid length. [ 230.178699][T11641] tipc: Enabled bearer , priority 0 [ 230.186354][T11641] syzkaller0: entered promiscuous mode [ 230.192427][T11641] syzkaller0: entered allmulticast mode [ 230.212860][T11641] tipc: Resetting bearer [ 230.283397][T11640] tipc: Resetting bearer [ 230.324241][T11640] tipc: Disabling bearer [ 230.858863][T11696] netlink: 'syz.2.1635': attribute type 5 has an invalid length. [ 231.087910][T11716] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20000 [ 231.136042][T11719] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 231.176714][T11722] __nla_validate_parse: 11 callbacks suppressed [ 231.176731][T11722] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1643'. [ 231.906851][T11751] netlink: 'syz.0.1653': attribute type 1 has an invalid length. [ 231.936616][T11760] netlink: 'syz.0.1653': attribute type 1 has an invalid length. [ 232.014299][T11758] block nbd0: server does not support multiple connections per device. [ 232.029772][T11758] block nbd0: shutting down sockets [ 232.093702][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1655'. [ 232.330731][T11793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1666'. [ 232.371784][T11793] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1666'. [ 232.499148][T11801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1668'. [ 232.509517][T11801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1668'. [ 232.661537][T11808] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1668'. [ 232.699676][T11810] netlink: 29 bytes leftover after parsing attributes in process `syz.3.1672'. [ 233.021923][T11842] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.029716][T11842] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.283480][T11860] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1682'. [ 233.558406][T11876] bridge5: entered promiscuous mode [ 233.565056][T11876] bridge5: entered allmulticast mode [ 233.733035][T11886] ieee802154 phy1 wpan1: encryption failed: -22 [ 233.741954][T11886] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1691'. [ 233.920375][T11893] netlink: 'syz.2.1693': attribute type 26 has an invalid length. [ 234.475199][T11940] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 234.591441][T11950] block nbd2: not configured, cannot reconfigure [ 234.687482][T11958] macvtap1: entered allmulticast mode [ 234.693053][T11958] veth0_macvtap: entered allmulticast mode [ 235.351761][T12001] syzkaller1: entered promiscuous mode [ 235.357746][T12001] syzkaller1: entered allmulticast mode [ 235.420044][T12008] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 235.859593][T12038] x_tables: duplicate underflow at hook 1 [ 235.866000][T12039] x_tables: duplicate underflow at hook 1 [ 235.923198][T12042] netlink: 'syz.1.1739': attribute type 1 has an invalid length. [ 236.015327][T12045] syzkaller0: entered promiscuous mode [ 236.021016][T12045] syzkaller0: entered allmulticast mode [ 236.219596][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057c46800: rx timeout, send abort [ 236.265957][T12064] __nla_validate_parse: 40 callbacks suppressed [ 236.265977][T12064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1746'. [ 236.309910][T12065] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1745'. [ 236.312761][T12064] netlink: 'syz.1.1746': attribute type 30 has an invalid length. [ 236.343405][T12064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'. [ 236.373742][T12064] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1746'. [ 236.500443][ T52] Bluetooth: hci0: command tx timeout [ 236.727914][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057c46800: abort rx timeout. Force session deactivation [ 236.954832][T12104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1756'. [ 237.143421][T12117] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1761'. [ 237.165842][T12119] netlink: 'syz.3.1762': attribute type 16 has an invalid length. [ 237.173919][T12119] netlink: 'syz.3.1762': attribute type 17 has an invalid length. [ 237.211090][T12119] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.218323][T12119] bridge0: port 2(bridge_slave_1) entered listening state [ 237.225781][T12119] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.232941][T12119] bridge0: port 1(bridge_slave_0) entered listening state [ 