last executing test programs: 3m55.075037813s ago: executing program 4 (id=8301): openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x234b40, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x234b40, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r1, 0x0, 0x0) (async) write(r1, 0x0, 0x0) write(r1, &(0x7f0000000300)="46000000130001000242424242424242424242424242424242", 0x19) (async) write(r1, &(0x7f0000000300)="46000000130001000242424242424242424242424242424242", 0x19) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d80)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000001000)={'sit0\x00', 0x0}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000007200108000604000daaaaaaaaaaaaac1414bbaaaaaaaaaa3bac1415bb"], 0x20) r3 = socket(0xa, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) ppoll(&(0x7f00000001c0)=[{r4, 0x5107}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0) (async) ppoll(&(0x7f00000001c0)=[{r4, 0x5107}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0) close(r3) (async) close(r3) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet(0x2, 0x1, 0x0) sendmmsg$unix(r2, &(0x7f00000005c0)=[{{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000003c0)="d2a8875852125c184baf3f888a200059479e5f9f6da54cb8e10528dcc075968f97eb5077689ce46b8703b6c492e5662214dcaa921f1d1a6c8c45482fbb4d391192a137d96aa93f8dd1fe0aeef79a9baf082b34e5baa185b2a98ce977bc950ab69583996f92ec1fff7ca27e377b73cffaa6f6c69bfb26ce6ba2765ac8a1065d7dc691652adb72e79b49a9212e0f3a", 0x8e}, {&(0x7f0000000480)="a1e6961da77e3aee2fe0054743780c3df6a108bb03d04c508338029af8347843fe49ab8ae4b8820208f914d8d3ecad1a3ae158ee1157967683a0edf525545b4fddc713a5e35b8bcfeb230c0a891d6dcd32c4f8ba7bb7bda889248f7abed53ebb62d0bdd0f13b3a04899ee0c6c0b1a0d93a62e549ec745f9e2a6462d2a5c2afb483fb8998bace45193636a8cc2a4f63c8017756fdf113914ccc8f8100033f664f80c9bfae3262406b80b02ef8ffd8413bc6006a180a6b3d34cf9e7db0a6475581a250b99a19fdd84e95dbd990b0a5f3aa91e49fb34616b85ea1503f2e9ad7175ff6acf4", 0xe3}], 0x2, 0x0, 0x0, 0x20040800}}], 0x1, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0), 0x38) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01070000000000000000670000f4070001"], 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r7, &(0x7f0000000600)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r8, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20008004) (async) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r7, &(0x7f0000000600)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r8, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20008004) 3m54.75519773s ago: executing program 4 (id=8306): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000150001032dbd7000000000000c1600000800040001"], 0x1c}}, 0x30040040) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x64, r1, 0x100, 0x70bd2c, 0x25dfdbfa, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x40) 3m54.525804973s ago: executing program 4 (id=8310): ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000040)={'sit0\x00', @ifru_hwaddr=@local}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000140)={r0, 0x4}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0xfffffffffffffff8, 0x1c, 0x6, 0xc000000, 0x9, 0x1, 0x91, 0x5, 0x31f2, 0x80000000, 0x1, 0x7, 0x5, 0x7, 0x6]}, &(0x7f0000000280)=0x100) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f00000002c0)=""/91, &(0x7f0000000340)=0x5b) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={r3, 0x3}, &(0x7f00000003c0)=0x8) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x24, &(0x7f0000000400), &(0x7f0000000440)=0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000480)={r4, @in6={{0xa, 0x4e22, 0x6, @local, 0x10}}, 0x7, 0x3}, 0x90) r7 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r7, &(0x7f0000000600)={&(0x7f0000000540)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000580)=@can={{0x2, 0x1, 0x1}, 0x0, 0x1, 0x0, 0x0, "d93314ccf5b328f3"}, 0x10}, 0x1, 0x0, 0x0, 0x4000880}, 0x8090) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x84, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048801}, 0x4000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000800)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000840)=0x18) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), r8) sendmsg$DEVLINK_CMD_PORT_SET(r11, &(0x7f0000000a80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x130, r12, 0x300, 0x70bd26, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}]}, 0x130}}, 0x8080) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r11) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r11, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x70, r13, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1a, 0x13, [{0x51}, {0x1}, {0x48}, {0x85fc2effd433191a, 0x1}, {0xb8825c8bb69afd1}, {}, {0xa6ed580b20064a85}, {0x16, 0x1}, {0x3, 0x1}, {0x18, 0x1}, {0x6}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x48, 0x1}, {0x60}, {0x24, 0x1}, {0x1b}, {0x16}, {0x12}, {0x16}, {0x30, 0x1}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r14}]}, 0x70}}, 0x40000) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000c80)={r10, 0x1, 0x10000}, 0x10) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000cc0)={r4, 0xfffffff9}, 0x8) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r11, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, r13, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x20000040) 3m54.253919626s ago: executing program 4 (id=8313): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000008c0)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_thresh={0x8, 0xb, 0x81}]}, 0x140}}, 0x400c000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08002000fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xda9c512a9b7512ac}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0xc000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}, {&(0x7f0000000000)="1aa8906070117b653eda123ec46475d65ca8b7792e6da36191f93da265e6ec803be1248a4164a7335d78a67992bd88f1a0e3b7f48636ac498ba5f4f8b47248af", 0x40}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) nanosleep(&(0x7f0000000200), 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}, [@algo_crypt={0x68, 0x2, {{'cbc(serpent)\x00'}, 0x100, "51ad34d9ea841223e5d0f932af16e92125ccc28f24846c994df42d7b27056624"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 3m53.865585586s ago: executing program 4 (id=8316): r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x44}}, 0x0) 3m53.658064481s ago: executing program 4 (id=8319): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x48810}, 0x2404c000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x28, 0x26, 0x301, 0x670bd28, 0x25dfdbfc, {0x15}, [@typed={0x12, 0x15e, 0x0, 0x0, @binary="378d39000000000245cd295c877c"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x4007fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x29}, 0xc) 3m38.549856132s ago: executing program 32 (id=8319): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x48810}, 0x2404c000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x28, 0x26, 0x301, 0x670bd28, 0x25dfdbfc, {0x15}, [@typed={0x12, 0x15e, 0x0, 0x0, @binary="378d39000000000245cd295c877c"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x4007fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x29}, 0xc) 2m43.203929566s ago: executing program 1 (id=8958): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, 0x0, 0x88) 2m42.925951884s ago: executing program 1 (id=8964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="4400000010000104000000000000000000000000853d00000000000000000000120012000a00010076786c616e000000140002000a0001007b0000000800020001020304", 0x44}], 0x1}, 0x0) 2m41.007729523s ago: executing program 1 (id=8984): socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x210, 0x0, 0x50020000, 0x0, 0x0, 0x0, 0x178, 0x1f0, 0x1f0, 0x178, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @multicast2, 0xff, 0x0, 'veth1_to_batadv\x00', 'vlan1\x00', {}, {}, 0x6, 0x3, 0x25}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x1, 0x0, 0x0, 0x0, "f8b54bef56811d5a23a1093978539521d944884d917284e3021e0fe5400ac5774e467ac2cca185bac3d45955522fa784cec24fb8b15a3c0b5bbf6044ae73b3e2"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x3, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0x83, 0x0, &(0x7f0000000000)) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r6) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000000200)={0x34, r7, 0x1, 0x70bd3a, 0x5f47, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40881}, 0x4040840) ioctl$PPPIOCGCHAN(r5, 0x80047437, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000000000001000005000033000300000003000000400000000000007700"], 0x0, 0x35}, 0x20) 2m40.074077885s ago: executing program 1 (id=8991): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x7ffffffe, 0x1e8, 0x0, 0x11, 0x148, 0x1d0, 0x0, 0x2c8, 0x2a8, 0x2a8, 0x2c8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x29, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001082f00fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088be"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa000000000000711037000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 2m39.351859275s ago: executing program 1 (id=8999): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd600000fe80"], 0x0) mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0xf, 0x10, r1, 0x5ad66000) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000200)={0x7fff, 0x10, 0x7, 0x0, 0x1, 0xa, 0x1}, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r0, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="19e2754dac1f34b7f4a41278d3000000ad0000000000000095000000fc26963d8dfdfc0c430f9727d92100000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 2m38.325047813s ago: executing program 1 (id=9008): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xbd2}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8d4}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) 2m23.078447422s ago: executing program 33 (id=9008): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xbd2}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8d4}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) 3.714185596s ago: executing program 5 (id=9790): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0xa09d, 0x0, 0x200, 0x3}, 0x10) getsockopt$bt_hci(r1, 0x84, 0x71, &(0x7f0000000080)=""/4059, &(0x7f0000000040)=0xffed) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x1, 0x0, 0x3, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x0) 3.029342172s ago: executing program 5 (id=9794): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r2, 0xf13}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x1008001}], 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0xffffd40c, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x40000, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@gettaction={0x14, 0x32, 0x2, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4c044) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newlink={0x5c, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nr0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48c5}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r5, r7, 0x25, 0x0, @void}, 0x10) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.909393154s ago: executing program 3 (id=9795): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000400)="9400000042000100020000000000000003010000102700003200010000112233445566778899aabb080045000020000140004084b778c0a80101c0a8010204d2162e000c00007465737400003c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e0c00030008000c0004000100", 0x94, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000003000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0) 2.699793385s ago: executing program 0 (id=9796): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) shutdown(r1, 0x0) ppoll(&(0x7f0000000200)=[{r1, 0xc0}], 0x1, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000001040)=0x10000b, 0x4) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.477728717s ago: executing program 3 (id=9797): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x150, 0x111, 0x4b4, 0x150, 0x700, 0x260, 0x278, 0x278, 0x260, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [0x0, 0x0, 0xff000000], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0xff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3]}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x31, 0xb, 0x2}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private1, [0xff000000], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) bind(r5, &(0x7f0000000300)=@generic={0x1f, "0000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e100"}, 0x32) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0xb, 0x0, {0x0, 0x0, 0x0, r3, 0x312, 0x800}, [@IFLA_ADDRESS={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 2.469529144s ago: executing program 2 (id=9798): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x670, 0x5, 0x408, 0x2b8, 0x2b8, 0xfeffffff, 0x200, 0xf0, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {0xff}, 0x6, 0x2, 0x21}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x1e6, 0x8}}, @common=@addrtype={{0x30}, {0x8, 0x68a, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xf, 0x1}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000003]}}}, @common=@ttl={{0x28}, {0x1, 0xa2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x68, @icmp_id=0x67}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x6a}, @dev={0xac, 0x14, 0x14, 0x14}, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00', {}, {}, 0x5c}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @port=0x4e20, @icmp_id=0x68}}}, {{@ip={@remote, @private=0xa010101, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00', {0xff}, {}, 0x0, 0x3}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@broadcast, @port, @gre_key=0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x670, 0x5, 0x408, 0x2b8, 0x2b8, 0xfeffffff, 0x200, 0xf0, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {0xff}, 0x6, 0x2, 0x21}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x1e6, 0x8}}, @common=@addrtype={{0x30}, {0x8, 0x68a, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xf, 0x1}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000003]}}}, @common=@ttl={{0x28}, {0x1, 0xa2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x68, @icmp_id=0x67}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x6a}, @dev={0xac, 0x14, 0x14, 0x14}, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00', {}, {}, 0x5c}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @port=0x4e20, @icmp_id=0x68}}}, {{@ip={@remote, @private=0xa010101, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00', {0xff}, {}, 0x0, 0x3}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@broadcast, @port, @gre_key=0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="200003800400010010000400004017b402000000000000000800020049"], 0x40}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="200003800400010010000400004017b402000000000000000800020049"], 0x40}}, 0x0) 2.302013449s ago: executing program 5 (id=9800): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)={0x0, 0x8, 0x47, "dde6013ef3959fa8b79325ccf1d68e8e3d6a1b67618248495bc4b1823457dd2eb1e0be63719d684cd15ce4a880d3bcbb4b2cdb89711740b944819b2d87088ff8aa6820b75aaaab"}, 0x4f) (async, rerun: 64) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x85, "f1e87a9ac20e797ccfd4eaf4fcc0653e27297b8157405c288a4436f05fe26a9385df7ce0484a21577d1a519a45dc8a11efe80ba03561a65cc5e75c55d6312fbef3bed8036aff8cdd01f1024e821af75585365986c7d5c4e3c4004e8f4b682152857e9c6937ff73d5b51cb883ab38b9e36af0e5fa37363d9fa446df49c12faca82703268b44"}, &(0x7f0000000140)=0x8d) (rerun: 64) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000180)={r1, 0x1}, 0x8) (async) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000001c0)=""/149, &(0x7f0000000280)=0x95) (async) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f00000002c0)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000300)=0x2c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000340)={r1, 0x3}, &(0x7f0000000380)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000003c0)={r2, 0x7}, 0x8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={r2, 0xb8}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000480)={r4, 0x7}, &(0x7f00000004c0)=0x8) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000500)={r3}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000680)=0x0) (async) r7 = getgid() (async) r8 = accept4$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000700)=0x14, 0x100800) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000740)={0xffffffffffffffff}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000001d40)={{r0, &(0x7f00000007c0)='syz1\x00', 0x1914c3, &(0x7f0000000800)={@align=0x8000, {0x8000, 0x6, 0x2, 0xcc8}}, 0xfff, &(0x7f0000000840), &(0x7f0000000880)=0xf}, 0x5, &(0x7f0000001c80)=[{0x1, 0x15, &(0x7f00000008c0)='(\x00', &(0x7f0000000900)="a47ed4e2ac6da441101fd2dc002fa8f18fb6a585fd89f000b5d32f7374c31524988369812d6da1d954a59425267d7b1d327a9e804aaab6fae9738132d06f1d43cc3978b877fbab3e32772358bd6883c118bddf916eeaad8411ab8124ce94208e8f287e0d7562bb", 0x67, 0x8}, {0x1, 0x3ff, &(0x7f0000000980)='syz1\x00', &(0x7f00000009c0)="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", 0x1000, 0x20}, {0xc13210f8f0ac063f, 0x3ff, &(0x7f00000019c0)='3.}\x00', &(0x7f0000001a00)="5db2a61af307863df5455e78ec29a83076", 0x11}, {0x3, 0x6, &(0x7f0000001a40)='syz1\x00', &(0x7f0000001a80)="5a9e5b4ab912d74c2148a73cd40393897a6477961395df430426c9bac883df19273dd5c7d7fb415614d20a5021a332d8afa6e2937dbb79af3161dfc1d9cb3a4a3e791f0db89837b59ab129c7362a079e789b8b6dadc2c2829e7e047d73a6e2d5ff82ae268243b33e42cd674309524ed5a573b6425d3882451f703619e6c23e03e5119a2491a520dcc70dde505ad77a8baf67a52ad173a2450b3a9168371dcd6f20509702109f74f9ab7e22f5d0bfdf9f09c30ccbd81119e462f9233ebb50086fe1e197bfc5c0cbaa271f10025d88644be31702e2f5c4667da6691cc9ed3b80475ed6d7b7e824e685726936b426ee76041ddc", 0xf2, 0x22}, {0x1, 0x0, &(0x7f0000001b80)='syz1\x00', &(0x7f0000001bc0)="c0ad5afe3ba2e93e3331af79edb0aaa6c6b1fa95f9c69aa4b5fcaae1c23b1b463d86476138814535df1a8ceb72f42139684074d27cb575db209f5c3440b386e44e29916afa7616efb9b2d11d7929f886c07fbedf8fed9e2de37af754723a7d39007cc14cee5e8acb6072460c00881ea00d1ddfee4a4b37deadb44e168632a8bc75d30876189dac6b5213edaa133fe8e43042596f31f8f175f68192e1e0e4b9", 0x9f, 0x20}]}) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001e40)={{0x1, 0xffffffffffffffff}, &(0x7f0000001dc0), &(0x7f0000001e00)='%ps \x00'}, 0x20) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001e80)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001ec0)={0x0}, &(0x7f0000001f00)=0xc) (async) r16 = getgid() sendmsg$unix(r5, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="676a86660f3f18cfaa44fb9e422579bf1df33d805e47e761d299fb4331cebfe3ad26aca9018a3d0bb15f25bf6217983d9929459ca1def1664a5011dd9028069893b799bc39fba0aec32803f1c866b907091eba78a5f8c48594f95468db9a5fa13ff04f662479fb77648e2f89534f88279e8c988b152727be848d00761db80883156f24572d2a19597d594245052266bf80ff82a190a0e75256120a2e28f6e7d9f4d6aa85c7f1f99be335c9ae1c98c430d041b90426f6227af37720048518d133c2a85b", 0xc3}], 0x1, &(0x7f0000001f40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @rights={{0x20, 0x1, 0x1, [r3, r3, r3, r0]}}, @rights={{0x34, 0x1, 0x1, [r8, r10, r11, r0, r3, r12, r0, r3, r3]}}, @rights={{0x28, 0x1, 0x1, [r3, r13, r14, r0, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r15, 0xee00, r16}}}, @rights={{0x24, 0x1, 0x1, [r3, r0, r3, r3, r0]}}], 0xe8, 0xc14}, 0x80) (async) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f0000002080)={r11}) setsockopt$PNPIPE_HANDLE(r17, 0x113, 0x3, &(0x7f00000020c0)=0xffffff00, 0x4) (async) sendto$unix(r10, &(0x7f0000002100), 0x0, 0x0, &(0x7f0000002140)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$FIONCLEX(r17, 0x5450) (async) recvfrom$packet(r5, &(0x7f00000021c0)=""/149, 0x95, 0x2042, &(0x7f0000002280)={0x11, 0x0, r9, 0x1, 0x5, 0x6, @multicast}, 0x14) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000022c0)={r2, @in6={{0xa, 0x4e20, 0x9, @remote, 0x4}}, 0x4, 0xf7a7}, 0x90) (async) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000002380)={{0xa, 0x4e22, 0x80, @loopback, 0x28000000}, {0xa, 0x4e22, 0x9, @local, 0x5ca3}, 0xffffffffffffffff, {[0x8, 0x1, 0x101, 0x4, 0x10001, 0x6, 0x6, 0x1]}}, 0x5c) 2.091847244s ago: executing program 6 (id=9801): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x0, 0x0, {0x3}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08002dbd708a533abec100ffd3df250600000008000300", @ANYRES32=0x0, @ANYBLOB="08000500040000001c0017800400060004000100040004000400030004000100040002000a00e80008021100000100000a00e800ffffffffffff00000a00e800080211000000000010001780040005000400050004000200"], 0x74}, 0x1, 0x0, 0x0, 0x4c820}, 0x44000004) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0xff47, 0xffff, 0x3}) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) ppoll(&(0x7f0000000080)=[{r6, 0x2000}], 0x1, 0x0, 0x0, 0x0) (async) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x500, @random, 'wg1\x00'}}, 0x1e) (async) ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f0000000040)) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0x26, &(0x7f0000000040)=0x6, 0x4) (async) r9 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r10 = socket$tipc(0x1e, 0x2, 0x0) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) ppoll(&(0x7f0000000240)=[{r0}, {r4, 0x2001}, {0xffffffffffffffff, 0x2507}, {r5, 0x1000}, {r6}, {r7, 0x8084}, {r9}, {r10, 0x4e}, {r11, 0x6001}], 0x9, &(0x7f00000002c0), &(0x7f0000000300)={[0x9]}, 0x8) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) close(0x3) r13 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r13, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8}, @void}}}, 0x5ea}, 0x1, 0x0, 0x0, 0x4804}, 0x80) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r4, 0x20, &(0x7f0000000640)={&(0x7f0000000580)=""/60, 0x3c, 0x0, &(0x7f00000005c0)=""/111, 