237.251111][T12119] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.285565][T12123] tipc: Enabled bearer , priority 0 [ 237.311415][T12126] tipc: Enabled bearer , priority 0 [ 237.326353][T12126] syzkaller0: entered promiscuous mode [ 237.342089][T12126] syzkaller0: entered allmulticast mode [ 237.358249][T12121] tipc: Disabling bearer [ 237.417553][T12128] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1764'. [ 237.453891][T12126] tipc: Resetting bearer [ 237.472167][T12125] tipc: Resetting bearer [ 237.539106][T12125] tipc: Disabling bearer [ 237.768428][T12163] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1774'. [ 237.871106][T12170] geneve2: entered promiscuous mode [ 237.889827][T12173] tipc: Enabled bearer , priority 0 [ 237.920399][ T8533] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 237.945209][ T8533] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 237.981736][T12165] syzkaller0: entered promiscuous mode [ 237.995829][T12165] syzkaller0: entered allmulticast mode [ 238.008282][T12180] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 238.025036][T12180] netlink: 'syz.1.1777': attribute type 1 has an invalid length. [ 238.046298][T12183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1776'. [ 238.055467][ T8533] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 238.064802][ T8533] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 238.086144][T12165] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1773'. [ 238.142707][T12165] tipc: Resetting bearer [ 238.221587][T12161] tipc: Resetting bearer [ 238.290156][T12161] tipc: Disabling bearer [ 238.821380][T12193] lo speed is unknown, defaulting to 1000 [ 239.293215][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 239.300557][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 239.758625][T12258] netlink: 'syz.2.1797': attribute type 7 has an invalid length. [ 239.770621][T12258] netlink: 'syz.2.1797': attribute type 8 has an invalid length. [ 239.962017][T12243] veth0_macvtap: left allmulticast mode [ 239.982856][ T3508] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.013638][ T3508] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.022551][ T3508] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20002 - 0 [ 240.037805][ T3508] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.046862][ T3508] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.056408][ T3508] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20002 - 0 [ 240.097171][ T3508] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.121602][ T3508] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.144410][ T3508] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20002 - 0 [ 240.170332][ T3508] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.191945][ T3508] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.201094][ T3508] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20002 - 0 [ 240.243256][T12194] lo speed is unknown, defaulting to 1000 [ 240.264400][T12272] netlink: 'syz.2.1800': attribute type 21 has an invalid length. [ 240.349777][T12272] netlink: 'syz.2.1800': attribute type 1 has an invalid length. [ 240.424297][T12286] netlink: 'syz.3.1806': attribute type 1 has an invalid length. [ 240.691260][T12295] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 240.712028][T12295] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 240.812278][T12300] hsr_slave_1 (unregistering): left promiscuous mode [ 240.961721][T12321] netlink: 'syz.3.1812': attribute type 1 has an invalid length. [ 241.373198][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.380479][ C0] bridge0: topology change detected, propagating [ 241.387293][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.394557][ C0] bridge0: topology change detected, propagating [ 241.558807][T12351] netlink: 'syz.3.1819': attribute type 1 has an invalid length. [ 241.714430][T12355] __nla_validate_parse: 5 callbacks suppressed [ 241.714450][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1821'. [ 241.791563][T12361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1823'. [ 242.163460][T12380] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1827'. [ 242.201576][T12380] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1827'. [ 242.240133][T12380] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1827'. [ 242.266689][T12380] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1827'. [ 242.306661][T12380] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1827'. [ 242.317876][T12380] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1827'. [ 242.384770][T12380] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1827'. [ 242.412672][T12380] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1827'. [ 243.197863][T12449] netlink: zone id is out of range [ 243.279101][T12458] tc_dump_action: action bad kind [ 243.496970][T12480] set match dimension is over the limit! [ 243.831820][T12504] veth1_macvtap: left promiscuous mode [ 243.837610][T12504] macsec0: entered promiscuous mode [ 243.843162][T12504] macsec0: entered allmulticast mode [ 243.856716][T12496] veth1_macvtap: entered promiscuous mode [ 243.862480][T12496] veth1_macvtap: entered allmulticast mode [ 243.909353][T12496] macsec0: left promiscuous mode [ 243.933849][T12513] netlink: 'syz.4.1870': attribute type 142 has an invalid length. [ 243.939736][T12496] macsec0: left allmulticast mode [ 243.948454][T12496] veth1_macvtap: left allmulticast mode [ 243.981613][T12510] veth0: entered promiscuous mode [ 244.055158][T12507] 0{X: renamed from gretap0 [ 244.064283][T12507] 0{X: entered allmulticast mode [ 244.072087][T12507] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 244.290205][T12533] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 245.695388][T12624] netlink: 'syz.0.1899': attribute type 30 has an invalid length. [ 245.962391][T12647] x_tables: duplicate underflow at hook 1 [ 245.979031][T12641] netlink: 'syz.3.1907': attribute type 142 has an invalid length. [ 246.208970][T12659] syzkaller0: entered promiscuous mode [ 246.226002][T12659] syzkaller0: entered allmulticast mode [ 246.262468][T12659] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 246.405184][T12681] sctp: [Deprecated]: syz.0.1918 (pid 12681) Use of int in max_burst socket option. [ 246.405184][T12681] Use struct sctp_assoc_value instead [ 246.831582][T12715] delete_channel: no stack [ 246.916506][T12726] bond7 (unregistering): Released all slaves [ 247.070772][T12734] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.082796][T12734] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.123158][T12734] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 247.157422][T12739] __nla_validate_parse: 75 callbacks suppressed [ 247.157442][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1937'. [ 247.173377][T12744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1936'. [ 247.182836][T12744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1936'. [ 247.203445][T12744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1936'. [ 247.212546][T12748] batadv_slave_0: entered promiscuous mode [ 247.297273][T12734] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.313258][T12734] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.354209][T12734] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 247.404263][T12761] netlink: 'syz.3.1941': attribute type 4 has an invalid length. [ 247.499051][T12734] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.509718][T12734] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.541262][T12734] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 247.589734][T12747] batadv_slave_0: left promiscuous mode [ 247.621724][T12775] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1942'. [ 247.742423][T12734] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.783843][T12788] SET target dimension over the limit! [ 247.797928][T12734] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.808955][T12734] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 247.948401][T12796] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1947'. [ 247.973682][ T8505] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.982073][ T8505] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 248.001464][ T8505] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 248.045139][T12795] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A [ 248.055590][ T3508] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.063963][ T3508] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 248.081959][ T3508] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 248.110374][ T3508] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.112376][T12804] sctp: [Deprecated]: syz.0.1953 (pid 12804) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.112376][T12804] Use struct sctp_sack_info instead [ 248.119200][ T3508] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 248.145228][ T3508] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 248.197394][ T8507] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.205805][ T8507] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 248.227697][ T8507] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 248.350504][T12825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1958'. [ 248.543311][T12836] netlink: 'syz.0.1961': attribute type 2 has an invalid length. [ 248.560307][T12838] xt_hashlimit: max too large, truncated to 1048576 [ 248.561369][T12836] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1961'. [ 248.627480][T12843] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 248.644574][T12843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1964'. [ 248.661747][T12845] xt_l2tp: missing protocol rule (udp|l2tpip) [ 248.725671][T12847] netlink: 'syz.0.1965': attribute type 16 has an invalid length. [ 248.736254][T12847] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1965'. [ 248.904459][T12862] netlink: 'syz.0.1969': attribute type 1 has an invalid length. [ 249.036159][T12862] 8021q: adding VLAN 0 to HW filter on device bond4 [ 249.045883][T12862] bond3: (slave bond4): making interface the new active one [ 249.058170][T12862] bond3: (slave bond4): Enslaving as an active interface with an up link [ 249.079112][T12870] macvtap2: entered allmulticast mode [ 249.084606][T12870] veth0_macvtap: entered allmulticast mode [ 249.711013][T12929] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 249.822549][T12938] netlink: 'syz.4.1989': attribute type 1 has an invalid length. [ 250.274226][T12966] tipc: Enabled bearer , priority 0 [ 250.281838][T12966] syzkaller0: entered promiscuous mode [ 250.288614][T12966] syzkaller0: entered allmulticast mode [ 250.319810][T12966] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 250.452366][T12969] tipc: Resetting bearer [ 250.581368][T12963] tipc: Resetting bearer [ 250.643869][T12963] tipc: Disabling bearer [ 250.692181][T12988] sctp: [Deprecated]: syz.2.2004 (pid 12988) Use of int in max_burst socket option deprecated. [ 250.692181][T12988] Use struct sctp_assoc_value instead [ 250.870245][T13003] veth0_macvtap: left promiscuous mode [ 251.229418][T13035] smc: net device gre0 applied user defined pnetid SYZ1 [ 251.237905][T13035] smc: net device gre0 erased user defined pnetid SYZ1 [ 251.414956][T13051] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 251.422447][T13051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.624312][T13068] netlink: 'syz.3.2029': attribute type 1 has an invalid length. [ 251.629378][T13069] netlink: 'syz.2.2028': attribute type 1 has an invalid length. [ 251.656898][T13069] netlink: 'syz.2.2028': attribute type 2 has an invalid length. [ 251.697783][T13068] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 251.709265][T13068] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 251.747436][T13064] batadv_slave_1: entered promiscuous mode [ 251.771884][T13074] gretap3: entered promiscuous mode [ 251.785997][T13074] bond7: (slave gretap3): making interface the new active one [ 251.807711][T13075] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20001 [ 251.828226][T13074] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 251.880347][T13068] macvlan3: entered promiscuous mode [ 251.886010][T13068] macvlan3: entered allmulticast mode [ 251.893969][T13068] bond7: entered promiscuous mode [ 251.899882][T13068] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 251.909673][T13068] bond7: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap3 [ 251.923033][T13068] bond7: left promiscuous mode [ 252.081948][T13092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.388576][T13061] batadv_slave_1: left promiscuous mode [ 252.401201][T13123] __nla_validate_parse: 18 callbacks suppressed [ 252.401218][T13123] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2046'. [ 252.508527][T13131] syzkaller0: entered promiscuous mode [ 252.529421][T13131] syzkaller0: entered allmulticast mode [ 252.608414][T13142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2051'. [ 