0x6f}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="940a00000000000061115400000000001800000000000000000000000000000095", @ANYRES32=r3, @ANYRESHEX=r6, @ANYRES16=r13], &(0x7f00000006c0)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r14}, 0x94) 2.082448602s ago: executing program 3 (id=9802): r0 = socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff0085000000b200000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000000)="3b9f31b362d9345c981059c3e2731d2a23c6e073", 0x14) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) 1.953396442s ago: executing program 2 (id=9803): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x20, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000001914019e"], 0x10}}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000000206010100000000000000000000000014000300686173683a69702c706f72742c6970f9040004000000000009000200730600000000000005000100070000000500050000000000"], 0x4c}}, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f00000008c0)=ANY=[@ANYRES32=r2, @ANYRESOCT=r4, @ANYRES8, @ANYRESHEX=r3, @ANYRESHEX=r3, @ANYRESOCT, @ANYRES32=r2, @ANYRES8=r2], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1009, &(0x7f0000002e80)=""/4105, 0x0, 0x11}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) r7 = socket(0x40000000015, 0x5, 0x0) ppoll(&(0x7f0000000040)=[{r7, 0x85dc}], 0x1, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) r8 = socket$kcm(0xa, 0x3, 0x3a) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4, 0x0, 0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f0000000600)={0x0, 0x64, &(0x7f0000000680)={&(0x7f0000000a80)=ANY=[@ANYRES32=r5, @ANYRES16=r10, @ANYBLOB="0600fb52782c8bb3be9acc3e5bffb6395aa4471ead447e676bfa97d512f234a58b60ed1fee1c8a120e8ecede181af24e29aef4d720bda0d7283b7a10f453309966f65ae57122ff3b6215eb736514f97cfd6b71443e28ef8936ce68b3aa5c8fd8b5b22d45505756a424c3304929162d5aac52b366c2eb787bdd6ee4a750ab5dad85929c28b8f554ac70b44528d201c76c1a619a98cdac6d621fdf92ceaddc9685a233de873aab1bd8448422e44f55", @ANYRES32=r12, @ANYBLOB="20005080110001004abee33908f8eef16f162471f40000000800070001000000", @ANYRES32=r10], 0x3c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r6, 0x3fc, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x9, 0x7f}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40001) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4089, 0xff9}, {&(0x7f0000000140)=""/159, 0x9f}], 0x3}, 0x2000) setsockopt$inet_group_source_req(r7, 0x0, 0x7f7bc05a1a7f03d, &(0x7f00000011c0)={0x6, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}}, {{0x2, 0x4e20, @multicast2}}}, 0x108) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000940)={'sit0\x00', 0x0, 0x40, 0x1, 0x8001, 0x6, {{0x9, 0x4, 0x2, 0x6, 0x24, 0x64, 0x0, 0x6, 0x29, 0x0, @remote, @empty, {[@noop, @cipso={0x86, 0xc, 0x2, [{0x5, 0x6, "193ae471"}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv4_newroute={0x68, 0x18, 0x20, 0x70bd2b, 0x25dfdbfe, {0x2, 0x80, 0x80, 0x81, 0xfc, 0x2, 0x0, 0x2}, [@RTA_MARK={0x8, 0x10, 0x2}, @RTA_MULTIPATH={0xc, 0x9, {0x2, 0x8, 0x8, r13}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}, @RTA_SPORT={0x6, 0x1c, 0x4e23}, @RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, @RTA_DPORT={0x6, 0x1d, 0x4e21}, @RTA_PRIORITY={0x8}, @RTA_DST={0x8, 0x1, @loopback}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x48000) 1.95272994s ago: executing program 5 (id=9804): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) r2 = socket$nl_generic(0x11, 0x3, 0x10) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg(r3, &(0x7f0000000c80)={&(0x7f0000000140)=@l2={0x1f, 0xd, @any, 0x8}, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)="fc0053a64a0296e466139bc64077722bde979e31a0687613dee66f61fefa30551849715bdd01a687e8d65ef114d1891f9232fad4541d707ae2c61067a16e36a8", 0x40}, {&(0x7f0000000200)="66902e3381d12850812c7379d23e6127a59f8ef3bd2dc7ab4025b65acb45f008cd23e8249e64fa6e0c0241b332dddbcb0ff589e2e19ba73b7fa9e6ad41525564d5bbad6a74f5957b811f66bc60bbecf30cb49ccdad93674540665bade3217842a9e40af022dd07e7cf018a5fe64485b8446d57d71c7d37c33615ca92d8d2236de0324713a69a7ff5c7a9cffa5899e1781afc3fbe38bde35d0ec6304c3f9959ed07c803caaf53157bd94f", 0xaa}], 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x348}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x87, 0x2, 0x1, 0x5, 0x1, 0xffff}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r7, 0x8b32, &(0x7f0000000040)) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000054000180060001000a0000000642ded0422069d9e13a6a72bbbf000200110000001400030000000000000000000000000000000001060004001f900000070006007272000008000800000000000c000700000000"], 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48046}, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r4) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x80, r8, 0x1, 0x70bd25, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}]}, 0x80}}, 0x4000000) sendmsg(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="440100001a0001000000000000000000000000000000000000e6ff0000000000000000000000000000003300000000000d6352742a3badee0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e40010000000000000000000000000000000033000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008001600810000004c0014"], 0x144}}, 0x800) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000080)=0x4) 1.838387808s ago: executing program 0 (id=9805): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0xffffffffffffff98) unshare(0x22020600) poll(&(0x7f0000000080)=[{r0, 0x4000}], 0x1, 0xff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000d387bc609a0a86c4e003520027000100000400018000"/35], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 1.80810736s ago: executing program 2 (id=9806): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000240), 0x4) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1.58136539s ago: executing program 3 (id=9807): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040086dd"}}}}}, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d40)=ANY=[@ANYBLOB, @ANYBLOB="21082bbd7000fbdbdf2503000000050002000a000000060001004e20000014000700e6ffffffffffffff000000000000000008000b", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r2, 0x6, 0x5, &(0x7f0000000000), 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newae={0x10ac, 0x1e, 0x200, 0x70bd29, 0x25dfdbfb, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x2, 0x2b}, @in=@remote, 0x6, 0x3503}, [@coaddr={0x14, 0xe, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @algo_comp={0x1048, 0x3, {{'lzjh\x00'}, 0x8000, "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"}}, @extra_flags={0x8, 0x18, 0x4}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x10ac}}, 0x0) 1.579030141s ago: executing program 2 (id=9808): r0 = epoll_create1(0x80000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2b}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2d, 0x2, 0xd, 0xfff, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @remote, 0x1, 0x20, 0xffff, 0x10001}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@mcast2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0xbb4, 0xc, 0x500, 0x7, 0x1000060, r4}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=@newtaction={0x1190, 0x30, 0x9, 0xffffffff, 0x0, {}, [{0x117c, 0x1, [@m_mpls={0xd4, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x3}, 0x2}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x892f}, @TCA_MPLS_LABEL={0x8}]}, {0x7a, 0x4, "db4633e883211ef28ce6b474ac163121ccaee7be908b76c1ed7b179721a777531e92c849bf092e785cd4e24354d7883c390a30c524264724e8605f1310392baf83025c76de7dd2fcc28832e55ededd371f436902756ae20f3710d63c3c2f036cc7095e838d3a6321e6fe472262d849208807d6e9454e"}, {0xc}, {0xc}}}, @m_tunnel_key={0x10a4, 0x6, 0x0, 0x0, {{0xf}, {0x74, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x43}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x43}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0xffffffff, 0x8, 0x957, 0x7fd}, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x1190}}, 0x0) 1.525430059s ago: executing program 0 (id=9809): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqsrc(r1, 0x0, 0x44, &(0x7f0000000040)={@rand_addr, @dev, @private}, &(0x7f0000000100)=0xc) 1.324555423s ago: executing program 2 (id=9810): unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000120) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x60000000, 0xffffffffffffffff, 0x1, 0x7}, 0x2, r5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r10, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a300000000040000000160a01040000000000000000010000000900010073797a30000000000900020073797a300100000014000380080001400000000008000240000000002c000000030a01040000000000000000010000000900010073797a30000000000900030073797a300000000058000000060a01040000000000000000010000000900010073797a30000000000900020073797a30000000002c0004802800018011000100666c6f775f6f66666c6f61640000000010000280090001"], 0x10c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r0, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0xfffffffe}, 0xc3) 1.324204953s ago: executing program 3 (id=9811): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c", 0x6}], 0x1}], 0x1, 0x8001) accept4(r3, 0x0, 0x0, 0x800) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001300050026bd70000000ebff00000000", @ANYRES32=0x0, @ANYBLOB="0621000060300000140003006d6163766c616e3000000000000000000a000100aaaaaaaaaa300000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r6, 0x1, 0x2d, 0x0, &(0x7f0000000040)) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x98, 0x3f, 0x107, 0x70bd2b, 0x4, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @typed={0xc, 0xd, 0x0, 0x0, @u64=0x4}, @nested={0x70, 0x2, 0x0, 0x1, [@typed={0x8, 0x23, 0x0, 0x0, @u32=0x5}, @generic="183e06b7a3f5f0b876bc8b6fc8c04027afca4cadb844baae70147722644f699af0995257c520eb370a93dd47c039fe8d7e5c57651ec3f279ba99ec66e9b14f5eca4f3d363563770c04602c53de3288ab4be301ecff521304052ceedd0f941c6d3fdc368d"]}, @typed={0x4, 0x7}]}, 0x98}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 1.19791663s ago: executing program 5 (id=9812): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x12, 0x4f, 0x1}, 0x14}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001dc0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001ec0)={'ip6gre0\x00', &(0x7f0000001e40)={'ip6gre0\x00', 0x0, 0x29, 0xdb, 0x7f, 0x3, 0xd, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x7, 0x8f, 0x9}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000004540)={&(0x7f0000004440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004500)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="042025bde8d1a28296682a820000080405dc239bfdb2080005002c1a28d221e1f4072a2cb7822714b00400c84f10bff6578bff0100000000000000", @ANYRES32=r3, @ANYBLOB="0c000300000000000000000008000400ac141412540009000100200005000d0010000000"], 0x50}}, 0x4000000) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r7, &(0x7f0000000400)={&(0x7f0000000140)={0xa, 0xa, 0x4, @mcast2}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001080)="671723d7c6012c", 0x20}, {&(0x7f0000000200)="9efe8000000000002bdfe52c1f51218206f5abfd2a00"/33, 0x21}], 0x2}, 0x20008b88) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r3) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$kcm(0xa, 0x2, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r8, &(0x7f0000000080), 0x12) close(r8) socket$nl_crypto(0x10, 0x3, 0x15) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r4, @ANYRES8, @ANYRES16=r6, @ANYRESHEX=r5], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x20, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.131266708s ago: executing program 0 (id=9813): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf200000000000001600020038e873a23d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}, @IFLA_ADDRESS={0x8, 0x1, @dev}]}, 0x48}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000003000010601000000000000000000000034000180300001800900010067617465000000002000028018000200000000000000000000000000000000000000000004000580"], 0x48}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1e4, r2, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_BSS_SELECT={0xc, 0xe3, 0x0, 0x1, {0x8, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}}, @NL80211_ATTR_IE={0x195, 0x2a, [@random_vendor={0xdd, 0x2b, "dc97089899248c1b7a474c43487d3a046722e4c4aa4891a84010debd780f91f8da1d8a430731b4eaf09c8d"}, @fast_bss_trans={0x37, 0xd2, {0xf, 0x5, "9ff052c4dc2fc3b7d0993931e53f6880", "896125fd9af56c7680b7bee2fb18e6bb0eb2ebffe576db9691c2ba87cfa76478", "1944e7993feda2f9dd90fd1b8ba81894b520189dd32e3fb6cd6d4f89dd3f63f2", [{0x4, 0x3, "9b45e8"}, {0x4, 0x18, "cf17535198f544aa399bba61f846a08d68622b4012d4269c"}, {0x4, 0x24, "cd7bdfa20f885af5599eedf1cf090a6f804450f4c315b361c2f0bc603a4e7f01756df957"}, {0x2, 0x19, "d06c975592a29277fb5c61f2734a4eb6cab49c57cd4b12c171"}, {0x2, 0x1e, "d34824775ee9dd817e511b5bfa29d2336e87dc71d98ba7fd85758f43a207"}]}}, @preq={0x82, 0x8e, {{0x0, 0x1, 0x1, 0x0, 0x1}, 0x3, 0x8, 0x4, @device_a, 0x0, @value=@device_b, 0x1, 0x5, 0xa, [{{0x1, 0x0, 0x1}, @device_b, 0x4}, {{0x0, 0x0, 0x1}, @device_b, 0x6}, {{0x0, 0x0, 0x1}, @broadcast, 0xfffffff6}, {{}, @broadcast, 0x6}, {{0x1, 0x0, 0x1}, @device_a, 0x137e}, {{0x1}, @device_b, 0xf1}, {{0x1, 0x0, 0x1}, @device_b, 0x22c}, {{}, @device_a, 0x1}, {{}, @device_b, 0x7}, {{0x0, 0x0, 0x1}, @device_b}]}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]]}, 0x1e4}, 0x1, 0x0, 0x0, 0x1}, 0x40080) 1.005224658s ago: executing program 6 (id=9814): mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x82}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000400007070000000000000000037c000004009c80060001"], 0x20}, 0x1, 0x0, 0x0, 0x4048090}, 0xc000) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "a9e400eca64becff989b08237e11c7b37464458472ebc81e01ec6587bd5fd91c"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x56, 0x3, "79d38cc72dd8c1d839eb716483d5b858fae3ae5c1500db2b0fa5edb4e3759ade9a520e86ddbe4b2925c7936e6fe2371c3a54c3b16e19801053a4182581fa1b74f3a5c176912f8f048b7fb7546ad29482d955"}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4044}, 0x0) 853.285107ms ago: executing program 6 (id=9815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xbc, 0x2, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0xb32}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88b5}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x25b2}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x50f}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x100}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4404c001}, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="6800000000090504000000000000000002000000090001007379003000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000502080003000000001e", 0x68}], 0x1}, 0x4080) 778.924743ms ago: executing program 6 (id=9816): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r1, 0x8}, &(0x7f00000000c0)=0x8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000100)={0x0, {{0x2, 0x4e23, @private=0xa010102}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000240)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000340)=0xe8) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380)={0x0, r5, 0xee00}, 0xc) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f00000003c0)={0x1d, r4, 0x0, {0x2, 0x0, 0x2}, 0x2}, 0x18) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000400)={r1, 0x5f, 0x100}, 0x8) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000480)=""/228, 0xe4}, {&(0x7f0000000580)=""/141, 0x8d}, {&(0x7f0000000640)=""/119, 0x77}, {&(0x7f00000006c0)=""/22, 0x16}, {&(0x7f0000000700)=""/96, 0x60}, {&(0x7f0000000780)=""/195, 0xc3}, {&(0x7f0000000880)=""/235, 0xeb}, {&(0x7f0000000980)=""/48, 0x30}], 0x8, &(0x7f0000000b80)=[@mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x3}, &(0x7f0000000a40)=0xffffffff, &(0x7f0000000a80)=0xffffffffffffffff, 0x3a42, 0xffffffffffff1ed4, 0x6, 0x8, 0x42, 0xfffffffffffffff7}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000ac0)=""/91, 0x5b}, &(0x7f0000000b40), 0xc}}], 0x88}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r8, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x20000944) r9 = accept$inet(r7, 0x0, &(0x7f0000000d80)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r9, 0x84, 0x15, &(0x7f0000000dc0)={0xb}, 0x1) setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f0000000e00), 0x4) recvfrom$llc(r3, &(0x7f0000000e40)=""/133, 0x85, 0x40000002, &(0x7f0000000f00)={0x1a, 0x309, 0x5a, 0x2, 0x7f, 0x6, @link_local}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000fc0)={r2, 0x58, &(0x7f0000000f40)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}, @in6={0xa, 0x4e24, 0x101, @mcast1, 0x2}, @in6={0xa, 0x4e24, 0xfffff000, @empty}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000001000)=0x10) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r7, 0x6628) setsockopt$inet_int(r3, 0x0, 0x31, &(0x7f0000001040)=0xfffffc01, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000010c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r11, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r12, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048080}, 0x400c1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000001200)={r2, 0x1ff, 0x8001}, 0x8) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f0000001340)={r10, &(0x7f0000001240)='}%*\x00', 0x8400, &(0x7f0000001280)={@_ha_fsid={[0xfffffffc, 0xd4]}, {0x6, 0xa, 0x3, 0x6}}, 0x2, &(0x7f00000012c0), &(0x7f0000001300)}) setsockopt$packet_fanout_data(r14, 0x107, 0x16, &(0x7f00000013c0)={0x7, &(0x7f0000001380)=[{0x6, 0xff, 0x7, 0x2}, {0x7, 0x4, 0xc, 0x7}, {0x9df8, 0x8, 0x82, 0x4}, {0x7, 0x1, 0x81, 0x9}, {0xcd8, 0x3, 0xbe, 0xd8e}, {0xf9, 0x9, 0x5, 0x716}, {0xbfc9, 0x8, 0x5, 0x7}]}, 0x10) sendmsg$NFT_MSG_GETOBJ_RESET(r14, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x68, 0x15, 0xa, 0x402, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) 725.965896ms ago: executing program 5 (id=9817): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x44000) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xf4, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xbc, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a410c5e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8a1e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3255773d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcc00}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7ae7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x564e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x573025a1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6526d19a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d4f93be}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xedb1}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf3fa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa077}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb6d6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e29}]}, {0x4}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaab7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x37e5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1680}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f1b5eab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb2ab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3070}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8722}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4c010}, 0x40084) (async) unshare(0x8020000) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x48090) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r5, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x9c}, 0x20000001) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4008}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x13}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000780)=0x4, 0x4) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r5, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x17}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000940), r4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000980)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000009c0)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r1, &(0x7f0000000d40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a00)={0x2f4, r8, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_SDP={0x124, 0x13, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [{0x4}]}, {0x48, 0x0, 0x0, 0x1, [{0x4}, {0xc, 0x1, 'nl80211\x00'}, {0x9, 0x1, '(+@#\x00'}, {0xc, 0x1, 'nl80211\x00'}, {0x7, 0x1, '{+@'}, {0xa, 0x1, 'wpan4\x00'}, {0x6, 0x1, '%\x10'}]}, {0x4}, {0x50, 0x0, 0x0, 0x1, [{0x4}, {0xb, 0x1, '^)&%&^$'}, {0xc, 0x1, '##$@^\xeb%&'}, {0x5, 0x1, '&'}, {0xc, 0x1, 'nl80211\x00'}, {0x5, 0x1, '!'}, {0x5, 0x1, '%'}, {0xa, 0x1, '-/++#]'}]}, {0x14, 0x0, 0x0, 0x1, [{0xd, 0x1, 'nl802154\x00'}]}, {0xc, 0x0, 0x0, 0x1, [{0x7, 0x1, '\'.['}]}, {0xc, 0x0, 0x0, 0x1, [{0x8, 0x1, '+-//'}]}, {0x18, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan0\x00'}, {0x6, 0x1, '$('}]}, {0x14, 0x0, 0x0, 0x1, [{0x10, 0x1, '[++:\xdd\'}-.*,\\'}]}, {0x24, 0x0, 0x0, 0x1, [{0x14, 0x1, '.^]%\',{\'(\'(-\x87\xd8.$'}, {0xa, 0x1, 'wpan0\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_LLC_SDP={0xf0, 0x13, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [{0x6, 0x1, '^&'}, {0x7, 0x1, ']/\"'}, {0x4}, {0x9, 0x1, '-(@.\''}, {0xa, 0x1, 'wpan3\x00'}]}, {0x38, 0x0, 0x0, 0x1, [{0x7, 0x1, '*&\n'}, {0xc, 0x1, 'nl80211\x00'}, {0x4}, {0x5, 0x1, '*'}, {0xa, 0x1, ',%-))['}, {0x7, 0x1, '!+!'}]}, {0x48, 0x0, 0x0, 0x1, [{0xc, 0x1, '[-*\\^\xd8#%'}, {0xd, 0x1, ')*]+#+-(\xfc'}, {0xa, 0x1, 'wpan3\x00'}, {0x5, 0x1, '$'}, {0x6, 0x1, '\']'}, {0xa, 0x1, 'wlan0\x00'}]}, {0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, '['}]}, {0x18, 0x0, 0x0, 0x1, [{0x12, 0x1, '/[#}\xe1!\'*#^:[//'}]}, {0x18, 0x0, 0x0, 0x1, [{0x5, 0x1, '\n'}, {0xa, 0x1, 'wpan4\x00'}]}]}, @NFC_ATTR_LLC_SDP={0xbc, 0x13, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [{0xd, 0x1, 'nl802154\x00'}, {0xa, 0x1, 'wpan4\x00'}, {0x4}]}, {0x30, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wlan0\x00'}, {0xa, 0x1, 'wpan0\x00'}, {0x6, 0x1, '@\xcd'}, {0xc, 0x1, 'nl80211\x00'}]}, {0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, '['}]}, {0x58, 0x0, 0x0, 0x1, [{0xc, 0x1, 'nl80211\x00'}, {0x6, 0x1, '!