252.858491][T13164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2056'. [ 252.876416][T13165] SET target dimension over the limit! [ 253.068143][ T8507] tipc: Subscription rejected, illegal request [ 253.093485][T13177] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.101066][T13177] IPv6: NLM_F_CREATE should be set when creating new route [ 253.108373][T13177] IPv6: NLM_F_CREATE should be set when creating new route [ 253.115669][T13177] IPv6: NLM_F_CREATE should be set when creating new route [ 253.143554][T13181] tipc: Enabling of bearer rejected, failed to enable media [ 253.159816][T13177] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.534521][T13209] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 253.535282][T13210] netlink: 548 bytes leftover after parsing attributes in process `syz.4.2069'. [ 253.540543][T13209] syzkaller1: Refused to change device type [ 253.798527][T13219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2073'. [ 253.997624][T13237] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2078'. [ 254.007077][T13237] netlink: 'syz.2.2078': attribute type 2 has an invalid length. [ 254.022358][T13239] SET target dimension over the limit! [ 254.453584][T13263] syzkaller0: entered promiscuous mode [ 254.459092][T13263] syzkaller0: entered allmulticast mode [ 254.595271][T13266] x_tables: ip_tables: osf match: only valid for protocol 6 [ 254.658565][T13275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2087'. [ 254.746484][T13280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2090'. [ 254.758514][T13275] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2087'. [ 254.974388][ C1] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 255.104183][T13314] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2098'. [ 255.257405][T13322] netlink: 'syz.0.2101': attribute type 1 has an invalid length. [ 255.576131][T13350] geneve3: entered promiscuous mode [ 255.582871][ T8533] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.594312][ T8533] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.613635][ T8533] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.626886][ T8533] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.637769][T13356] netlink: 'syz.3.2111': attribute type 39 has an invalid length. [ 255.646359][T13357] netlink: 'syz.3.2111': attribute type 39 has an invalid length. [ 255.654684][T13354] pim6reg: left allmulticast mode [ 255.697071][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.847115][T13361] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 255.920658][T13354] net veth1_virt_wifi .: renamed from virt_wifi0 [ 256.238334][T13382] netlink: 'syz.3.2118': attribute type 27 has an invalid length. [ 256.246503][T13382] netlink: 'syz.3.2118': attribute type 4 has an invalid length. [ 256.442293][T13402] netlink: 'syz.4.2123': attribute type 18 has an invalid length. [ 256.602577][T13413] netlink: 'syz.0.2126': attribute type 4 has an invalid length. [ 256.620435][ T5887] lo speed is unknown, defaulting to 1000 [ 256.628849][ T5887] syz0: Port: 1 Link DOWN [ 256.656043][ T5941] lo speed is unknown, defaulting to 1000 [ 256.667628][T13415] bond0: entered allmulticast mode [ 256.672782][T13415] bond_slave_0: entered allmulticast mode [ 256.687962][T13415] bond_slave_1: entered allmulticast mode [ 256.694179][T13415] team0: entered allmulticast mode [ 256.700148][T13415] team_slave_0: entered allmulticast mode [ 256.706074][T13415] team_slave_1: entered allmulticast mode [ 256.922659][T13437] xt_policy: neither incoming nor outgoing policy selected [ 257.161231][T13443] syzkaller0: entered promiscuous mode [ 257.170376][T13443] syzkaller0: entered allmulticast mode [ 257.875415][T13484] geneve3: entered promiscuous mode [ 257.880661][T13484] geneve3: entered allmulticast mode [ 317.163677][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 348.241222][T13485] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.443167][T13485] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 348.452854][T13485] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 378.582053][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 415.703439][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 415.710942][ T31] Not tainted syzkaller #0 [ 415.843139][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 