&'}, {0x8, 0x1, 'nfc\x00'}, {0x6, 0x1, '.)'}, {0x9, 0x1, '\xfd^,:$'}, {0x8, 0x1, 'nfc\x00'}, {0xa, 0x1, ',.^\n!\\'}, {0x7, 0x1, '^$['}, {0x8, 0x1, 'nfc\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x10040040}, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r11, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x30, r12, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x4, @bearer=@udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8090}, 0x8800) sendmsg$NL80211_CMD_SET_BSS(r11, &(0x7f0000000f80)={&(0x7f0000000ec0), 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x28, r6, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x2f}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r1) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001000), r1) (async) r13 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet(r13, &(0x7f00000013c0)={&(0x7f0000001040)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000001080)="9e5acaf2625d27de54c94d0ad43fe70ff5a7f3c15d13e22baea99b314b350978847c1b660f949cf11a35457a04f48aac4467caae97db2967a2dcd56bdd5d94e3aa77bfdfc512776050def8690f1173d3d6171b45bcef73755cdf0f6207579067474105ddc5b104142b344991f3cfe79124d6c8c3a3a0c9228c9c02adab9127cbb84a5a5957d319f7162eb08d02d854", 0x8f}, {&(0x7f0000001140)="ea07a8acf56179585db38291f3517bacfd69febf51986c5c5a9600311b926c6ad44f392d31497b55eb13b5bc713ee84d3891affd", 0x34}, {&(0x7f0000001180)="2354a72ce2cb3e66e4a8e6f3bc7ed91173580c932a177e7cdeb5d63d2defa7850d34083868dc0685436694bbcc9119332b95ff9065", 0x35}], 0x3, &(0x7f0000001200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xd0}}, @ip_retopts={{0x44, 0x0, 0x7, {[@rr={0x7, 0x13, 0xf1, [@rand_addr=0x64010102, @rand_addr=0x64010100, @broadcast, @multicast1]}, @timestamp_prespec={0x44, 0x14, 0x23, 0x3, 0x9, [{@local, 0xbafd}, {@private=0xa010102, 0xfffffffc}]}, @lsrr={0x83, 0xb, 0x6a, [@loopback, @multicast2]}]}}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x50, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0x1c, 0xaa, 0x1, 0x4, [{@private=0xa010101, 0xfffffffe}, {@remote}, {@broadcast, 0xfffffff8}]}, @timestamp_addr={0x44, 0xc, 0xb8, 0x1, 0x8, [{@loopback, 0x1}]}, @end, @ssrr={0x89, 0x3, 0xc4}, @ssrr={0x89, 0x13, 0x3a, [@loopback, @private=0xa010102, @local, @broadcast]}]}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x93, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @rr={0x7, 0x7, 0x72, [@local]}, @timestamp={0x44, 0x1c, 0x9d, 0x0, 0x3, [0x6, 0x3, 0x0, 0x8, 0x8, 0x7]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x40, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0xa, 0x0, 0x3, [0x720, 0x8, 0x4, 0x4, 0x3]}, @timestamp={0x44, 0x8, 0x4b, 0x0, 0x6, [0x400]}, @generic={0x86, 0x10, "27d8844d4dbd78e562957283887d"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x198}, 0x2004800) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x1c, 0x0, 0xc00, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) 601.061966ms ago: executing program 6 (id=9818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x16, 0x0, &(0x7f0000000400)) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0, @ANYRESDEC, @ANYRES32=r1, @ANYRESHEX=r1, @ANYRES8=r0, @ANYRESOCT=r1, @ANYRES64=r2], 0x18}, 0x1, 0x0, 0x0, 0x10004084}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x52, 0xfffffffffffffd90}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x961e}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000a0000000000000000000000000600000d000000000000000000000000000000000000000000000000000000000000000000000000ffff0000000000000000000000000000000000000000000c000000000000000000000009010000000000000000000009000000000000000000000009020000000000"], 0x0, 0x96}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000ff0f00000c000000020000000000000000000004000000000000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x500}, 0x2}, 0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="08000300", @ANYRES32], 0x60}}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000002c0)) ioctl$PPPIOCSACTIVE(r8, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) pread64(r8, 0x0, 0x0, 0x8) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f00000003c0)=0x2000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="1800000043000900ffffff0000000004001f0000000000005f374fbe45d9e709d68446c89358b59f56f6adbcf09c643330f1effefb40ee72ad7d083f997b798a08e397cc92244c36cadd1108bcccdaa970c2a14f4285cf70dacd212481d5c4d723c8a4a5f2da9a755fe9cc3cdf795b802ee67f9a546c7299168a9600fd99cb7962ae4f5404adbb24fd9e103cf0ce59c01fa04b1e063607b52f6b39f4dc0000c814cdd7977bd5d8733ea3a10c3afeb2eb2c047f22628ba0bfde9852ea763adfd1aa4c86cebd5a88f817b0a00b5eaa960255345f3a46f1f24804f72a9a179f447569b8e6f8729732f4b8b7dbd7ae43c498fa5ef7e04609ca4e254490d79f3c839ed8e37df39ba53dc5668c0fffab9cdd23f17aef0535f16b140b32d05b5153e24bf029a599c9"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r11, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010004000000020000003900000008000300", @ANYRES32=r6, @ANYBLOB="1c005a8018000480140005007f007a0006008100ffff040005800500"], 0x38}, 0x1, 0x0, 0x0, 0x404c890}, 0x14) 539.193414ms ago: executing program 0 (id=9819): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x5}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r7 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000380)={@multicast2, @local, 0x1, 0x2, [@local, @loopback]}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}}}, 0x24}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="23000000080000000c001b000300000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r9}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000000500000095000000000000009500a50500000000719837a62ecba6b4aca926e6c8a1e509afe04e27090b613f59968cc4b88b4ecb814f46ebe3d5e393478f148c05cb001274b4a292d599"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffdcf}, 0x70) 235.353271ms ago: executing program 2 (id=9820): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x7}, 0x8) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0020000000060000580012800b00010067726574617000004800028006000e0002000000050017000100000006000300070000000800050008002200050008148000000005001600010000000500080005000000040012"], 0x78}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e20ac1414bb000000000000000002000100000000000000070c00000000030005000000000002004e20ac1e01010000000000000000010014"], 0x70}, 0x1, 0x7}, 0x0) 114.306316ms ago: executing program 3 (id=9821): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000006bdee3051e79b50d59a3000000000071122f000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 45.132728ms ago: executing program 6 (id=9822): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000}, 0x10) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000005f0005"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x4, 0x25dfdbfb, {0xa, 0x40, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x13}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010200000000000000000000000005000100070000000c0007800800120000f5ff00050004000000000005000500020000220900020073797a310000000011000300686173683a6e65742c6e6574"], 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x40101}}, 0x20}}, 0x0) 0s ago: executing program 0 (id=9823): r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000005e80)=[{{&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000000000000007000000860effffffff02082755f8bebdaf940401000000000000001400000000000000000300"/64], 0x40}}], 0x1, 0x804) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) r3 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000040)=0xb03, 0x4) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000080)="fc") ioctl$sock_bt_hci(r2, 0x400448e3, &(0x7f00000000c0)="b8") ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000080)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x3, 0xff) shutdown(r5, 0x1) sendmsg$inet6(r5, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="671723d7c6012c", 0x7}, {&(0x7f0000000180)="9e91d91a92dc7c8f06c24fbe79d9284d0c66c92c658bb539e2ffb332c99223a7df", 0x21}], 0x2}, 0x20008b88) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000a40)={0x0, 0x1, 0xa}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r6], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x40091}, 0x40) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000e40)={r6, 0xace2, 0x1, [0x6, 0x1, 0x402, 0x3ff, 0xffffffffffffffff], [0x4, 0x1, 0xe, 0x7, 0x7fff, 0x0, 0xfffffffffffffffa, 0xff, 0xfef, 0x8, 0x10001, 0x7fffffffffffffff, 0x59, 0x6, 0x9, 0x5, 0x4, 0x3, 0xc5f, 0x101, 0x1, 0x2, 0x7, 0x1, 0x8000000000000000, 0x3, 0x9, 0x8, 0x6, 0x6, 0x1, 0x8, 0x5, 0x54, 0x1, 0x100000001, 0x2, 0x5, 0xbea, 0x7, 0x7, 0x4, 0x0, 0x5, 0x101, 0x185, 0xe8, 0x23, 0x3, 0x9, 0x5, 0x8000000000000001, 0xfffffffffffffffe, 0x193, 0x3, 0xb, 0x101, 0x5, 0xfffffffffffffffe, 0x3, 0x8, 0x2bc00000000000, 0xdcb, 0x4, 0xd, 0x7, 0x5, 0x8, 0x1, 0x8000, 0x5, 0x7, 0x7, 0x1, 0x785, 0x200, 0x8000000000000000, 0x81, 0x4, 0xae4d, 0x3, 0x1, 0x7, 0x6, 0x100, 0x4, 0x1, 0x7, 0x6, 0x81, 0x7, 0x590, 0x8, 0x0, 0xafc2, 0x2, 0x8, 0xc, 0x17f0, 0xf, 0x38c3, 0x1, 0x5, 0x8, 0xdbd, 0x4, 0x1, 0x9, 0x0, 0x1a17c4e6, 0x5, 0x100000001, 0x80000001, 0x80000001, 0x200000, 0x7, 0xffffffff, 0x0, 0x5, 0x800, 0x6]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000549c98f582d2f6a5003000000006000000000000000000000d00000000000000000000000d04000000000000000000000200000000040000ce3900000f03000000000000006100"], 0x0, 0x4e}, 0x28) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000680)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r9, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd602a843500140600000000680000000000000000fe8000000000000000000000000000aa00004e222add4defd827f140c6506e8d68c8b99d104626095e66408bd11c266e1358844f85c426ed178f928297761c684bec43c6f1c8c6a6990bd8ce1e29c9a91b6143aa9a6bd6cb730c3fc2deebcaa55a08bf82290c7e5b8f6e4eb954a9862a23a5de3c959ad9c128130af4cf8588f970308d12914f20eb3d90e855434d1ab7a5dabfc2511427ff323131062470909300009c650851369a35025bdaf0081deb3cbaf52d4d233f7aa88a8843daa7fa48219be66850f31fdc", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="58c2000090780000"], 0x0) recvmmsg(r4, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f00000030c0)=""/4085, 0xff5}, {&(0x7f0000000980)=""/158, 0x9e}], 0x3}, 0x3}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002080)=""/4103, 0x1007}, {&(0x7f0000004740)=""/4082, 0xff2}, {&(0x7f0000000340)=""/242, 0xf2}], 0x3}, 0x4}], 0x7, 0x40000020, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000003700010327bd7000fddbdf25030000003562ee3ad05efd7f3625707631bc5efacd"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x20000005) kernel console output (not intermixed with test programs): 50.743154][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8726'. [ 1050.924187][ T8677] netlink: 45 bytes leftover after parsing attributes in process `syz.0.8729'. [ 1051.115865][ T8683] bond9: entered allmulticast mode [ 1051.123427][ T8683] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1051.428868][ T8702] bond10: Unable to set up delay as MII monitoring is disabled [ 1051.447128][ T8702] bond10 (unregistering): Released all slaves [ 1052.793281][ T8770] Cannot find add_set index 65532 as target [ 1054.369537][ T8705] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1054.564038][ T8801] __nla_validate_parse: 4 callbacks suppressed [ 1054.564060][ T8801] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8750'. [ 1054.703831][ T8808] Cannot find del_set index 4 as target [ 1054.827336][ T8803] af_packet: packet size is too long (558759946 > 2016) [ 1054.889179][ T8820] netlink: 244 bytes leftover after parsing attributes in process `syz.3.8758'. [ 1054.974022][ T8825] syzkaller1: entered promiscuous mode [ 1054.974047][ T8825] syzkaller1: entered allmulticast mode [ 1055.012575][ T8828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8759'. [ 1055.012603][ T8828] openvswitch: netlink: Flow actions attr not present in new flow. [ 1055.256065][ T8836] tunl0: left promiscuous mode [ 1055.261522][ T8836] gre0: left promiscuous mode [ 1055.261546][ T8836] gre0: left allmulticast mode [ 1055.359083][ T8836] gretap0: left promiscuous mode [ 1055.369392][ T8836] erspan0: left promiscuous mode [ 1055.369544][ T8836] ip_vti0: left promiscuous mode [ 1055.633499][ T8836] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.633776][ T8836] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.652602][ T8836] .`: left promiscuous mode [ 1055.652627][ T8836] bond_slave_0: left promiscuous mode [ 1055.652781][ T8836] bond_slave_1: left promiscuous mode [ 1055.758814][ T8836] wg1: left promiscuous mode [ 1055.758832][ T8836] wg1: left allmulticast mode [ 1055.842194][ T8836] veth0_to_bond: left allmulticast mode [ 1055.999355][ T8836] vlan0: left promiscuous mode [ 1056.182409][ T8836] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1056.209655][ T8836] h: left promiscuous mode [ 1056.258542][ T8836] bond4: left promiscuous mode [ 1056.263194][ T8836] bond5: left promiscuous mode [ 1056.263217][ T8836] ip6gre1: left promiscuous mode [ 1056.304636][ T8836] bond6: left promiscuous mode [ 1056.304659][ T8836] ip6gre2: left promiscuous mode [ 1056.411008][ T8836] bond9: left promiscuous mode [ 1056.411033][ T8836] bond9: left allmulticast mode [ 1056.411180][ T8836] gretap3: left promiscuous mode [ 1056.411419][ T8836] vlan4: left promiscuous mode [ 1056.411432][ T8836] geneve1: left promiscuous mode [ 1056.411610][ T8836] vlan4: left allmulticast mode [ 1056.411622][ T8836] geneve1: left allmulticast mode [ 1056.437898][ T8836] bond10: left promiscuous mode [ 1056.450732][ T636] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1056.450765][ T636] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.454042][ T7094] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1056.454069][ T7094] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.454106][ T7094] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1056.454127][ T7094] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.454160][ T7094] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1056.454182][ T7094] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.852747][ T8885] bond13: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1056.875419][ T8885] bond13 (unregistering): Released all slaves [ 1056.961022][ T8894] bond13: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1056.978116][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8775'. [ 1056.982105][ T8894] bond13 (unregistering): Released all slaves [ 1057.091231][ T8904] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1057.091653][ T8904] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1057.092055][ T8904] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8775'. [ 1057.181976][ T8913] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8778'. [ 1057.218456][ T8913] netlink: 'syz.3.8778': attribute type 21 has an invalid length. [ 1057.220552][ T8913] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8778'. [ 1057.632083][ T8936] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8783'. [ 1057.834281][ T8941] netlink: 'syz.2.8784': attribute type 2 has an invalid length. [ 1057.835949][ T8940] netlink: 'syz.2.8784': attribute type 2 has an invalid length. [ 1058.269642][ T9296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1058.269669][ T9296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1058.301886][ T8957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1058.587167][ T8961] bond9: entered promiscuous mode [ 1058.677569][ T8967] bond10: entered promiscuous mode [ 1058.711604][ T8975] IPVS: length: 1152 != 8 [ 1059.061916][ T8989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8798'. [ 1059.062244][ T8987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8798'. [ 1059.092312][ T1931] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1059.099753][ T1931] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1059.102614][ T1931] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1059.103795][ T1931] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1059.106919][ T1931] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1059.153898][T29689] bond0: (slave syz_tun): Releasing backup interface [ 1059.223595][ T8994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1059.751350][ T9017] __nla_validate_parse: 2 callbacks suppressed [ 1059.751371][ T9017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8807'. [ 1059.752285][ T9014] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1059.782359][ T9017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8807'. [ 1059.782398][ T9017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8807'. [ 1059.812457][ T9020] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8805'. [ 1059.821966][ T9017] geneve3: entered promiscuous mode [ 1060.034606][ T9025] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8808'. [ 1060.078461][ T9025] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8808'. [ 1060.375193][ T8983] lo speed is unknown, defaulting to 1000 [ 1060.388345][ T8983] wg0 speed is unknown, defaulting to 1000 [ 1060.390388][ T8983] lo speed is unknown, defaulting to 1000 [ 1060.576606][ T9057] ip_tables: iptables: counters copy to user failed while replacing table [ 1060.895093][ T8983] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.895487][ T8983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.895640][ T8983] bridge_slave_0: entered allmulticast mode [ 1060.898276][ T8983] bridge_slave_0: entered promiscuous mode [ 1060.902047][ T8983] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.902324][ T8983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.902721][ T8983] bridge_slave_1: entered allmulticast mode [ 1060.904772][ T8983] bridge_slave_1: entered promiscuous mode [ 1060.971564][ T8983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1060.974152][ T8983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1061.049554][ T8983] team0: Port device team_slave_0 added [ 1061.057858][ T8983] team0: Port device team_slave_1 added [ 1061.128713][ T8983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.128733][ T8983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.128757][ T8983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.133899][ T8983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.133918][ T8983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.133944][ T8983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.179024][ T5626] Bluetooth: hci6: command tx timeout [ 1061.225697][ T8983] hsr_slave_0: entered promiscuous mode [ 1061.230884][ T8983] hsr_slave_1: entered promiscuous mode [ 1061.231779][ T8983] debugfs: 'hsr0' already exists in 'hsr' [ 1061.231799][ T8983] Cannot create hsr debugfs directory [ 1061.288850][ T9048] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1062.250758][ T9147] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8828'. [ 1062.687196][ T8983] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1062.687236][ T8983] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.687261][ T8983] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1063.033749][ T8983] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1063.033790][ T8983] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.033816][ T8983] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1063.170805][ T9198] netlink: 'syz.2.8830': attribute type 1 has an invalid length. [ 1063.242709][ T5626] Bluetooth: hci6: command tx timeout [ 1063.278926][ T8983] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1063.278966][ T8983] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.278992][ T8983] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1063.392874][ T9200] syzkaller1: entered promiscuous mode [ 1063.392929][ T9200] syzkaller1: entered allmulticast mode [ 1063.857099][ T8983] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1063.857138][ T8983] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.857163][ T8983] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1064.334695][ T9284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8837'. [ 1064.891335][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8838'. [ 1064.891374][ T9294] netlink: 'syz.0.8838': attribute type 22 has an invalid length. [ 1064.891390][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8838'. [ 1064.950446][ T9290] bond0: (slave ip6gretap1): Releasing active interface [ 1065.049252][ T9290] bond7: (slave wireguard0): Releasing backup interface [ 1065.049280][ T9290] wireguard0: left promiscuous mode [ 1065.138851][ T9290] bond8: (slave bridge7): Releasing backup interface [ 1065.138913][ T9290] bridge7: left promiscuous mode [ 1065.243273][ T9299] veth0_to_bond: entered allmulticast mode [ 1065.318780][ T5626] Bluetooth: hci6: command tx timeout [ 1065.465658][ T9312] sctp_setsockopt_maxburst: 23 callbacks suppressed [ 1065.465682][ T9312] sctp: [Deprecated]: syz.1.8841 (pid 9312) Use of int in max_burst socket option deprecated. [ 1065.465682][ T9312] Use struct sctp_assoc_value instead [ 1065.672578][ T9313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8842'. [ 1065.740809][ T636] bridge_slave_1: left promiscuous mode [ 1065.741021][ T636] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.775785][ T636] bridge_slave_0: left allmulticast mode [ 1065.775805][ T636] bridge_slave_0: left promiscuous mode [ 1065.788064][ T636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.751704][ T636] bond7 (unregistering): (slave gretap1): Releasing active interface [ 1066.898552][ T636] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1067.022829][ T636] bond11 (unregistering): (slave bridge6): Releasing backup interface [ 1067.022856][ T636] bond11 (unregistering): (slave bridge6): the permanent HWaddr of slave - 96:df:39:39:7f:63 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1067.022884][ T636] bridge6 (unregistering): left promiscuous mode [ 1067.022902][ T636] bridge6 (unregistering): left allmulticast mode [ 1067.022921][ T636] bond11 (unregistering): (slave bridge7): making interface the new active one [ 1067.022932][ T636] bridge7 (unregistering): entered promiscuous mode [ 1067.022953][ T636] bridge7 (unregistering): entered allmulticast mode [ 1067.063619][ T636] bond11 (unregistering): (slave bridge7): Releasing backup interface [ 1067.063647][ T636] bridge7 (unregistering): left promiscuous mode [ 1067.063665][ T636] bridge7 (unregistering): left allmulticast mode [ 1067.146705][ T636] bond0 (unregistering): (slave ªªªªª»): Releasing backup interface [ 1067.149586][ T636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1067.151257][ T636] bond0 (unregistering): Released all slaves [ 1067.156909][ T636] bond1 (unregistering): Released all slaves [ 1067.174542][ T636] bond2 (unregistering): Released all slaves [ 1067.188428][ T636] bond3 (unregistering): Released all slaves [ 1067.205545][ T636] bond4 (unregistering): Released all slaves [ 1067.240442][ T636] bond5 (unregistering): Released all slaves [ 1067.253510][ T636] bond6 (unregistering): (slave veth3): Releasing active interface [ 1067.255723][ T636] bond6 (unregistering): Released all slaves [ 1067.274648][ T636] bond7 (unregistering): Released all slaves [ 1067.289522][ T636] bond8 (unregistering): Released all slaves [ 1067.310068][ T636] bond9 (unregistering): Released all slaves [ 1067.332439][ T636] bond10 (unregistering): Released all slaves [ 1067.344574][ T636] bond11 (unregistering): Released all slaves [ 1067.359828][ T636] bond12 (unregistering): Released all slaves [ 1067.399610][ T5626] Bluetooth: hci6: command tx timeout [ 1067.421363][ T9314] vlan5: entered allmulticast mode [ 1067.421385][ T9314] bridge8: entered allmulticast mode [ 1067.517077][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8844'. [ 1067.588491][ T9326] netlink: 'syz.5.8845': attribute type 3 has an invalid length. [ 1067.588904][ T9326] netlink: 'syz.5.8845': attribute type 3 has an invalid length. [ 1067.589245][ T9326] netlink: 'syz.5.8845': attribute type 3 has an invalid length. [ 1067.592351][ T9326] netlink: 'syz.5.8845': attribute type 3 has an invalid length. [ 1067.602274][ T9326] netlink: 'syz.5.8845': attribute type 3 has an invalid length. [ 1067.602616][ T9326] netlink: 'syz.5.8845': attribute type 3 has an invalid length. [ 1067.602915][ T9326] netlink: 'syz.5.8845': attribute type 3 has an invalid length. [ 1067.603253][ T9326] netlink: 'syz.5.8845': attribute type 3 has an invalid length. [ 1068.023151][ T636] tipc: Left network mode [ 1068.062847][ T9345] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8848'. [ 1068.492051][ T9357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8850'. [ 1068.492082][ T9357] block nbd1: Unsupported socket: should be TCP or UNIX. [ 1068.729493][ T8983] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1068.794342][ T8983] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1068.814614][ T8983] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1068.831581][ T8983] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1068.894926][ T8983] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1068.900958][ T8983] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1068.923517][ T8983] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1068.938596][ T8983] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1069.152364][ T9381] netlink: 6 bytes leftover after parsing attributes in process `syz.0.8853'. [ 1069.219162][ T9382] ovs-dp0: entered promiscuous mode [ 1069.408411][ T9393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8854'. [ 1069.523656][ T9396] validate_nla: 11 callbacks suppressed [ 1069.523680][ T9396] netlink: 'syz.2.8855': attribute type 1 has an invalid length. [ 1069.625737][ T9393] bond0: option xmit_hash_policy: invalid value (64) [ 1069.628296][ T9393] bond0 (unregistering): Released all slaves [ 1069.817577][ T9412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8856'. [ 1069.862493][ T9396] bond10: entered promiscuous mode [ 1069.862891][ T9396] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1069.888635][ T9399] macvtap1: entered allmulticast mode [ 1069.925911][ T9408] bond10: (slave bridge11): making interface the new active one [ 1069.925937][ T9408] bridge11: entered promiscuous mode [ 1069.948297][ T9408] bond10: (slave bridge11): Enslaving as an active interface with an up link [ 1070.227476][ T9420] netlink: 'syz.2.8860': attribute type 11 has an invalid length. [ 1070.227500][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8860'. [ 1070.325512][ T8983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.365824][ T8983] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.390596][ T7099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.390695][ T7099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.434937][ T9296] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.435078][ T9296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.511647][ T9433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8861'. [ 1070.540485][ T636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1070.540514][ T636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1070.544355][ T636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1070.544379][ T636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1070.580355][ T636] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1070.580381][ T636] batman_adv: batadv0: Removing interface: ipvlan2 [ 1070.583620][ T636] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 1070.583642][ T636] batman_adv: batadv0: Removing interface: ipvlan3 [ 1070.585665][ T636] batman_adv: batadv0: Interface deactivated: ipvlan4 [ 1070.585687][ T636] batman_adv: batadv0: Removing interface: ipvlan4 [ 1070.685180][ T636] veth0_macvtap: left promiscuous mode [ 1070.685304][ T636] veth1_vlan: left promiscuous mode [ 1070.980892][ T9451] netlink: 'syz.1.8867': attribute type 1 has an invalid length. [ 1071.024765][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8868'. [ 1071.366440][ T636] team0 (unregistering): Port device team_slave_1 removed [ 1071.384445][ T636] team0 (unregistering): Port device team_slave_0 removed [ 1071.676685][ T9451] bond0: entered promiscuous mode [ 1071.678088][ T9451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.724140][ T9467] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8869'. [ 1071.943698][ T9478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8871'. [ 1072.068908][ T9485] netlink: 'syz.0.8874': attribute type 11 has an invalid length. [ 1072.173833][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8874'. [ 1072.174390][ T9489] netlink: 'syz.1.8876': attribute type 16 has an invalid length. [ 1072.174412][ T9489] netlink: 'syz.1.8876': attribute type 17 has an invalid length. [ 1072.211843][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8874'. [ 1072.213150][ T9490] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8875'. [ 1072.213185][ T9490] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8875'. [ 1072.467435][ T9489] 8021q: adding VLAN 0 to HW filter on device .` [ 1072.469684][ T9489] 8021q: adding VLAN 0 to HW filter on device team0 [ 1072.553328][ T9489] veth1_vlan: left promiscuous mode [ 1072.563616][ T9489] veth0_vlan: left promiscuous mode [ 1072.565733][ T9489] veth0_vlan: entered promiscuous mode [ 1072.580725][ T9489] veth1_vlan: entered promiscuous mode [ 1072.592977][ T9489] veth1_macvtap: left promiscuous mode [ 1072.601662][ T9489] veth0_macvtap: left promiscuous mode [ 1072.603553][ T9489] veth0_macvtap: entered promiscuous mode [ 1072.605437][ T9489] veth1_macvtap: entered promiscuous mode [ 1072.633525][ T9489] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1072.636121][ T9489] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1072.653124][ T9489] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1072.654564][ T9489] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1072.673639][ T9489] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1072.688305][ T8862] bridge0: port 3(vlan2) entered blocking state [ 1072.688470][ T8862] bridge0: port 3(vlan2) entered forwarding state [ 1072.709294][T22109] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.709417][T22109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1072.711268][T22109] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.711381][T22109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1072.763555][ T636] IPVS: stop unused estimator thread 0... [ 1072.870928][ T9518] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8884'. [ 1072.891995][ T9521] ip6t_REJECT: ECHOREPLY is not supported [ 1072.919975][ T9522] Bluetooth: hci0: unsupported parameter 5161 [ 1072.920001][ T9522] Bluetooth: hci0: unsupported parameter 8192 [ 1072.920013][ T9522] Bluetooth: hci0: unsupported parameter 5161 [ 1072.920025][ T9522] Bluetooth: hci0: unsupported parameter 8192 [ 1073.208528][ T1038] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.284728][ T9530] IPv6: sit3: Disabled Multicast RS [ 1073.312154][ T9523] syzkaller0: entered promiscuous mode [ 1073.312181][ T9523] syzkaller0: entered allmulticast mode [ 1073.473089][ T4124] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.473174][ T4124] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.473209][ T4124] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.548505][ T9545] bridge_slave_0: left allmulticast mode [ 1073.548537][ T9545] bridge_slave_0: left promiscuous mode [ 1073.548775][ T9545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.585149][ T9545] bridge_slave_1: left allmulticast mode [ 1073.585180][ T9545] bridge_slave_1: left promiscuous mode [ 1073.585430][ T9545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.611871][ T9545] vlan2: left promiscuous mode [ 1073.611898][ T9545] geneve0: left promiscuous mode [ 1073.612453][ T9545] geneve0: entered promiscuous mode [ 1073.647429][ T9545] .`: (slave bond_slave_0): Releasing backup interface [ 1073.705087][ T9545] .`: (slave bond_slave_1): Releasing backup interface [ 1073.768441][ T9545] team0: Port device team_slave_0 removed [ 1073.799424][ T9545] team0: Port device team_slave_1 removed [ 1073.828652][ T9545] bond2: (slave bond3): Releasing backup interface [ 1073.828679][ T9545] bond2: (slave bond3): the permanent HWaddr of slave - 06:9a:fe:88:9c:f3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1073.828726][ T9545] bond2: (slave gretap1): making interface the new active one [ 1073.835130][ T9545] bond2: (slave gretap1): Releasing backup interface [ 1073.883019][ T9545] bond5: (slave ip6gre1): Releasing backup interface [ 1073.895461][ T9545] bond6: (slave ip6gre2): Releasing backup interface [ 1073.905799][ T9545] vlan2: left allmulticast mode [ 1073.905816][ T9545] geneve0: left allmulticast mode [ 1073.905968][ T9545] bridge0: port 3(vlan2) entered disabled state [ 1073.932872][ T9545] geneve0: left promiscuous mode [ 1073.953479][ T9557] bond0: (slave ip6tnl0): refused to change device type [ 1074.173403][ T9569] netlink: 'syz.2.8893': attribute type 1 has an invalid length. [ 1074.362989][ T9569] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1074.483714][ T9572] bond11: (slave veth0_to_bond): making interface the new active one [ 1074.502928][ T9572] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1074.525790][ T9589] netlink: 'syz.5.8900': attribute type 2 has an invalid length. [ 1074.539756][ T9589] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1074.544947][ T9581] macvlan2: entered promiscuous mode [ 1074.544973][ T9581] macvlan2: entered allmulticast mode [ 1074.548340][ T9581] bond11: entered promiscuous mode [ 1074.548360][ T9581] veth0_to_bond: entered promiscuous mode [ 1074.550760][ T9581] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1074.552636][ T9581] bond11: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1074.552914][ T9581] bond11: left promiscuous mode [ 1074.552929][ T9581] veth0_to_bond: left promiscuous mode [ 1074.753373][ T8983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1074.842314][ T9601] netlink: 'syz.2.8902': attribute type 6 has an invalid length. [ 1075.133282][ T8983] veth0_vlan: entered promiscuous mode [ 1075.144233][ T8983] veth1_vlan: entered promiscuous mode [ 1075.264107][ T8983] veth0_macvtap: entered promiscuous mode [ 1075.293804][ T8983] veth1_macvtap: entered promiscuous mode [ 1075.326052][ T9613] netlink: 'syz.1.8907': attribute type 10 has an invalid length. [ 1075.352143][ T9613] team0: Device veth0_macvtap failed to register rx_handler [ 1075.416714][ T8983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1075.461973][ T8983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1075.534206][ T9620] __nla_validate_parse: 1 callbacks suppressed [ 1075.534229][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8909'. [ 1075.571638][ T9620] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8909'. [ 1075.581527][ T1038] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.584670][ T9296] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.584822][ T9296] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.584852][ T9296] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.801959][T13905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1075.801985][T13905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1075.891478][T13905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1075.891503][T13905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.047556][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8912'. [ 1076.147491][ T9641] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1076.268512][ T9650] sctp: [Deprecated]: syz.1.8916 (pid 9650) Use of int in max_burst socket option. [ 1076.268512][ T9650] Use struct sctp_assoc_value instead [ 1076.459113][ T9664] netlink: 'syz.2.8919': attribute type 1 has an invalid length. [ 1076.459145][ T9664] netlink: 'syz.2.8919': attribute type 4 has an invalid length. [ 1076.459159][ T9664] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.8919'. [ 1076.654152][ T9680] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1076.799009][ T9686] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1076.801082][ T9686] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8927'. [ 1076.988921][ T9693] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8929'. [ 1077.027676][ T9694] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8931'. [ 1077.101215][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8932'. [ 1077.223789][ T9671] netlink: 'syz.3.8925': attribute type 1 has an invalid length. [ 1077.272708][ T9707] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8933'. [ 1077.272737][ T9707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8933'. [ 1077.768436][ T9722] netlink: zone id is out of range [ 1077.768452][ T9722] netlink: zone id is out of range [ 1077.768462][ T9722] netlink: zone id is out of range [ 1077.768470][ T9722] netlink: zone id is out of range [ 1077.768477][ T9722] netlink: zone id is out of range [ 1077.768484][ T9722] netlink: zone id is out of range [ 1077.768496][ T9722] netlink: zone id is out of range [ 1077.768504][ T9722] netlink: zone id is out of range [ 1077.768512][ T9722] netlink: zone id is out of range [ 1077.768521][ T9722] netlink: zone id is out of range [ 1078.205393][ T9738] netlink: 'syz.5.8940': attribute type 1 has an invalid length. [ 1078.433785][ T9746] netlink: 'syz.0.8943': attribute type 21 has an invalid length. [ 1078.797150][ T9772] netlink: 'syz.0.8954': attribute type 1 has an invalid length. [ 1078.920365][ T9772] bond11: option mode: invalid value (7) [ 1078.927856][ T9772] bond11 (unregistering): Released all slaves [ 1079.082605][ T9787] tipc: Started in network mode [ 1079.082639][ T9787] tipc: Node identity ac14140f, cluster identity 4711 [ 1079.082922][ T9787] tipc: New replicast peer: 255.255.255.255 [ 1079.084887][ T9787] tipc: Enabled bearer , priority 10 [ 1080.196486][ T5725] tipc: Node number set to 2886997007 [ 1080.425336][ T636] IPVS: starting estimator thread 0... [ 1080.507226][ T9842] IPVS: using max 26 ests per chain, 62400 per kthread [ 1080.639209][ T9809] __nla_validate_parse: 7 callbacks suppressed [ 1080.639237][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8964'. [ 1080.639252][ T9809] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8964'. [ 1080.801935][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8979'. [ 1080.915549][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8980'. [ 1080.967364][ T9869] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8981'. [ 1080.967726][ T9869] 8021q: VLANs not supported on ip6_vti0 [ 1081.359634][ T9884] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8983'. [ 1081.361688][ T9885] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1081.400922][ T9885] xt_hashlimit: size too large, truncated to 1048576 [ 1081.488495][ T9889] syzkaller1: entered promiscuous mode [ 1081.488521][ T9889] syzkaller1: entered allmulticast mode [ 1082.653069][ T9916] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8992'. [ 1082.668706][ T9926] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1082.985802][ T9929] net_ratelimit: 500 callbacks suppressed [ 1082.985825][ T9929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1083.075052][ T9930] tipc: Started in network mode [ 1083.075079][ T9930] tipc: Node identity 401, cluster identity 4711 [ 1083.075092][ T9930] tipc: Node number set to 1025 [ 1084.050932][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9005'. [ 1084.391247][ T9982] syzkaller1: entered promiscuous mode [ 1084.391273][ T9982] syzkaller1: entered allmulticast mode [ 1084.400546][ T9984] openvswitch: netlink: IP tunnel dst address not specified [ 1084.400582][ T9984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1084.529676][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9013'. [ 1084.723829][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.724333][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.724723][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.725176][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.725636][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.726095][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.767217][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.767588][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.768042][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.768479][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.775352][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.775805][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.823968][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.824437][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.824881][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.825350][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.825706][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.826161][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.826507][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.826970][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.827415][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.827700][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.828120][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.828597][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.829006][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.829407][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.829810][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.830220][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.830620][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.831036][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.831439][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.831848][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1084.832252][T10002] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1085.133697][T10011] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20002 [ 1085.610586][T10027] tipc: Enabling of bearer rejected, already enabled [ 1085.856949][T10038] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 1086.683333][T10063] netlink: 'syz.2.9031': attribute type 1 has an invalid length. [ 1086.749124][T10063] bond12: entered promiscuous mode [ 1086.749584][T10063] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1086.821300][T10063] bond12: (slave bridge12): making interface the new active one [ 1086.821327][T10063] bridge12: entered promiscuous mode [ 1086.823237][T10063] bond12: (slave bridge12): Enslaving as an active interface with an up link [ 1087.520461][T10081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9036'. [ 1088.331004][ T7099] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1088.452279][T10113] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9046'. [ 1088.629569][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9048'. [ 1088.898721][T10096] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1089.297233][T10136] netlink: 'syz.2.9050': attribute type 4 has an invalid length. [ 1089.538110][T10142] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9054'. [ 1089.583174][T10146] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 1089.648846][T10145] wireguard0: entered promiscuous mode [ 1089.649086][T10145] wireguard0: entered allmulticast mode [ 1089.711399][T10145] wg1: entered promiscuous mode [ 1089.711424][T10145] wg1: entered allmulticast mode [ 1089.747386][T10151] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9056'. [ 1090.145581][T10163] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1090.913012][T10193] netlink: 'syz.0.9066': attribute type 1 has an invalid length. [ 1091.498388][T10208] netlink: 292 bytes leftover after parsing attributes in process `syz.2.9071'. [ 1091.498489][T10208] tunl0: Caught tx_queue_len zero misconfig [ 1091.671275][ T7099] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x4d [ 1092.348961][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9078'. [ 1092.369991][T10243] tipc: Enabling of bearer rejected, failed to enable media [ 1092.414671][T10239] v: renamed from veth0_vlan [ 1092.421906][T10249] syzkaller0: entered promiscuous mode [ 1092.421931][T10249] syzkaller0: entered allmulticast mode [ 1092.871509][ T636] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1092.871600][T10261] xt_nfacct: accounting object `syz0' does not exist [ 1092.874982][ T9296] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1092.875031][ T9296] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1092.875067][ T9296] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1093.214679][T10267] ovs-dp0: entered promiscuous mode [ 1093.221677][T10266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9084'. [ 1093.325347][T10266] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 1094.028756][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9089'. [ 1094.028784][T10288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9089'. [ 1094.370569][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9092'. [ 1094.370623][T10294] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9092'. [ 1094.373924][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9092'. [ 1094.373956][T10294] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9092'. [ 1094.580987][T10298] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9094'. [ 1094.638077][T10301] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1095.924184][T10325] lo speed is unknown, defaulting to 1000 [ 1095.927498][T10325] wg0 speed is unknown, defaulting to 1000 [ 1095.929252][T10325] lo speed is unknown, defaulting to 1000 [ 1096.250942][T10342] netlink: 'syz.5.9106': attribute type 11 has an invalid length. [ 1096.250969][T10342] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9106'. [ 1096.385946][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9107'. [ 1096.614836][T10355] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 1097.521680][T10372] syzkaller0: entered promiscuous mode [ 1097.521921][T10372] syzkaller0: entered allmulticast mode [ 1097.552199][T10377] tipc: Enabled bearer , priority 0 [ 1097.738725][T10372] tipc: Resetting bearer [ 1098.010554][T10393] xt_TCPMSS: Only works on TCP SYN packets [ 1098.218977][T10399] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1098.219894][T10399] netlink: 'syz.5.9122': attribute type 39 has an invalid length. [ 1098.299086][T10404] __nla_validate_parse: 8 callbacks suppressed [ 1098.299111][T10404] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9122'. [ 1098.382567][T10409] netlink: 'syz.5.9122': attribute type 10 has an invalid length. [ 1098.394772][T10409] team0: Device vxcan1 is of different type [ 1098.494015][T10407] netlink: 'syz.0.9124': attribute type 27 has an invalid length. [ 1098.507210][T10398] netlink: 'syz.2.9121': attribute type 10 has an invalid length. [ 1098.515422][T10407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9124'. [ 1098.580939][T10398] bond11: (slave veth0_to_bond): Releasing active interface [ 1098.602782][T10412] No such timeout policy "syz1" [ 1098.613240][T10398] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1098.630852][T10407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9124'. [ 1098.882960][T10414] veth0: entered promiscuous mode [ 1098.914887][T10417] netlink: 'syz.2.9127': attribute type 21 has an invalid length. [ 1098.989800][T10417] bond13: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1099.053477][T10417] bond13 (unregistering): Released all slaves [ 1099.370564][T10410] veth0: left promiscuous mode [ 1099.385741][ T9296] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.040692][ T1931] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1100.044217][ T1931] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1100.045137][ T1931] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1100.046454][ T1931] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1100.054291][ T1931] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1100.166998][T10455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9133'. [ 1100.193555][T10456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9133'. [ 1100.845457][T10491] netlink: 'syz.0.9137': attribute type 2 has an invalid length. [ 1101.132388][T10503] netlink: 316 bytes leftover after parsing attributes in process `syz.3.9139'. [ 1101.382343][T10509] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1101.761464][T10526] netlink: 'syz.5.9142': attribute type 33 has an invalid length. [ 1102.034271][T10452] lo speed is unknown, defaulting to 1000 [ 1102.047145][T10452] wg0 speed is unknown, defaulting to 1000 [ 1102.052256][T10452] lo speed is unknown, defaulting to 1000 [ 1102.198576][ T5626] Bluetooth: hci3: command tx timeout [ 1102.321529][T10540] netlink: 'syz.3.9149': attribute type 1 has an invalid length. [ 1102.321554][T10540] netlink: 'syz.3.9149': attribute type 4 has an invalid length. [ 1102.321567][T10540] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.9149'. [ 1102.322009][T10540] netlink: 'syz.3.9149': attribute type 1 has an invalid length. [ 1102.322026][T10540] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.9149'. [ 1102.378985][T10534] syzkaller0: entered promiscuous mode [ 1102.379010][T10534] syzkaller0: entered allmulticast mode [ 1102.622574][T10534] mac80211_hwsim hwsim85 wlan0: entered promiscuous mode [ 1102.707961][T10550] xt_hashlimit: size too large, truncated to 1048576 [ 1102.860444][T10552] xt_hashlimit: size too large, truncated to 1048576 [ 1102.901809][T10558] netlink: 256 bytes leftover after parsing attributes in process `syz.3.9151'. [ 1103.085883][T10560] netlink: 15 bytes leftover after parsing attributes in process `syz.3.9151'. [ 1103.412544][T10565] __nla_validate_parse: 1 callbacks suppressed [ 1103.412569][T10565] netlink: 72 bytes leftover after parsing attributes in process `syz.5.9154'. [ 1103.412588][T10565] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9154'. [ 1103.927269][T10579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9159'. [ 1104.163140][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9162'. [ 1104.214184][T10452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.214385][T10452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.214578][T10452] bridge_slave_0: entered allmulticast mode [ 1104.244826][T10452] bridge_slave_0: entered promiscuous mode [ 1104.259075][T10452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.259266][T10452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.259421][T10452] bridge_slave_1: entered allmulticast mode [ 1104.265210][T10452] bridge_slave_1: entered promiscuous mode [ 1104.278182][ T5626] Bluetooth: hci3: command tx timeout [ 1104.335097][T10593] bond0: invalid NS target :: specified for addition [ 1104.335129][T10593] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 1104.376283][T10452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.380176][T10452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1104.471790][ T7099] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 1104.487207][T10452] team0: Port device team_slave_0 added [ 1104.558569][T10452] team0: Port device team_slave_1 added [ 1104.600512][T10452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1104.600531][T10452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1104.600556][T10452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.602595][T10452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.602608][T10452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1104.602632][T10452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.751731][T10452] hsr_slave_0: entered promiscuous mode [ 1104.752820][T10452] hsr_slave_1: entered promiscuous mode [ 1104.753587][T10452] debugfs: 'hsr0' already exists in 'hsr' [ 1104.753608][T10452] Cannot create hsr debugfs directory [ 1105.330826][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9169'. [ 1105.388812][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9169'. [ 1105.388854][T10617] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9169'. [ 1105.821034][T10632] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9174'. [ 1106.118892][T10452] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1106.166153][T10452] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1106.171212][T10452] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1106.218037][T10452] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1106.231940][T10452] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1106.271849][T10452] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1106.298849][T10452] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1106.360050][ T5626] Bluetooth: hci3: command tx timeout [ 1106.428916][T10452] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1106.583056][T10652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9176'. [ 1106.602712][T10669] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9179'. [ 1106.665972][T10672] validate_nla: 1 callbacks suppressed [ 1106.665993][T10672] netlink: 'syz.3.9177': attribute type 4 has an invalid length. [ 1106.690527][T10672] netlink: 'syz.3.9177': attribute type 4 has an invalid length. [ 1107.068199][T10685] netlink: 'syz.0.9181': attribute type 10 has an invalid length. [ 1107.128951][T10683] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1107.133164][T10452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.179134][T10452] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.208021][ T7099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.208140][ T7099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1107.235479][ T7099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.235594][ T7099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1107.750178][T10694] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1107.944011][T10703] syzkaller0: left promiscuous mode [ 1107.944036][T10703] syzkaller0: left allmulticast mode [ 1108.063150][T10706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1108.095876][T10706] bridge2: entered promiscuous mode [ 1108.095937][T10706] bridge2: entered allmulticast mode [ 1108.381153][T10717] netlink: 'syz.3.9195': attribute type 10 has an invalid length. [ 1108.382084][T10717] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.382785][T10717] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.435776][T10717] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.435918][T10717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.436363][T10717] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.436513][T10717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.437264][ T5626] Bluetooth: hci3: command tx timeout [ 1108.490595][T10717] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1108.570079][T10717] __nla_validate_parse: 1 callbacks suppressed [ 1108.570102][T10717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9195'. [ 1108.572614][T10722] ipvlan3: entered allmulticast mode [ 1108.572635][T10722] virt_wifi0: entered allmulticast mode [ 1108.575630][T10722] batman_adv: batadv0: Adding interface: ipvlan3 [ 1108.575647][T10722] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1108.575678][T10722] batman_adv: batadv0: Interface activated: ipvlan3 [ 1109.739576][T10452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1110.385571][T10763] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9205'. [ 1110.385599][T10763] netlink: 43 bytes leftover after parsing attributes in process `syz.0.9205'. [ 1110.385615][T10763] netlink: 'syz.0.9205': attribute type 5 has an invalid length. [ 1110.385628][T10763] netlink: 43 bytes leftover after parsing attributes in process `syz.0.9205'. [ 1110.707359][T10778] sit0: entered promiscuous mode [ 1110.769761][T10778] netlink: 'syz.0.9207': attribute type 1 has an invalid length. [ 1110.769784][T10778] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9207'. [ 1110.855138][T10783] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9208'. [ 1110.855174][T10783] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 1111.396840][ T1931] Bluetooth: hci3: command 0x0405 tx timeout [ 1111.490751][T10796] bond2: option mode: invalid value (10) [ 1111.495824][T10796] bond2 (unregistering): Released all slaves [ 1111.890427][T10452] veth0_vlan: entered promiscuous mode [ 1111.919464][T10452] veth1_vlan: entered promiscuous mode [ 1112.115848][T10452] veth0_macvtap: entered promiscuous mode [ 1112.166652][T10452] veth1_macvtap: entered promiscuous mode [ 1112.300784][T10452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.342692][T10452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.500585][ T9296] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.612056][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.612577][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.628076][ T7094] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.952560][T10513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.952586][T10513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.109984][T10847] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 1113.225938][ T7099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.225971][ T7099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.253212][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9222'. [ 1113.689312][T10857] sch_tbf: burst 0 is lower than device gre0 mtu (1500) ! [ 1114.210083][T10882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9228'. [ 1114.560306][T10888] netlink: 27 bytes leftover after parsing attributes in process `syz.2.9231'. [ 1114.780985][T10897] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 1114.799967][T10897] batman_adv: batadv0: Adding interface: gretap3 [ 1114.799987][T10897] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.800210][T10897] batman_adv: batadv0: Interface activated: gretap3 [ 1115.427308][T10922] veth5: entered allmulticast mode [ 1115.658475][T10927] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9238'. [ 1115.713319][T10936] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9238'. [ 1116.415339][T10952] netlink: 'syz.2.9243': attribute type 10 has an invalid length. [ 1116.521765][T10952] team0: Port device dummy0 added [ 1116.558514][T10959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9246'. [ 1117.101847][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9249'. [ 1117.732992][T10981] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1117.810147][ T1931] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1117.829842][ T1931] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1117.832726][ T1931] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1117.843937][ T1931] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1117.863210][ T1931] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1118.237370][T10985] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9254'. [ 1119.025587][T11022] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9258'. [ 1119.275330][T11024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1119.404199][T11032] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9261'. [ 1119.565454][T10513] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1119.565494][T10513] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.565520][T10513] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1119.733783][T11032] netlink: 288 bytes leftover after parsing attributes in process `syz.5.9261'. [ 1119.957587][ T5626] Bluetooth: hci7: command tx timeout [ 1120.468418][T10513] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1120.468458][T10513] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.468484][T10513] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1120.908626][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1120.952869][T10513] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1120.952908][T10513] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.952932][T10513] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1121.038367][T11065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.157723][T11066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.163635][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.210148][T11066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.232191][T11066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.254499][T11066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.277065][T11066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.278766][T11066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.280342][T11066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.281871][T11066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.283352][T11066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.284872][T11066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.291403][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.456477][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.467176][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.503490][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.519426][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.523541][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.548755][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.551028][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.591873][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.609602][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.630210][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.638544][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.680672][T11066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.707296][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.733180][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.735186][T11057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.818322][T11066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.852599][T11066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.854253][T11066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.854865][T11078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9270'. [ 1121.860390][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.902673][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.924534][T11066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.945665][T11066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1122.026561][T11066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1122.028619][T11066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1122.064019][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1122.066365][ T5626] Bluetooth: hci7: command tx timeout [ 1122.097436][T11066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1122.101311][T11066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1122.108970][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1122.186225][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1122.209725][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1122.252814][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1122.297243][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1122.327134][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1122.343931][T10513] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1122.343965][T10513] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.343988][T10513] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1122.431464][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1122.514281][T10986] lo speed is unknown, defaulting to 1000 [ 1122.566105][T10986] wg0 speed is unknown, defaulting to 1000 [ 1122.690694][T10986] lo speed is unknown, defaulting to 1000 [ 1123.295438][T10513] bridge0: left allmulticast mode [ 1123.327983][T10513] batman_adv: batadv0: Interface deactivated: gretap1 [ 1124.117081][ T5626] Bluetooth: hci7: command tx timeout [ 1124.141532][T10513] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 1124.303519][T10513] erspan0 (unregistering): left promiscuous mode [ 1124.341525][T10513] gretap0 (unregistering): left promiscuous mode [ 1124.425477][T10513] batman_adv: batadv0: Removing interface: gretap1 [ 1124.658530][T10513] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 1124.658561][T10513] bridge4 (unregistering): left promiscuous mode [ 1124.658581][T10513] bridge4 (unregistering): left allmulticast mode [ 1124.705123][T10513] bond8 (unregistering): (slave bridge8): Releasing active interface [ 1124.769413][T10513] bond10 (unregistering): (slave bridge11): Releasing backup interface [ 1124.769443][T10513] bridge11 (unregistering): left promiscuous mode [ 1124.790339][T10513] bond12 (unregistering): (slave bridge12): Releasing backup interface [ 1124.790383][T10513] bridge12 (unregistering): left promiscuous mode [ 1124.823849][T10513] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1124.832265][T10513] bond0 (unregistering): Released all slaves [ 1124.841407][T10513] bond1 (unregistering): Released all slaves [ 1124.869674][T10513] bond2 (unregistering): Released all slaves [ 1124.892249][T10513] bond3 (unregistering): Released all slaves [ 1124.909584][T10513] bond4 (unregistering): Released all slaves [ 1124.933325][T10513] bond5 (unregistering): Released all slaves [ 1124.969642][T10513] bond6 (unregistering): Released all slaves [ 1124.988841][T10513] bond7 (unregistering): Released all slaves [ 1125.018627][T10513] bond8 (unregistering): Released all slaves [ 1125.042066][T10513] bond9 (unregistering): Released all slaves [ 1125.090205][T10513] bond10 (unregistering): Released all slaves [ 1125.109917][T10513] bond11 (unregistering): Released all slaves [ 1125.133886][T10513] bond12 (unregistering): Released all slaves [ 1125.661820][T11131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1125.784011][T10513] ovs-dp0: left promiscuous mode [ 1126.052622][T10513] : left promiscuous mode [ 1126.196491][ T5626] Bluetooth: hci7: command tx timeout [ 1126.531202][T10513] tipc: Left network mode [ 1126.548668][T11157] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9284'. [ 1127.300524][T11182] sctp: [Deprecated]: syz.3.9287 (pid 11182) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1127.300524][T11182] Use struct sctp_sack_info instead [ 1128.601225][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1129.351964][T11226] bond11: entered promiscuous mode [ 1129.372133][T10986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.373778][T10986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.373952][T10986] bridge_slave_0: entered allmulticast mode [ 1129.405227][T10986] bridge_slave_0: entered promiscuous mode [ 1129.481937][T10986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.482118][T10986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.482294][T10986] bridge_slave_1: entered allmulticast mode [ 1129.526871][T10986] bridge_slave_1: entered promiscuous mode [ 1129.826163][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9296'. [ 1130.005214][T11254] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9297'. [ 1130.504171][T10986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1130.535557][T10986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1131.040128][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1131.136024][T10986] team0: Port device team_slave_0 added [ 1131.179098][T10986] team0: Port device team_slave_1 added [ 1131.385537][T11286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9303'. [ 1131.483532][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9304'. [ 1131.575880][T11278] geneve2: entered promiscuous mode [ 1131.618868][T11285] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9301'. [ 1131.754937][T10986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1131.754957][T10986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1131.754984][T10986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1131.810470][T10986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1131.810496][T10986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1131.810521][T10986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1132.156398][T10513] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 1132.156424][T10513] batman_adv: batadv0: Removing interface: ipvlan3 [ 1132.380125][T10513] veth0_macvtap: left promiscuous mode [ 1132.380210][T10513] veth1_vlan: left promiscuous mode [ 1132.693767][T11308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9307'. [ 1133.286012][T11326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1133.414756][T11326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1133.504431][T11329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1133.623321][T11329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1134.018696][T10513] team0 (unregistering): Port device dummy0 removed [ 1134.084354][ T38] smbdirect: ib_dev[syz2] removed [ 1134.098981][T10986] hsr_slave_0: entered promiscuous mode [ 1134.100253][T10986] hsr_slave_1: entered promiscuous mode [ 1134.101193][T10986] debugfs: 'hsr0' already exists in 'hsr' [ 1134.101214][T10986] Cannot create hsr debugfs directory [ 1134.227255][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1134.605592][T11341] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9312'. [ 1134.605624][T11341] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9312'. [ 1134.737120][T11344] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9313'. [ 1135.553213][T10513] IPVS: stop unused estimator thread 0... [ 1135.588781][T11360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1135.713072][T11359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9316'. [ 1135.719519][T11360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9316'. [ 1135.740882][T11359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1135.842168][T11359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1136.224436][T11377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1136.361779][T11371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1136.940414][T11401] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9324'. [ 1137.879846][T11424] openvswitch: netlink: Multiple metadata blocks provided [ 1137.923638][T11421] 8021q: VLANs not supported on wg2 [ 1138.633340][T11438] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9333'. [ 1139.294716][T11462] netlink: 64 bytes leftover after parsing attributes in process `syz.6.9339'. [ 1139.397392][T11463] sctp: [Deprecated]: syz.5.9340 (pid 11463) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1139.397392][T11463] Use struct sctp_sack_info instead [ 1139.673662][T10986] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1139.690282][T10986] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1139.691880][T10986] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1139.713091][T10986] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1139.725433][T10986] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1139.743093][T10986] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1139.744365][T10986] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1139.764309][T10986] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1139.767495][T11464] syzkaller1: entered promiscuous mode [ 1139.767707][T11464] syzkaller1: entered allmulticast mode [ 1140.444748][T11495] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9344'. [ 1140.593881][T11498] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1140.606457][T11495] gretap1: entered promiscuous mode [ 1140.606672][T11495] gretap1: entered allmulticast mode [ 1140.644533][T11499] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9345'. [ 1140.663495][T10986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1140.742250][T11498] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9346'. [ 1140.743347][T10986] 8021q: adding VLAN 0 to HW filter on device team0 [ 1140.826816][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.826960][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1140.991673][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.991795][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1141.498839][T11515] netlink: 768 bytes leftover after parsing attributes in process `syz.3.9351'. [ 1141.796967][T11528] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9354'. [ 1141.912637][T11530] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9353'. [ 1142.302599][T11543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9358'. [ 1142.586866][T11551] netlink: 128 bytes leftover after parsing attributes in process `syz.6.9359'. [ 1142.586893][T11551] openvswitch: netlink: Flow key attr not present in new flow. [ 1142.647868][T11552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9357'. [ 1142.772867][T11561] veth0: entered promiscuous mode [ 1142.936026][T11567] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1142.971734][T11564] veth0: left promiscuous mode [ 1143.104480][T11567] Cannot find add_set index 65532 as target [ 1143.267204][T11573] tc action pedit 'at' offset 5 out of bounds [ 1143.267232][T11573] tc action pedit 'at' offset 5 out of bounds [ 1143.267245][T11573] tc action pedit 'at' offset 5 out of bounds [ 1143.267257][T11573] tc action pedit 'at' offset 5 out of bounds [ 1143.267269][T11573] tc action pedit 'at' offset 5 out of bounds [ 1143.267280][T11573] tc action pedit 'at' offset 5 out of bounds [ 1143.267292][T11573] tc action pedit 'at' offset 5 out of bounds [ 1143.267304][T11573] tc action pedit 'at' offset 5 out of bounds [ 1143.267316][T11573] tc action pedit 'at' offset 5 out of bounds [ 1143.267327][T11573] tc action pedit 'at' offset 5 out of bounds [ 1143.267352][T11573] 0: reclassify loop, rule prio 0, protocol 800 [ 1143.447901][T11575] Bluetooth: ISO socket layer initialized [ 1143.554016][T10986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1143.774804][T11584] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9365'. [ 1144.007439][T11580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1144.058379][T11589] openvswitch: netlink: Message has 8 unknown bytes. [ 1144.400964][T10986] veth0_vlan: entered promiscuous mode [ 1144.486407][T10986] veth1_vlan: entered promiscuous mode [ 1144.578389][T10986] veth0_macvtap: entered promiscuous mode [ 1144.601065][T10986] veth1_macvtap: entered promiscuous mode [ 1144.643366][T10986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1144.676110][T10986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1144.793543][T11607] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9371'. [ 1144.837011][T10516] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.839900][T10516] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.840475][T10516] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.880861][T10516] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.238965][T11611] --map-set only usable from mangle table [ 1145.325760][T10516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.325785][T10516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.478573][T10513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.478598][T10513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.857441][ T5279] veth1_vlan: left promiscuous mode [ 1146.097838][T11637] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9248'. [ 1146.310329][T11644] netlink: 'syz.6.9376': attribute type 11 has an invalid length. [ 1147.230920][ T1931] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1147.236064][ T1931] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1147.261802][ T1931] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1147.281652][ T1931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1147.285606][ T1931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1147.490833][T11673] netlink: 'syz.3.9384': attribute type 2 has an invalid length. [ 1147.490863][T11673] netlink: 'syz.3.9384': attribute type 2 has an invalid length. [ 1148.139485][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9385'. [ 1148.849251][T11697] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9387'. [ 1148.849292][T11697] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9387'. [ 1148.962049][T11710] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9387'. [ 1148.962086][T11710] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9387'. [ 1149.043553][T10520] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1149.043593][T10520] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.342323][T11697] geneve3: entered promiscuous mode [ 1149.396527][ T5626] Bluetooth: hci2: command tx timeout [ 1149.850894][T10520] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1149.850934][T10520] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.320600][T10520] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1150.320639][T10520] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.321463][T11743] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1151.058078][T10520] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1151.058123][T10520] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.331937][T11665] lo speed is unknown, defaulting to 1000 [ 1151.349921][T11665] wg0 speed is unknown, defaulting to 1000 [ 1151.477491][ T1931] Bluetooth: hci2: command tx timeout [ 1152.079130][T11793] ipvlan2: entered allmulticast mode [ 1152.079154][T11793] virt_wifi0: entered allmulticast mode [ 1152.113916][T11793] batman_adv: batadv0: Adding interface: ipvlan2 [ 1152.113936][T11793] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1152.113969][T11793] batman_adv: batadv0: Interface activated: ipvlan2 [ 1152.230832][T11795] ipvlan3: entered allmulticast mode [ 1152.254492][T11795] batman_adv: batadv0: Adding interface: ipvlan3 [ 1152.254511][T11795] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1152.254539][T11795] batman_adv: The newly added mac address (02:c2:d7:aa:13:38) already exists on: ipvlan2 [ 1152.254555][T11795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.254569][T11795] batman_adv: batadv0: Interface activated: ipvlan3 [ 1152.810430][T11811] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9406'. [ 1152.830337][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9408'. [ 1152.830373][T11810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9408'. [ 1152.931458][T11812] netlink: 52 bytes leftover after parsing attributes in process `syz.6.9407'. [ 1152.931485][T11812] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9407'. [ 1153.540405][T10520] pimreg3: left allmulticast mode [ 1153.556462][ T1931] Bluetooth: hci2: command tx timeout [ 1153.625619][T10520] batman_adv: batadv0: Interface deactivated: gretap3 [ 1153.921654][T11842] netlink: 128 bytes leftover after parsing attributes in process `syz.6.9411'. [ 1154.363085][T11856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9414'. [ 1154.411874][ T1931] block nbd1: Receive control failed (result -32) [ 1155.013812][T10520] batman_adv: batadv0: Removing interface: gretap3 [ 1155.090237][T11870] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9415'. [ 1155.379915][T10520] bond1 (unregistering): Released all slaves [ 1155.425914][T10520] bond2 (unregistering): Released all slaves [ 1155.465086][T10520] bond0 (unregistering): Released all slaves [ 1155.492331][T10520] bond3 (unregistering): Released all slaves [ 1155.515069][T10520] bond5 (unregistering): Released all slaves [ 1155.561290][T10520] bond4 (unregistering): Released all slaves [ 1155.646527][ T1931] Bluetooth: hci2: command tx timeout [ 1155.702712][T10520] bond6 (unregistering): Released all slaves [ 1155.857951][T10520] bond7 (unregistering): Released all slaves [ 1155.923377][T10520] bond8 (unregistering): Released all slaves [ 1155.955490][T10520] bond9 (unregistering): Released all slaves [ 1156.090020][T10520] bond10 (unregistering): Released all slaves [ 1156.145431][T10520] bond11 (unregistering): Released all slaves [ 1156.713980][T11869] syzkaller0: entered promiscuous mode [ 1156.714009][T11869] syzkaller0: entered allmulticast mode [ 1156.937132][T10520] : left promiscuous mode [ 1157.265370][T10520] ovs-dp0: left promiscuous mode [ 1157.366016][T11904] C: renamed from lo (while UP) [ 1157.412888][T11904] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1157.561485][T11909] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9421'. [ 1157.561514][T11909] netlink: 80 bytes leftover after parsing attributes in process `syz.5.9421'. [ 1157.561533][T11909] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9421'. [ 1157.566792][T10520] tipc: Left network mode [ 1157.810434][T10520] IPVS: stopping master sync thread 10146 ... [ 1158.392793][T11931] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9426'. [ 1158.392822][T11931] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9426'. [ 1158.392839][T11931] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9426'. [ 1158.393033][T11931] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9426'. [ 1158.685738][T11927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1158.979791][T11665] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.980252][T11665] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.980568][T11665] bridge_slave_0: entered allmulticast mode [ 1158.993317][T11665] bridge_slave_0: entered promiscuous mode [ 1159.545019][T11665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.545571][T11665] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.545945][T11665] bridge_slave_1: entered allmulticast mode [ 1159.557670][T11665] bridge_slave_1: entered promiscuous mode [ 1160.205516][T11665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1160.329946][T11665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1160.757915][T11665] team0: Port device team_slave_0 added [ 1160.924917][T11665] team0: Port device team_slave_1 added [ 1161.088281][T11992] netlink: 'syz.5.9439': attribute type 2 has an invalid length. [ 1161.097209][T11992] netlink: 'syz.5.9439': attribute type 2 has an invalid length. [ 1161.097229][T11992] __nla_validate_parse: 3 callbacks suppressed [ 1161.097240][T11992] netlink: 67 bytes leftover after parsing attributes in process `syz.5.9439'. [ 1161.163608][T11995] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9441'. [ 1161.180458][T11995] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9441'. [ 1161.528965][T12011] netlink: 193 bytes leftover after parsing attributes in process `syz.3.9442'. [ 1161.603567][T11665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1161.603588][T11665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.603615][T11665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.685580][T11665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.685602][T11665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.685628][T11665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1161.790531][T12021] netlink: 17 bytes leftover after parsing attributes in process `syz.5.9446'. [ 1161.809024][T12021] netlink: 17 bytes leftover after parsing attributes in process `syz.5.9446'. [ 1161.878500][T12025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9446'. [ 1162.021573][T12032] netlink: 'syz.2.9445': attribute type 2 has an invalid length. [ 1162.021599][T12032] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9445'. [ 1162.170002][T10520] veth1_vlan: left promiscuous mode [ 1163.216151][T12032] : entered promiscuous mode [ 1163.702071][T11665] hsr_slave_0: entered promiscuous mode [ 1163.723735][T11665] hsr_slave_1: entered promiscuous mode [ 1163.729819][T11665] debugfs: 'hsr0' already exists in 'hsr' [ 1163.729845][T11665] Cannot create hsr debugfs directory [ 1163.812850][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.039473][ T8862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.188169][T12054] gre2: entered promiscuous mode [ 1164.489297][T12073] netlink: 'syz.6.9454': attribute type 21 has an invalid length. [ 1164.489321][T12073] netlink: 'syz.6.9454': attribute type 22 has an invalid length. [ 1164.489335][T12073] netlink: 'syz.6.9454': attribute type 23 has an invalid length. [ 1164.489349][T12073] netlink: 'syz.6.9454': attribute type 25 has an invalid length. [ 1164.489362][T12073] netlink: 96 bytes leftover after parsing attributes in process `syz.6.9454'. [ 1164.898360][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.036959][T12080] openvswitch: netlink: Flow actions attr not present in new flow. [ 1165.076690][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.076934][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.077127][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.086117][T10520] IPVS: stop unused estimator thread 0... [ 1165.098739][T12081] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9457'. [ 1165.529740][T12097] ip6t_hbh: unknown flags 38 [ 1165.754223][T12100] netlink: 'syz.6.9461': attribute type 1 has an invalid length. [ 1165.789895][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1165.963632][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.120013][ T8862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.160241][T12105] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1166.200800][T12105] bond1: (slave bond2): making interface the new active one [ 1166.220019][T12105] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1166.249357][T12100] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1166.855956][T12141] __nla_validate_parse: 3 callbacks suppressed [ 1166.855980][T12141] netlink: 64 bytes leftover after parsing attributes in process `syz.6.9471'. [ 1166.883127][T12132] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9468'. [ 1166.997369][ T8870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.104029][T12136] IPVS: Scheduler module ip_vs_sip not found [ 1167.380934][T12156] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9474'. [ 1167.575368][T11665] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1167.604236][T11665] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1167.609879][T11665] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1167.679699][T11665] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1167.684013][T11665] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1167.753304][T11665] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1167.764994][T11665] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1167.789458][T11665] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1167.967727][T12182] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9477'. [ 1168.289413][T11665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1168.363733][T11665] 8021q: adding VLAN 0 to HW filter on device team0 [ 1168.452304][T10520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.452419][T10520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1168.479763][T10520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.479882][T10520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1168.690069][T12192] IPVS: length: 239 != 24 [ 1169.139560][T27859] net_ratelimit: 2 callbacks suppressed [ 1169.139583][T27859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.179678][ T8862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.320594][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.648043][T12220] siw: device registration error -23 [ 1169.968050][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1170.204949][ T8870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1170.611239][T12250] netlink: 'syz.5.9491': attribute type 12 has an invalid length. [ 1170.618346][T12251] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9492'. [ 1170.876146][T12253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9493'. [ 1170.992175][T12259] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9494'. [ 1170.992205][T12259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9494'. [ 1170.992219][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9494'. [ 1171.054454][T12263] xt_time: unknown flags 0x68 [ 1171.111489][T11665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1171.243700][T27859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.462388][T11665] veth0_vlan: entered promiscuous mode [ 1171.534768][T11665] veth1_vlan: entered promiscuous mode [ 