415.851856][ T31] task:kworker/0:0 state:D stack:22768 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 416.103145][ T31] Workqueue: events switchdev_deferred_process_work [ 416.109808][ T31] Call Trace: [ 416.203138][ T31] [ 416.206120][ T31] __schedule+0x1798/0x4cc0 [ 416.210652][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 416.363136][ T31] ? __pfx___schedule+0x10/0x10 [ 416.368053][ T31] ? schedule+0x91/0x360 [ 416.372305][ T31] schedule+0x165/0x360 [ 416.513174][ T31] schedule_preempt_disabled+0x13/0x30 [ 416.518674][ T31] __mutex_lock+0x7e6/0x1350 [ 416.643172][ T31] ? look_up_lock_class+0x74/0x170 [ 416.648337][ T31] ? __mutex_lock+0x5bb/0x1350 [ 416.773376][ T31] ? switchdev_deferred_process_work+0xe/0x20 [ 416.779505][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 416.883238][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 416.888491][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 417.013209][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 417.018992][ T31] switchdev_deferred_process_work+0xe/0x20 [ 417.163118][ T31] process_scheduled_works+0xae1/0x17b0 [ 417.168753][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 417.303163][ T31] worker_thread+0x8a0/0xda0 [ 417.307832][ T31] kthread+0x711/0x8a0 [ 417.311924][ T31] ? __pfx_worker_thread+0x10/0x10 [ 417.463226][ T31] ? __pfx_kthread+0x10/0x10 [ 417.467874][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 417.583181][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.588423][ T31] ? __pfx_kthread+0x10/0x10 [ 417.593034][ T31] ret_from_fork+0x4bc/0x870 [ 417.773304][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 417.778477][ T31] ? __switch_to_asm+0x39/0x70 [ 417.863227][ T31] ? __switch_to_asm+0x33/0x70 [ 417.868047][ T31] ? __pfx_kthread+0x10/0x10 [ 417.872662][ T31] ret_from_fork_asm+0x1a/0x30 [ 418.023195][ T31] [ 418.026360][ T31] INFO: task kworker/u8:11:3508 blocked for more than 145 seconds. [ 418.153155][ T31] Not tainted syzkaller #0 [ 418.158133][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.333124][ T31] task:kworker/u8:11 state:D stack:24904 pid:3508 tgid:3508 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 418.453309][ T31] Workqueue: events_unbound linkwatch_event [ 418.459259][ T31] Call Trace: [ 418.462542][ T31] [ 418.593137][ T31] __schedule+0x1798/0x4cc0 [ 418.597696][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.602567][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.783266][ T31] ? __pfx___schedule+0x10/0x10 [ 418.788186][ T31] ? schedule+0x91/0x360 [ 418.792620][ T31] schedule+0x165/0x360 [ 418.943134][ T31] schedule_preempt_disabled+0x13/0x30 [ 418.948645][ T31] __mutex_lock+0x7e6/0x1350 [ 419.063152][ T31] ? look_up_lock_class+0x74/0x170 [ 419.068353][ T31] ? __mutex_lock+0x5bb/0x1350 [ 419.183168][ T31] ? linkwatch_event+0xe/0x60 [ 419.187906][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 419.192951][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.363183][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 419.368950][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 419.513158][ T31] linkwatch_event+0xe/0x60 [ 419.517698][ T31] process_scheduled_works+0xae1/0x17b0 [ 419.623209][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 419.629265][ T31] worker_thread+0x8a0/0xda0 [ 419.733137][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 419.739530][ T31] ? __kthread_parkme+0x7b/0x200 [ 419.883152][ T31] kthread+0x711/0x8a0 [ 419.887287][ T31] ? __pfx_worker_thread+0x10/0x10 [ 419.892417][ T31] ? __pfx_kthread+0x10/0x10 [ 420.043214][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 420.048468][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.176509][ T31] ? __pfx_kthread+0x10/0x10 [ 420.181155][ T31] ret_from_fork+0x4bc/0x870 [ 420.293186][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 420.298356][ T31] ? __switch_to_asm+0x39/0x70 [ 420.423319][ T31] ? __switch_to_asm+0x33/0x70 [ 420.428134][ T31] ? __pfx_kthread+0x10/0x10 [ 420.432739][ T31] ret_from_fork_asm+0x1a/0x30 [ 420.583237][ T31] [ 420.586347][ T31] INFO: task kworker/u8:16:8505 blocked for more than 148 seconds. [ 420.723130][ T31] Not tainted syzkaller #0 [ 420.728101][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 420.873152][ T31] task:kworker/u8:16 state:D stack:22280 pid:8505 tgid:8505 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 421.023231][ T31] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 421.030579][ T31] Call Trace: [ 421.153155][ T31] [ 421.156138][ T31] __schedule+0x1798/0x4cc0 [ 421.160663][ T31] ? __lock_acquire+0xab9/0xd20 [ 421.293198][ T31] ? __lock_acquire+0xab9/0xd20 [ 421.298131][ T31] ? __pfx___schedule+0x10/0x10 [ 421.303015][ T31] ? schedule+0x91/0x360 [ 421.463196][ T31] schedule+0x165/0x360 [ 421.467412][ T31] schedule_preempt_disabled+0x13/0x30 [ 421.472878][ T31] __mutex_lock+0x7e6/0x1350 [ 421.613354][ T31] ? __mutex_lock+0x5bb/0x1350 [ 421.618173][ T31] ? udp_tunnel_nic_device_sync_work+0x29/0xa50 [ 421.743199][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 421.748286][ T31] ? __lock_acquire+0xab9/0xd20 [ 421.853145][ T31] udp_tunnel_nic_device_sync_work+0x29/0xa50 [ 421.859277][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 421.983114][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 421.988921][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 422.123189][ T31] process_scheduled_works+0xae1/0x17b0 [ 422.128819][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 422.263156][ T31] worker_thread+0x8a0/0xda0 [ 422.267827][ T31] kthread+0x711/0x8a0 [ 422.271916][ T31] ? __pfx_worker_thread+0x10/0x10 [ 422.443147][ T31] ? __pfx_kthread+0x10/0x10 [ 422.447793][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 422.453002][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.633115][ T31] ? __pfx_kthread+0x10/0x10 [ 422.637762][ T31] ret_from_fork+0x4bc/0x870 [ 422.642359][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 422.793129][ T31] ? __switch_to_asm+0x39/0x70 [ 422.797942][ T31] ? __switch_to_asm+0x33/0x70 [ 422.802710][ T31] ? __pfx_kthread+0x10/0x10 [ 422.953158][ T31] ret_from_fork_asm+0x1a/0x30 [ 422.957997][ T31] [ 422.961023][ T31] INFO: task kworker/u8:18:8507 blocked for more than 150 seconds. [ 423.133127][ T31] Not tainted syzkaller #0 [ 423.138101][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.283120][ T31] task:kworker/u8:18 state:D stack:23720 pid:8507 tgid:8507 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 423.433543][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 423.439581][ T31] Call Trace: [ 423.442868][ T31] [ 423.594927][ T31] __schedule+0x1798/0x4cc0 [ 423.599495][ T31] ? __lock_acquire+0xab9/0xd20 [ 423.703136][ T31] ? __lock_acquire+0xab9/0xd20 [ 423.708036][ T31] ? __pfx___schedule+0x10/0x10 [ 423.712916][ T31] ? schedule+0x91/0x360 [ 423.863494][ T31] schedule+0x165/0x360 [ 423.867718][ T31] schedule_preempt_disabled+0x13/0x30 [ 423.993141][ T31] __mutex_lock+0x7e6/0x1350 [ 423.997786][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 424.003003][ T31] ? __mutex_lock+0x5bb/0x1350 [ 424.164956][ T31] ? addrconf_dad_work+0x112/0x14b0 [ 424.170206][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 424.293202][ T31] ? do_raw_spin_lock+0x121/0x290 [ 424.298279][ T31] ? look_up_lock_class+0x74/0x170 [ 424.403238][ T31] addrconf_dad_work+0x112/0x14b0 [ 424.408317][ T31] ? __lock_acquire+0xab9/0xd20 [ 424.523197][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 424.528707][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 424.683160][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 424.688410][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 424.813252][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 424.819023][ T31] process_scheduled_works+0xae1/0x17b0 [ 424.943166][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 424.949244][ T31] worker_thread+0x8a0/0xda0 [ 425.053363][ T31] kthread+0x711/0x8a0 [ 425.057495][ T31] ? __pfx_worker_thread+0x10/0x10 [ 425.062624][ T31] ? __pfx_kthread+0x10/0x10 [ 425.203241][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 425.208497][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.343204][ T31] ? __pfx_kthread+0x10/0x10 [ 425.347851][ T31] ret_from_fork+0x4bc/0x870 [ 425.352459][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 425.523149][ T31] ? __switch_to_asm+0x39/0x70 [ 425.527957][ T31] ? __switch_to_asm+0x33/0x70 [ 425.532730][ T31] ? __pfx_kthread+0x10/0x10 [ 425.693211][ T31] ret_from_fork_asm+0x1a/0x30 [ 425.698039][ T31] [ 425.701092][ T31] INFO: task syz.0.2136:13441 blocked for more than 153 seconds.