1171.773881][T11665] veth0_macvtap: entered promiscuous mode [ 1171.887151][ T1819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.889456][T11665] veth1_macvtap: entered promiscuous mode [ 1171.983854][T11665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1172.022110][T11665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1172.203189][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.284723][T27859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.322843][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.322896][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.322933][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.322968][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.015828][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.015853][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.324337][ T8870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.361168][ T9296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.361191][ T9296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.664096][T12333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1173.922283][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9507'. [ 1173.922312][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9507'. [ 1174.247069][T12350] ip_tables: iptables: counters copy to user failed while replacing table [ 1174.364725][T27859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.522607][T12367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9511'. [ 1175.246784][ T8862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.428498][ T8856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.135354][T12384] syzkaller0: entered allmulticast mode [ 1176.360466][ T8856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.455697][T12411] ip_tables: iptables: counters copy to user failed while replacing table [ 1176.478447][T12412] netlink: 'syz.3.9517': attribute type 1 has an invalid length. [ 1176.492563][ T8856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.754694][T12412] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1176.936514][T12422] bond1: (slave geneve2): making interface the new active one [ 1176.947032][T12422] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1177.479339][T12457] batadv_slave_0: entered promiscuous mode [ 1177.492373][T12457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9524'. [ 1177.605709][ T8856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.638099][T12457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1177.905901][T12457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1178.161058][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9530'. [ 1178.161742][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9530'. [ 1178.356128][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9530'. [ 1178.356152][T12484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9530'. [ 1178.680446][ T8870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.814945][T12493] lo speed is unknown, defaulting to 1000 [ 1178.827531][T12493] wg0 speed is unknown, defaulting to 1000 [ 1178.991418][T12506] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1179.135776][T12501] tipc: Enabling of bearer rejected, failed to enable media [ 1179.161634][ T1931] Bluetooth: unknown link type 231 [ 1179.161697][ T1931] Bluetooth: hci4: connection err: -111 [ 1179.586680][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.747729][ T8856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.752817][T12525] netlink: 6040 bytes leftover after parsing attributes in process `syz.0.9537'. [ 1180.035946][T12533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9540'. [ 1180.810994][ T8870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.169199][T12564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9546'. [ 1181.181404][T12563] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9548'. [ 1181.483602][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.504624][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9550'. [ 1181.511243][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9550'. [ 1181.857691][T12582] ip_tables: iptables: counters copy to user failed while replacing table [ 1181.877494][ T8856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.137914][T12589] ip_tables: iptables: counters copy to user failed while replacing table [ 1182.337924][T12606] IPv6: NLM_F_CREATE should be specified when creating new route [ 1182.369016][T12605] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9554'. [ 1182.524965][T12610] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9557'. [ 1182.597586][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.944773][T27859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.950947][T12623] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9559'. [ 1183.030215][T12624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.230263][T12630] netlink: 220 bytes leftover after parsing attributes in process `syz.2.9561'. [ 1184.362164][T12655] netlink: 'syz.3.9569': attribute type 1 has an invalid length. [ 1184.580065][T12655] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1184.637515][T12665] net_ratelimit: 4 callbacks suppressed [ 1184.637539][T12665] netlink: Only one type of NAT may be specified [ 1184.637569][T12665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1184.734628][T12659] bond1 (unregistering): Released all slaves [ 1184.838536][T12615] Bluetooth: hci6: command 0x0406 tx timeout [ 1184.838803][T12615] Bluetooth: hci4: command 0x0406 tx timeout [ 1184.898853][T12657] bond2: (slave geneve3): making interface the new active one [ 1184.926392][T12657] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 1185.190328][ T8856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.283368][T12676] netlink: 284 bytes leftover after parsing attributes in process `syz.5.9574'. [ 1185.303206][T12677] netlink: 'syz.5.9574': attribute type 10 has an invalid length. [ 1185.637614][ T8862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.698621][T12683] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9577'. [ 1186.045221][T12708] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9583'. [ 1186.056106][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.056412][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.056806][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.062565][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.062973][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.063365][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.063758][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.064153][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.064544][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.064943][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.065336][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.065748][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.066149][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.066721][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.067121][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.067531][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.067933][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.068327][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.068720][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.069118][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.069550][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.069996][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.070427][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.070852][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.071275][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.071669][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.072064][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.072452][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.072851][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.073244][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.073637][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.074038][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.074432][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.074824][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.075222][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.075615][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.076015][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.096796][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.097243][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.097671][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.098074][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.098466][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.098865][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.099277][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.099684][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.100080][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.100471][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.100871][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.101261][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.101653][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.102051][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.102443][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.102840][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.103091][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.103485][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.103894][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.104288][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.104679][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.105087][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.105489][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.105895][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.106191][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.106628][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.107038][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.107433][T12709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.320971][T27859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.502609][T12706] vlan2: entered promiscuous mode [ 1186.502634][T12706] hsr0: entered promiscuous mode [ 1186.573527][T12706] vlan2: entered allmulticast mode [ 1186.573550][T12706] hsr0: entered allmulticast mode [ 1186.573562][T12706] hsr_slave_0: entered allmulticast mode [ 1186.573967][T12706] hsr_slave_1: entered allmulticast mode [ 1186.953329][T12724] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9585'. [ 1186.953492][T12725] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9585'. [ 1187.045278][T12727] tipc: Enabled bearer , priority 11 [ 1187.405614][T27859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.443528][ T8870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.679277][ T8862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.484789][T27859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.523453][ T8870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.078741][ T8862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.565301][ T8870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.718096][ T8862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.606666][ T8856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.644905][T27859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.685254][T27859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.758621][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.724482][ T8856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.762830][ T8870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.799960][ T8862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.816650][ T8856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.848163][ T8870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.883957][ T8856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.683872][T29007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.837717][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.923321][T27859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.970022][ T8870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.006022][ T8856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.880365][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.042944][T27859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.090809][ T8870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.124692][ T8856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.923928][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.163198][T27859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.317452][T12770] bridge1: entered allmulticast mode [ 1207.437858][T12776] netlink: 1196 bytes leftover after parsing attributes in process `syz.5.9592'. [ 1207.597285][T12781] ip_tables: iptables: counters copy to user failed while replacing table [ 1207.731617][T12786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9594'. [ 1207.731646][T12786] block nbd2: Unsupported socket: should be TCP or UNIX. [ 1207.897317][T12799] ip6t_REJECT: ECHOREPLY is not supported [ 1207.903961][T12799] Bluetooth: MGMT ver 1.23 [ 1207.904610][T12799] tc_dump_action: action bad kind [ 1208.248362][T27859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.331203][T12815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9602'. [ 1208.359516][T12815] netlink: 244 bytes leftover after parsing attributes in process `syz.3.9602'. [ 1208.483610][T12824] netlink: 88 bytes leftover after parsing attributes in process `syz.0.9603'. [ 1208.504536][T12820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1208.612922][T12823] vlan4: entered allmulticast mode [ 1208.612944][T12823] veth1_virt_wifi: entered allmulticast mode [ 1209.057808][T12833] netlink: 52 bytes leftover after parsing attributes in process `syz.6.9606'. [ 1209.216137][T12843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9609'. [ 1209.244459][T12843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9609'. [ 1209.323247][ T8856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.376761][T12848] syzkaller0: entered promiscuous mode [ 1209.376786][T12848] syzkaller0: entered allmulticast mode [ 1209.936944][T12862] nbd: must specify a size in bytes for the device [ 1209.946767][T12862] block nbd0: NBD_DISCONNECT [ 1209.946797][T12862] block nbd0: Send disconnect failed -32 [ 1209.946817][T12862] block nbd0: shutting down sockets [ 1209.959154][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.015090][T12867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9615'. [ 1210.015117][T12867] bridge: RTM_NEWNEIGH with invalid ether address [ 1210.093121][T12867] ip_tables: iptables: counters copy to user failed while replacing table [ 1210.295706][T29007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.539776][T10516] pimreg: left allmulticast mode [ 1210.539909][T10516] dvmrp6: left allmulticast mode [ 1210.689103][T12888] ip6t_rt: too many addresses specified [ 1210.818966][T12892] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9622'. [ 1211.006766][T10516] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 1211.202855][T10516] erspan0 (unregistering): left promiscuous mode [ 1211.248223][T12906] netlink: 'syz.0.9623': attribute type 1 has an invalid length. [ 1211.250920][T10516] gretap0 (unregistering): left promiscuous mode [ 1211.315288][T12907] netlink: 'syz.0.9623': attribute type 5 has an invalid length. [ 1211.332193][T10516] bond0 (unregistering): (slave gretap1): Releasing active interface [ 1211.482690][T10516] bond15 (unregistering): (slave geneve3): Releasing active interface [ 1211.628344][T27859] net_ratelimit: 1 callbacks suppressed [ 1211.628365][T27859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.686987][T10516] bond13 (unregistering): (slave bridge6): Releasing backup interface [ 1211.687016][T10516] bridge6 (unregistering): left promiscuous mode [ 1211.695538][T10516] bond18 (unregistering): (slave bridge7): Releasing backup interface [ 1211.695572][T10516] bond18 (unregistering): (slave bridge7): the permanent HWaddr of slave - 76:e4:44:7f:81:c0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1211.695598][T10516] bridge7 (unregistering): left promiscuous mode [ 1211.695620][T10516] bond18 (unregistering): (slave bridge8): making interface the new active one [ 1211.695634][T10516] bridge8 (unregistering): entered promiscuous mode [ 1211.793752][T10516] bond18 (unregistering): (slave bridge8): Releasing backup interface [ 1211.793781][T10516] bridge8 (unregistering): left promiscuous mode [ 1211.883799][T10516] bond1 (unregistering): Released all slaves [ 1211.931119][T10516] bond2 (unregistering): Released all slaves [ 1211.958196][T10516] bond0 (unregistering): Released all slaves [ 1211.990319][T10516] bond3 (unregistering): Released all slaves [ 1212.013105][T10516] bond4 (unregistering): Released all slaves [ 1212.050534][T10516] bond5 (unregistering): Released all slaves [ 1212.075097][T10516] bond6 (unregistering): Released all slaves [ 1212.104443][T10516] bond7 (unregistering): Released all slaves [ 1212.133531][T10516] bond8 (unregistering): Released all slaves [ 1212.173542][T10516] bond9 (unregistering): Released all slaves [ 1212.195149][T10516] bond10 (unregistering): Released all slaves [ 1212.220116][T10516] bond11 (unregistering): Released all slaves [ 1212.247534][T10516] bond12 (unregistering): Released all slaves [ 1212.275280][T10516] bond13 (unregistering): Released all slaves [ 1212.354574][T10516] bond14 (unregistering): Released all slaves [ 1212.385578][T10516] bond15 (unregistering): Released all slaves [ 1212.411472][T10516] bond16 (unregistering): Released all slaves [ 1212.440146][T10516] bond17 (unregistering): Released all slaves [ 1212.472078][T10516] bond18 (unregistering): Released all slaves [ 1212.503182][T10516] bond19 (unregistering): (slave wireguard1): Releasing backup interface [ 1212.503210][T10516] wireguard1: left promiscuous mode [ 1212.505342][T10516] bond19 (unregistering): Released all slaves [ 1212.551098][T10516] bond20 (unregistering): Released all slaves [ 1212.573388][T10516] bond21 (unregistering): Released all slaves [ 1212.608100][T12868] syz_tun: entered allmulticast mode [ 1212.609219][T12876] syz_tun: left allmulticast mode [ 1212.714720][T27859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.831961][T12892] __nla_validate_parse: 2 callbacks suppressed [ 1212.831984][T12892] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9622'. [ 1213.018007][ T8862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.372789][ T5626] block nbd0: Receive control failed (result -32) [ 1213.552522][T10516] tipc: Left network mode [ 1213.659361][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9630'. [ 1213.786018][T27859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.499244][T12947] netlink: 634 bytes leftover after parsing attributes in process `syz.2.9635'. [ 1214.735619][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9639'. [ 1214.735656][T12962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9639'. [ 1214.891988][T27859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.354906][T12973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9644'. [ 1215.764423][T12984] netlink: Unknown NAT attribute (type=2049, max=9) [ 1215.764469][T12984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1215.839886][T12987] RDS: rds_bind could not find a transport for fe88::107, load rds_tcp or rds_rdma? [ 1215.952723][T12990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1215.972584][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.039498][ T8862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.255633][T13000] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9650'. [ 1216.398667][ T7094] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1216.512488][T12992] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1216.766455][T13008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9652'. [ 1216.994310][T10516] hsr_slave_0: left promiscuous mode [ 1217.005061][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.040634][T10516] hsr_slave_1: left promiscuous mode [ 1217.043634][T10516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1217.043658][T10516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1217.108921][T10516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1217.108948][T10516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1217.374641][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9656'. [ 1217.374818][T13023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9656'. [ 1217.494823][T13028] netlink: 'syz.5.9654': attribute type 10 has an invalid length. [ 1217.523336][T10516] veth1_macvtap: left promiscuous mode [ 1217.523376][T10516] veth0_macvtap: left promiscuous mode [ 1217.523581][T10516] veth1_vlan: left promiscuous mode [ 1217.523805][T10516] v: left promiscuous mode [ 1218.046218][ T8856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.079917][ T8862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.091204][T27859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.884604][T29007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.136482][T27859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.274859][T10516] team0 (unregistering): Port device team_slave_1 removed [ 1220.300166][T10516] team0 (unregistering): Port device team_slave_0 removed [ 1220.544502][T13024] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1220.550590][T13023] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1220.579959][T13028] veth0_vlan: entered allmulticast mode [ 1220.648341][T13028] team0: Device veth0_vlan failed to register rx_handler [ 1220.900821][T13058] __nla_validate_parse: 1 callbacks suppressed [ 1220.900846][T13058] netlink: 244 bytes leftover after parsing attributes in process `syz.0.9659'. [ 1221.145803][T13074] mac80211_hwsim hwsim97 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1221.321043][T13078] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1221.607917][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.855131][T13087] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1221.855176][T13087] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1221.855196][T13087] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1222.196665][ T8862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.203936][T13093] sctp: [Deprecated]: syz.6.9672 (pid 13093) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1222.203936][T13093] Use struct sctp_sack_info instead [ 1222.322616][T13094] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9671'. [ 1222.348169][T13094] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9671'. [ 1222.510845][T10516] IPVS: stop unused estimator thread 0... [ 1222.704714][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.027576][T13121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9676'. [ 1223.034377][T13121] netlink: 'syz.0.9676': attribute type 8 has an invalid length. [ 1223.056668][T13123] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9677'. [ 1223.240333][T10520] wlan1: Trigger new scan to find an IBSS to join [ 1223.515411][T13139] netlink: 'syz.2.9682': attribute type 1 has an invalid length. [ 1223.718343][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.721983][ T8862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.723555][ T8870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.765020][T13139] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1224.418929][T13158] netlink: 112 bytes leftover after parsing attributes in process `syz.2.9687'. [ 1224.611198][T13168] netlink: 180 bytes leftover after parsing attributes in process `syz.0.9690'. [ 1224.642655][T13168] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9690'. [ 1224.956242][T27859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.736755][T13210] syz_tun: entered promiscuous mode [ 1225.981448][T13214] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9699'. [ 1225.988542][T27859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.524100][T13245] syzkaller1: entered promiscuous mode [ 1226.524602][T13245] syzkaller1: entered allmulticast mode [ 1226.559351][T13250] sctp: [Deprecated]: syz.0.9705 (pid 13250) Use of int in max_burst socket option deprecated. [ 1226.559351][T13250] Use struct sctp_assoc_value instead [ 1226.592642][T13248] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9708'. [ 1226.784003][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.040061][T27859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.736188][T13281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9715'. [ 1228.129380][ T8870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.208945][ T9296] wlan1: Trigger new scan to find an IBSS to join [ 1228.308920][T13297] 8021q: VLANs not supported on gre0 [ 1228.559888][T13308] netlink: 'syz.2.9724': attribute type 17 has an invalid length. [ 1228.559914][T13308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9724'. [ 1228.559939][T13308] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9724'. [ 1228.666536][T13317] netlink: 88 bytes leftover after parsing attributes in process `syz.2.9724'. [ 1228.666593][T13317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9724'. [ 1228.666608][T13317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9724'. [ 1228.934947][T13326] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9727'. [ 1228.935008][T13326] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9727'. [ 1229.163966][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1229.478363][T29007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1229.798286][ T8862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1229.988133][T13347] bond0: entered allmulticast mode [ 1229.988161][T13347] bond_slave_0: entered allmulticast mode [ 1229.988606][T13347] bond_slave_1: entered allmulticast mode [ 1230.263580][T27859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.645962][T10513] wlan1: Creating new IBSS network, BSSID da:2d:15:ce:da:58 [ 1230.985833][T13379] netlink: 'syz.5.9739': attribute type 1 has an invalid length. [ 1231.275348][T13379] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1231.334076][ T8870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.442779][T13390] netlink: 'syz.6.9741': attribute type 26 has an invalid length. [ 1231.462682][T13383] bond3: (slave geneve5): making interface the new active one [ 1231.464650][T13383] bond3: (slave geneve5): Enslaving as an active interface with an up link [ 1231.508640][T13378] pimreg3: entered allmulticast mode [ 1231.552670][T13393] geneve2: entered promiscuous mode [ 1231.552694][T13393] geneve2: entered allmulticast mode [ 1231.588167][ T13] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1231.589452][ T13] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1231.589492][ T13] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1231.589525][ T13] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1232.070644][T13403] __nla_validate_parse: 5 callbacks suppressed [ 1232.070666][T13403] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9743'. [ 1232.071615][T13399] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9744'. [ 1232.071634][T13399] openvswitch: netlink: Flow key attr not present in new flow. [ 1232.152877][T13404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9745'. [ 1232.388527][T27859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.842007][T29007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.184253][T10520] IPVS: starting estimator thread 0... [ 1233.216696][T13437] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 1233.268043][T13441] IPVS: using max 25 ests per chain, 60000 per kthread [ 1233.294300][T13440] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1233.294837][T13444] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9752'. [ 1233.421150][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.778666][T13461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9757'. [ 1233.779022][T13461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9757'. [ 1233.958953][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.963636][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.045067][T10516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.063960][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.078138][T13466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1234.078787][ T8870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.143013][T13466] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 1234.469610][ T8870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.555292][T13480] can: request_module (can-proto-3) failed. [ 1234.839054][T13495] sctp: [Deprecated]: syz.6.9766 (pid 13495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1234.839054][T13495] Use struct sctp_sack_info instead [ 1235.499909][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.897955][T13524] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 1236.038474][ T1931] Bluetooth: hci3: command 0x0405 tx timeout [ 1236.633928][T13557] netlink: 'syz.2.9777': attribute type 1 has an invalid length. [ 1236.647482][T13556] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9776'. [ 1236.789811][T13554] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9777'. [ 1237.083788][T13557] bond2: entered promiscuous mode [ 1237.084241][T13557] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1237.090365][T13555] syzkaller1: entered promiscuous mode [ 1237.090610][T13555] syzkaller1: entered allmulticast mode [ 1237.452222][T13559] bond2: (slave bridge2): making interface the new active one [ 1237.452252][T13559] bridge2: entered promiscuous mode [ 1237.475956][T13559] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1238.705594][ T5725] net_ratelimit: 3 callbacks suppressed [ 1238.705618][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.746243][T13625] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9789'. [ 1238.808571][T13630] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1238.922247][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9791'. [ 1239.105506][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.119903][T10520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.120725][ T8862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.144837][ T8862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.230668][T13635] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.489779][T13635] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.489961][T13635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.612543][T13646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9795'. [ 1239.648810][T13644] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1239.665250][T13646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9795'. [ 1239.821479][T27859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.838573][T13651] netlink: 'syz.3.9797': attribute type 1 has an invalid length. [ 1240.198644][ T8862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.383019][T13665] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1240.790196][T13677] netlink: 72 bytes leftover after parsing attributes in process `syz.5.9804'. [ 1240.873845][ T8870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.020369][T13687] netlink: 312 bytes leftover after parsing attributes in process `syz.0.9809'. [ 1241.175530][T13690] syzkaller0: entered promiscuous mode [ 1241.175556][T13690] syzkaller0: entered allmulticast mode [ 1241.222906][T13697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9813'. [ 1241.222942][T13697] netlink: 'syz.0.9813': attribute type 8 has an invalid length. [ 1241.344613][T13690] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 1241.442435][T13703] netlink: 'syz.3.9811': attribute type 2 has an invalid length. [ 1241.442668][T13703] netlink: 'syz.3.9811': attribute type 7 has an invalid length. [ 1241.799270][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9818'. [ 1241.799310][T13713] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9818'. [ 1241.801851][T13716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9819'. [ 1242.277288][ T32] INFO: task syz.1.9008:9971 blocked for more than 143 seconds. [ 1242.277313][ T32] Not tainted syzkaller #0 [ 1242.277325][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1242.277335][ T32] task:syz.1.9008 state:D stack:26624 pid:9971 tgid:9968 ppid:30946 task_flags:0x400140 flags:0x00080002 [ 1242.277397][ T32] Call Trace: [ 1242.277405][ T32] [ 1242.277419][ T32] __schedule+0x17db/0x58f0 [ 1242.277485][ T32] ? __pfx___schedule+0x10/0x10 [ 1242.277522][ T32] ? schedule+0x90/0x2b0 [ 1242.277550][ T32] schedule+0x164/0x2b0 [ 1242.277578][ T32] schedule_preempt_disabled+0x13/0x30 [ 1242.277603][ T32] __mutex_lock+0x7c1/0x1550 [ 1242.277636][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1242.277669][ T32] ? nfsd_nl_unlock_filesystem_doit+0x2af/0x410 [ 1242.277760][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1242.277795][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 1242.277846][ T32] nfsd_nl_unlock_filesystem_doit+0x2af/0x410 [ 1242.277874][ T32] ? __nla_parse+0x40/0x60 [ 1242.277905][ T32] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 1242.277933][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1242.277962][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1242.277999][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 1242.278033][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1242.278074][ T32] ? bpf_lsm_capable+0x9/0x20 [ 1242.278094][ T32] ? security_capable+0x7e/0x2c0 [ 1242.278157][ T32] genl_rcv_msg+0x614/0x7a0 [ 1242.278190][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1242.278244][ T32] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 1242.278288][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1242.278321][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1242.278349][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1242.278399][ T32] ? down_read+0x2be/0x330 [ 1242.278432][ T32] genl_rcv+0x28/0x40 [ 1242.278457][ T32] netlink_unicast+0x7bd/0x940 [ 1242.278526][ T32] netlink_sendmsg+0x813/0xb40 [ 1242.278560][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1242.278594][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1242.278621][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1242.278641][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 1242.278669][ T32] ____sys_sendmsg+0x54e/0x850 [ 1242.278704][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1242.278743][ T32] ? import_iovec+0x73/0xa0 [ 1242.278783][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1242.278840][ T32] ? __lock_acquire+0x747/0x2de0 [ 1242.278872][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1242.278906][ T32] ? futex_wait+0x2a2/0x390 [ 1242.278972][ T32] ? __fget_files+0x2a/0x420 [ 1242.279002][ T32] ? __fget_files+0x3a2/0x420 [ 1242.279043][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 1242.279077][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1242.279132][ T32] do_syscall_64+0x166/0x520 [ 1242.279160][ T32] ? trace_irq_disable+0x3b/0x140 [ 1242.279180][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.279201][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1242.279254][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.279276][ T32] RIP: 0033:0x7f6e08f9e159 [ 1242.279296][ T32] RSP: 002b:00007f6e09ea8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1242.279320][ T32] RAX: ffffffffffffffda RBX: 00007f6e09225fa0 RCX: 00007f6e08f9e159 [ 1242.279336][ T32] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 1242.279351][ T32] RBP: 00007f6e0903506b R08: 0000000000000000 R09: 0000000000000000 [ 1242.279365][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1242.279377][ T32] R13: 00007f6e09226038 R14: 00007f6e09225fa0 R15: 00007ffd7332c8c8 [ 1242.279412][ T32] [ 1242.279449][ T32] [ 1242.279449][ T32] Showing all locks held in the system: [ 1242.279461][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1242.279476][ T32] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1242.279550][ T32] locks held by udevd/4984: 3, last CPU#1: [ 1242.279565][ T32] #0: ffff88807fe1a460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1242.279621][ T32] #1: ffff88807ff7e910 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_open+0x242/0x1a40 [ 1242.279677][ T32] #2: ffffffff8f4f2938 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x219/0x5f0 [ 1242.279764][ T32] locks held by getty/5373: 2, on CPU#1: [ 1242.279787][ T32] #0: ffff88807fc7b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1242.279888][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1242.279953][ T32] locks held by syz.4.8319/7027: 2, on CPU#0: [ 1242.279969][ T32] #0: ffffffff902c5cc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1242.280019][ T32] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1242.280074][ T32] locks held by syz.1.9008/9971: 2, on CPU#0: [ 1242.280088][ T32] #0: ffffffff902c5cc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1242.280140][ T32] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_filesystem_doit+0x2af/0x410 [ 1242.280195][ T32] locks held by syz-executor/10452: 3, last CPU#0: [ 1242.280241][ T32] #0: ffffffff8ee36730 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 1242.280298][ T32] #1: ffff8880330e4378 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1242.280355][ T32] #2: ffff88801b097678 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1242.280419][ T32] locks held by syz-executor/11665: 1, last CPU#1: [ 1242.280434][ T32] #0: ffffffff8f4f2938 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 1242.280485][ T32] locks held by syz.5.9817/13714: 2, last CPU#0: [ 1242.280499][ T32] #0: ffff888034c6a9f8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 1242.280554][ T32] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1242.280606][ T32] locks held by syz.2.9820/13724: 2, last CPU#0: [ 1242.280621][ T32] #0: ffff88801b094378 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 1242.280675][ T32] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1242.280725][ T32] locks held by syz.3.9821/13725: 1, last CPU#1: [ 1242.280739][ T32] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: copy_process+0x28ff/0x4400 [ 1242.280801][ T32] [ 1242.280806][ T32] ============================================= [ 1242.280806][ T32] [ 1242.280816][ T32] NMI backtrace for cpu 0 [ 1242.280829][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1242.280850][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1242.280861][ T32] Call Trace: [ 1242.280871][ T32] [ 1242.280879][ T32] dump_stack_lvl+0xe8/0x150 [ 1242.280908][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1242.280982][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1242.281013][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1242.281038][ T32] sys_info+0x135/0x170 [ 1242.281066][ T32] watchdog+0xfd7/0x1030 [ 1242.281095][ T32] ? watchdog+0x1c7/0x1030 [ 1242.281123][ T32] kthread+0x38b/0x480 [ 1242.281144][ T32] ? __pfx_watchdog+0x10/0x10 [ 1242.281162][ T32] ? __pfx_kthread+0x10/0x10 [ 1242.281183][ T32] ret_from_fork+0x514/0xb70 [ 1242.281207][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1242.281231][ T32] ? __switch_to+0xc89/0x1420 [ 1242.281261][ T32] ? __pfx_kthread+0x10/0x10 [ 1242.281282][ T32] ret_from_fork_asm+0x1a/0x30 [ 1242.281330][ T32] [ 1242.281365][ T32] Sending NMI from CPU 0 to CPUs 1: [ 1242.281394][ C1] NMI backtrace for cpu 1 [ 1242.281411][ C1] CPU: 1 UID: 0 PID: 11665 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1242.281432][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1242.281443][ C1] RIP: 0010:__rcu_read_lock+0xd/0x60 [ 1242.281473][ C1] Code: 00 e9 46 fd ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 65 48 8b 1d 5b 41 e8 11 <48> 81 c3 c4 04 00 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc [ 1242.281489][ C1] RSP: 0018:ffffc9000fb67938 EFLAGS: 00000202 [ 1242.281506][ C1] RAX: 0000000000000001 RBX: ffff888037f33e80 RCX: ffffc9000fb67a01 [ 1242.281520][ C1] RDX: ffffc9000fb67ad8 RSI: ffffc9000fb68000 RDI: ffffc9000fb67a80 [ 1242.281533][ C1] RBP: 1ffff92001f6cf50 R08: ffffc9000fb67a01 R09: 0000000000000000 [ 1242.281547][ C1] R10: ffffc9000fb67a48 R11: fffff52001f6cf55 R12: dffffc0000000000 [ 1242.281560][ C1] R13: ffffc9000fb679f0 R14: ffffc9000fb67a48 R15: 1ffff92001f6cf49 [ 1242.281575][ C1] FS: 0000555588ce4500(0000) GS:ffff888124dca000(0000) knlGS:0000000000000000 [ 1242.281592][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1242.281605][ C1] CR2: 00005555592e89f8 CR3: 0000000037938000 CR4: 00000000003526f0 [ 1242.281624][ C1] Call Trace: [ 1242.281632][ C1] [ 1242.281639][ C1] ? __unwind_start+0xed/0x660 [ 1242.281660][ C1] unwind_next_frame+0x88/0x2550 [ 1242.281684][ C1] ? get_stack_info_noinstr+0x19/0x130 [ 1242.281706][ C1] __unwind_start+0x514/0x660 [ 1242.281729][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1242.281755][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1242.281774][ C1] arch_stack_walk+0xe3/0x150 [ 1242.281797][ C1] ? __unwind_start+0xed/0x660 [ 1242.281818][ C1] ? do_getname+0x2e/0x250 [ 1242.281840][ C1] stack_trace_save+0xa9/0x100 [ 1242.281876][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1242.281899][ C1] kasan_save_track+0x3e/0x80 [ 1242.281945][ C1] __kasan_slab_alloc+0x6c/0x80 [ 1242.281966][ C1] kmem_cache_alloc_noprof+0x2b9/0x600 [ 1242.282002][ C1] ? do_getname+0x2e/0x250 [ 1242.282021][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1242.282046][ C1] ? do_getname+0x2e/0x250 [ 1242.282071][ C1] do_getname+0x2e/0x250 [ 1242.282090][ C1] ? __se_sys_unlink+0x12/0x140 [ 1242.282112][ C1] __se_sys_unlink+0x1e/0x140 [ 1242.282135][ C1] do_syscall_64+0x166/0x520 [ 1242.282157][ C1] ? trace_irq_disable+0x3b/0x140 [ 1242.282175][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.282194][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1242.282215][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.282235][ C1] RIP: 0033:0x7f3a8419d247 [ 1242.282251][ C1] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1242.282266][ C1] RSP: 002b:00007ffe5736dac8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 1242.282294][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3a8419d247 [ 1242.282307][ C1] RDX: 00007ffe5736daf0 RSI: 00007ffe5736db80 RDI: 00007ffe5736db80 [ 1242.282320][ C1] RBP: 00007ffe5736db80 R08: 00007ffe5736eb80 R09: 00000000ffffffff [ 1242.282332][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffe5736ec10 [ 1242.282344][ C1] R13: 00007f3a842344bb R14: 000000000012f402 R15: 00007ffe5736ec50 [ 1242.282367][ C1] [ 1242.282390][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1243.327052][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1243.336175][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1243.346255][ T32] Call Trace: [ 1243.349558][ T32] [ 1243.352510][ T32] vpanic+0x56d/0xa60 [ 1243.356531][ T32] ? __pfx_vpanic+0x10/0x10 [ 1243.361060][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 1243.366637][ T32] panic+0xc5/0xd0 [ 1243.370396][ T32] ? __pfx_panic+0x10/0x10 [ 1243.374851][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 1243.379908][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1243.386095][ T32] watchdog+0x1030/0x1030 [ 1243.390460][ T32] ? watchdog+0x1c7/0x1030 [ 1243.395006][ T32] kthread+0x38b/0x480 [ 1243.399099][ T32] ? __pfx_watchdog+0x10/0x10 [ 1243.403834][ T32] ? __pfx_kthread+0x10/0x10 [ 1243.408451][ T32] ret_from_fork+0x514/0xb70 [ 1243.413062][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1243.418187][ T32] ? __switch_to+0xc89/0x1420 [ 1243.422899][ T32] ? __pfx_kthread+0x10/0x10 [ 1243.427551][ T32] ret_from_fork_asm+0x1a/0x30 [ 1243.432362][ T32] [ 1243.435551][ T32] Kernel Offset: disabled [ 1243.439873][ T32] Rebooting in 86400 seconds..